Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: zd9Df1N8SUzY9ZP6Ncx1IEUV0NXpGmecmZ8GjaoKmr8=
Subject key identifier: 49:B0:58:44:AD:63:0D:23:00:7D:FA:4A:82:97:73:8D:0E:36:91:F3
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 0194BBCE96D9E44B0516A27045FCDDC61413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 1049
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: e2AcDMU2fy2jkXkZentqAlIGUMgZM7p9JGpac/60rrE=)
2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:d9:e4:4b:05:16:a2:70:45:fc:dd:c6:14:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=49b05844ad630d23007dfa4a8297738d0e3691f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:34:e1:8c:4b:44:8e:c5:6e:46:c6:97:3e:
f3:10:8e:bd:ab:c4:1f:f2:3e:b6:11:d7:7a:db:96:
fc:a6:8f:ba:7c:87:f1:dc:70:a4:46:dd:3e:d6:1d:
b5:3e:2c:c3:a7:cf:50:82:6a:b6:01:77:8b:b9:2f:
87:69:17:1b:bc:9a:5c:a4:f8:42:0d:3c:eb:4a:fd:
79:27:72:75:17:ba:4e:f8:80:93:bd:05:e1:17:3b:
07:93:d2:3c:28:30:39:74:91:35:05:57:f6:12:60:
09:6c:06:4b:6e:32:0d:5a:2f:bb:35:2c:1e:be:92:
43:15:9e:73:c3:c1:e4:c5:9e:7c:15:95:e8:bb:fd:
66:c2:78:5d:9a:5b:d6:95:08:54:48:8b:1b:7f:a4:
72:63:86:7c:79:f2:fd:3b:fc:8c:8a:bc:76:78:ce:
86:cd:d5:c5:2a:7d:df:27:50:ec:b0:16:69:87:3a:
b4:a4:3b:28:f5:4c:db:e6:e9:5c:f7:a2:f4:94:a1:
b2:3d:9b:74:a5:e6:a3:d1:ed:7a:d7:de:6e:1e:92:
70:55:4c:be:f2:26:59:e2:9a:8d:05:ef:45:6b:e8:
90:b0:e0:e2:4f:19:81:d9:e4:02:50:ed:3a:82:89:
49:bf:be:11:11:0b:3f:a8:db:b2:2e:e9:07:9f:13:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B0:58:44:AD:63:0D:23:00:7D:FA:4A:82:97:73:8D:0E:36:91:F3
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dd:f3:a1:3d:97:af:0d:b2:8e:0f:86:70:28:d3:a7:12:24:
62:6e:51:d2:b3:c1:d7:4b:e4:1d:79:27:b0:25:f6:e0:53:75:
f3:ce:17:6a:d0:9b:e3:b6:36:84:8d:6f:03:08:59:9e:d5:f1:
ee:d9:3f:6b:e9:3e:01:3e:b4:04:be:94:6a:e4:a1:2c:c1:9d:
bf:c2:6a:c2:05:1d:1c:4c:5e:0b:a8:74:99:b1:71:64:78:eb:
32:ba:f5:c6:7f:c8:a0:b7:2c:19:a1:20:da:42:8f:83:99:22:
06:0f:09:3f:93:84:fe:5b:86:4e:b9:5f:e9:a8:64:68:4a:d5:
d9:fa:a2:41:f2:80:48:9b:40:14:ba:d1:5a:ed:ac:23:7b:e1:
3d:70:ed:65:ac:09:48:d2:60:31:d3:39:32:65:ff:e0:94:59:
e0:fd:f7:3a:3e:79:3f:af:c9:8a:22:45:45:bf:43:dd:3c:e8:
8f:9f:70:e6:69:a5:b5:10:d3:b8:f0:8d:f0:9d:77:a1:0f:2e:
d9:9e:34:cf:c7:59:07:5d:1b:eb:95:91:88:ba:a9:6d:60:74:
a3:09:db:62:8c:99:b2:60:fd:b3:4a:79:36:05:0a:dc:4e:88:
d7:83:b5:a7:55:8e:88:b8:38:31:8b:99:f5:0d:21:e0:6d:45:
14:90:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:15 2025 by rpki-client