Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: s+efDInHUViiyZAJWiIxOCFha82drl3FRCpROEVrOXE=
Subject key identifier: BA:AC:8D:74:D1:B7:F5:1A:D8:EF:99:AE:F4:09:7D:B7:57:16:86:EA
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 0194BBCEE52408F1F0D907EB36E9B4458008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=)
2: KgJFjtXpANvbqkfqOR_BDITUz1I.roa (hash: Fx5cDQga5r+zhubxJZXoqZY5CAQumyi8huOxbjPNEyo=)
3: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=)
4: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: kQjEGQ82z2sP2weRtC34k/bMVIn1PVNG2cyzRmo5K04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e5:24:08:f1:f0:d9:07:eb:36:e9:b4:45:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=baac8d74d1b7f51ad8ef99aef4097db7571686ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:7b:b3:6e:82:fa:c9:09:c9:0f:8f:3d:ce:
21:20:20:91:a5:1a:f8:19:b5:ac:84:91:19:7b:75:
a5:88:25:32:19:59:92:5c:46:97:8c:bc:38:0e:38:
b2:11:15:9f:bd:ad:ce:e6:c2:72:9f:45:1d:f6:e4:
5b:34:ff:d4:a9:14:54:f0:58:01:b9:78:f2:70:96:
5a:4d:35:3c:58:0c:25:b3:79:a0:57:17:2b:90:54:
c7:cc:31:6e:4e:11:d5:11:de:d5:9b:41:a1:cb:58:
d7:92:7f:9a:6f:82:6f:41:ae:ce:e3:9d:38:71:8f:
1a:b1:8b:da:67:83:27:e0:16:6d:52:00:16:8b:14:
51:d5:f9:ee:58:39:ad:5e:d4:03:23:a4:92:56:01:
d3:7d:a8:ff:95:8c:4d:27:42:0d:ee:db:f3:34:af:
61:32:c8:d5:7b:b1:ee:ae:ae:71:1c:ff:6d:b1:1f:
20:5a:3e:d9:c0:30:31:36:cf:b2:b9:34:95:0a:b3:
79:ca:d6:4a:5b:f3:97:df:29:bb:0d:6e:74:75:15:
d3:a7:9c:53:07:e1:8d:85:be:be:51:ca:78:80:76:
0f:69:b4:57:21:90:aa:c9:70:62:51:89:ac:7f:b8:
e8:1b:ad:7f:61:e5:7c:53:c8:08:01:59:f5:b5:de:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AC:8D:74:D1:B7:F5:1A:D8:EF:99:AE:F4:09:7D:B7:57:16:86:EA
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:1c:4b:1a:b2:bf:19:5c:83:7b:6f:71:59:62:d2:c6:4f:
16:d3:53:b8:e2:14:10:49:d4:19:17:3e:3a:f1:6b:ca:13:28:
8a:9b:a4:6e:47:0e:b5:41:ea:85:90:1e:7b:17:4f:54:89:c1:
9f:38:1c:1a:33:cb:2c:f6:2c:6a:87:59:13:4d:27:5b:35:21:
2f:aa:07:46:59:df:56:f0:65:65:43:80:6e:ce:c6:4b:f0:7e:
6d:a1:a0:c1:07:da:b2:8f:1b:50:03:49:9f:f1:94:60:21:08:
32:2a:45:b3:4a:4f:d6:e1:c7:51:38:34:62:99:9d:5a:bb:08:
49:3d:e6:3b:0b:9b:90:a2:45:11:2a:5a:6f:50:5b:fb:81:08:
75:e7:71:6c:ed:17:ca:43:d8:63:55:36:ed:c8:36:55:61:e5:
24:cd:5f:66:fe:b2:9d:c8:eb:15:fb:07:cd:48:42:f2:ce:b2:
8b:5f:48:20:49:2a:f0:44:0a:97:7f:1c:82:77:5f:0f:bb:60:
ce:6c:33:0a:d5:69:2e:60:10:b5:93:9a:31:8b:a1:34:9f:15:
fa:77:86:be:17:9f:8f:fd:13:ba:9c:04:fe:ca:0b:86:96:19:
1e:7f:2c:cf:aa:9c:16:b2:8d:60:f7:48:87:e2:99:7b:a6:f5:
24:9f:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:32 2025 by rpki-client