Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: f5M2tV49qOykB0NjDAU+yAc0Q/slKpMWkksbKUz6otM=
Subject key identifier: 95:68:28:A5:F5:82:81:5D:55:14:61:C4:57:66:27:EF:BB:59:CE:89
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 0194BCE07125F1C2735CEF779C6598BDEB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 05A9
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: 11ztDJeDOmE2nXgdj0WK5eX67XAu4CKiHxg5LaIZaq4=)
2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:25:f1:c2:73:5c:ef:77:9c:65:98:bd:eb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=956828a5f582815d551461c4576627efbb59ce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:81:61:48:92:a6:f6:38:c5:b1:6b:b0:37:
d9:85:bc:96:d5:97:78:45:54:7d:57:b0:42:dc:bf:
c3:30:f0:00:10:81:c5:9e:af:72:c5:a1:d8:fc:f9:
4b:fa:5d:35:8b:e1:c6:fb:8c:1a:23:61:4a:39:66:
11:82:77:01:32:47:da:03:4f:d1:cf:05:8e:4d:c5:
2c:81:01:f6:97:0a:74:03:9d:25:03:68:ac:e0:18:
33:97:da:33:33:b1:61:8f:4e:9f:da:5f:66:19:ff:
bf:1d:7d:12:59:6b:2e:cb:b8:72:04:75:51:21:de:
45:4e:6a:56:19:33:7a:83:60:ea:65:76:7b:a0:84:
ef:0a:44:09:08:89:88:7a:25:b6:63:52:fb:35:17:
ae:3a:14:e2:e0:dd:c4:60:4e:8c:d2:f9:cf:c0:db:
43:35:c1:7d:d9:cc:7d:5b:9d:fc:db:fc:39:ad:f8:
57:c4:e0:b3:59:de:85:43:c9:c4:d6:2c:09:a3:f9:
a2:df:30:0d:25:a1:9e:34:f3:ce:b7:f0:4f:d5:f0:
dd:fe:4f:2f:cc:d5:2c:4e:b1:53:46:9a:c9:e4:08:
e0:87:73:11:41:b2:3d:c4:b4:48:ea:7a:0c:6a:7b:
18:31:88:d3:8e:a6:68:b0:12:2b:bf:cd:fc:8a:d6:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:28:A5:F5:82:81:5D:55:14:61:C4:57:66:27:EF:BB:59:CE:89
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e5:3d:c9:9a:7d:83:ae:f1:6c:ea:86:ee:31:31:e9:a9:d8:
f3:70:37:71:45:92:b4:b9:11:c8:3b:ab:75:2f:0b:a3:a0:96:
0c:0a:ff:cb:6f:93:a0:49:8e:55:fc:02:06:92:63:56:f7:83:
37:4f:1b:9c:f4:8b:c8:56:95:61:64:d2:ec:1b:cd:9b:3e:29:
e3:21:7a:35:0d:d1:ea:a3:d0:ec:27:80:aa:c9:7a:18:33:f2:
d8:47:9e:a2:7e:64:d8:c4:0f:d3:51:d0:7e:51:8b:94:37:7a:
4e:3e:46:16:b5:b5:77:91:a8:06:dc:d4:d0:16:62:33:60:ae:
ae:12:9a:3b:d5:29:cd:7f:31:2c:5b:bb:9b:38:1d:92:53:f7:
33:7b:ed:c1:4c:46:bf:d7:c4:b7:71:16:dd:2a:8e:40:23:38:
d1:90:2a:8e:2f:6f:24:14:23:79:28:59:2e:cf:c7:0d:ac:5e:
50:3f:da:85:99:1f:41:ff:9d:1f:8a:12:33:36:d5:f6:37:ef:
e2:a0:b5:d5:ec:0d:93:b8:e0:85:c0:05:61:60:9f:aa:7f:11:
22:f0:bd:9a:73:b6:80:4a:36:47:08:a3:3a:4a:56:50:af:10:
d1:32:7b:37:6f:0d:84:af:9b:b6:4e:01:0d:a9:8b:a8:b1:c8:
3c:9b:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:26 2025 by rpki-client