Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier: 5YC0KjAfIjYW4htnBq9RPGz12Vzr1pp8aGQMZZ6uuPc=
Subject key identifier: 84:5E:65:CC:DA:5D:01:C9:07:35:8E:15:33:6B:94:7C:5E:C2:CF:4A
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 0194BBCE39E1B360F970E5EA0765B4437EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number: 0F39
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: QGKSiFavp9LMElSoLZBhqzLqFMM.roa (hash: ip/2uYmlI+BKnaF8k1mqNHwsPmNtHEQrk8aTeSCdMUA=)
2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: 1dX2SOYnfty8iwm3op6KtrcqQlR1AGjkmFUWcb/kiH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:e1:b3:60:f9:70:e5:ea:07:65:b4:43:7e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=845e65ccda5d01c907358e15336b947c5ec2cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:80:86:01:b7:24:25:8f:aa:15:64:7e:d0:
08:d9:78:9b:e1:c3:c6:ff:a7:28:f0:51:0e:86:ee:
a5:d0:40:ac:7b:e3:c3:c6:62:e6:65:f1:7e:22:5a:
76:cf:2a:2d:fb:64:44:61:0e:15:d6:fb:c4:68:24:
3b:2a:1c:68:3c:a1:de:fc:df:9d:8b:9e:ea:05:e9:
fe:29:1f:4d:d2:cf:01:ee:4e:21:fc:51:36:f3:d3:
1a:63:98:1c:87:60:0b:38:b9:a2:ba:47:27:01:1a:
01:9e:f5:84:76:7f:39:31:35:18:32:3d:80:d1:ca:
78:7b:d5:c9:3b:48:be:da:fa:46:17:64:e2:36:9e:
df:c8:1e:45:51:e8:ec:7a:3d:46:38:fc:b7:a6:b6:
5f:43:65:c7:14:69:89:f5:18:bb:b9:dc:8f:7e:86:
bd:4b:e3:34:e4:d1:54:2a:8b:5b:66:3b:a7:5a:17:
bf:53:e2:3d:a6:ee:66:41:6e:75:b0:65:84:aa:07:
00:89:1d:0d:09:56:b6:c8:c9:26:94:3c:36:89:db:
31:21:84:24:e1:62:cf:c5:e6:c8:7d:18:f1:c7:90:
b3:3a:b2:6b:45:d0:dd:fb:fa:c0:9a:dc:5f:51:8f:
ab:5c:65:16:3e:ed:5d:f6:0f:dd:c6:a3:d6:9d:29:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5E:65:CC:DA:5D:01:C9:07:35:8E:15:33:6B:94:7C:5E:C2:CF:4A
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:34:f8:75:39:ae:92:60:7c:fc:22:4f:4a:71:c0:d5:2c:fd:
85:54:9d:36:f7:2e:f8:8c:39:d9:cd:e3:38:dc:ab:1d:f6:4c:
14:65:84:2c:cc:84:10:6b:7c:d7:3b:e0:50:0e:71:46:87:27:
4e:4b:e6:3e:15:0b:bc:12:72:2d:d9:77:65:9f:34:1c:39:a3:
54:04:e8:36:e8:95:7a:5b:d2:c8:61:70:fe:e4:4b:83:52:ca:
93:54:4a:8f:53:69:e3:b8:13:89:6b:31:4b:a7:d1:ee:c4:22:
39:2c:ec:3a:5b:6d:7c:44:bd:e4:34:ab:a7:1e:19:d6:d4:89:
c7:96:1f:9c:ac:84:58:67:4b:73:76:1a:75:5d:ea:8e:af:0a:
f6:32:dd:24:63:48:25:57:9a:0a:88:dd:30:f3:30:4f:94:94:
15:5c:cc:23:fc:93:07:68:98:8f:d3:ea:2e:30:cc:af:b8:28:
55:46:68:41:ca:a1:4a:ba:d6:32:33:e3:d7:d0:33:c5:d5:58:
27:4c:2e:5c:e4:f2:17:28:2e:43:a0:fe:a0:1c:a6:77:3f:ab:
d5:64:68:ba:46:1c:e6:3b:8b:3c:a8:fe:35:b7:93:be:57:2a:
3c:c1:da:92:a5:c4:07:67:b4:53:73:f9:14:7a:e0:02:fd:58:
ec:02:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:06 2025 by rpki-client