Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier: oYgiPW2EkZ1KON44Yk6oCIv6DdcslZeke4nM3Ol+i8E=
Subject key identifier: EF:A6:42:32:9D:E1:51:95:BD:16:D7:B9:6C:91:82:DC:BD:67:04:D8
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 0194BCA9BC5012BE8CE727BE00A8D3727F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number: 05E7
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=)
2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: ILLuvqvPmlblIEQPMciIHjvhkYOZP2l7A8/7+CkjI1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bc:50:12:be:8c:e7:27:be:00:a8:d3:72:7f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=efa642329de15195bd16d7b96c9182dcbd6704d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:12:1e:36:ba:39:0f:85:d6:46:5a:6d:ad:
3f:32:15:c6:43:bb:bc:67:a7:db:df:09:dd:a9:21:
59:8c:d1:f1:e7:31:72:05:76:02:3b:55:01:5b:49:
ed:1a:ff:9a:be:fb:a0:bf:9b:cc:a0:fc:a1:43:3a:
b6:0f:12:93:54:84:ce:e2:ed:f1:09:af:19:a2:bf:
13:1d:d3:25:f7:19:bc:40:0c:dd:28:d2:56:8d:b5:
68:6c:ea:9f:85:7e:9f:d1:6f:72:b6:14:ff:5e:a3:
b1:95:5c:bd:05:59:8e:27:85:f0:14:7a:ca:a9:6e:
46:b0:62:f8:90:5b:c4:d6:50:4a:32:d9:44:82:18:
05:9c:f0:6f:6c:26:6b:bc:c1:08:be:0a:c0:f5:29:
f9:9c:46:48:97:0a:92:98:28:5a:ac:fe:ef:05:19:
3f:17:78:93:d3:a5:82:f2:9c:63:b5:0a:f9:e6:bb:
8a:08:8b:2a:83:4b:89:fb:e4:18:f2:be:79:a8:ba:
4e:e5:62:3a:8c:1f:49:c1:e5:da:1f:d5:a8:51:61:
16:a6:78:e6:5b:5e:c5:b4:9f:d5:e1:37:4b:db:fe:
74:d7:e9:d1:2d:de:fe:34:c1:fb:0d:55:cf:05:ac:
dc:75:0e:3d:43:16:f0:e4:61:df:3a:e0:47:33:b8:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:42:32:9D:E1:51:95:BD:16:D7:B9:6C:91:82:DC:BD:67:04:D8
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:c0:93:2a:07:b5:9c:fc:86:44:d6:fe:80:05:d2:e0:9d:
29:af:0d:7a:4a:6b:a9:a2:8e:99:d5:20:d7:d3:77:09:26:82:
44:23:af:9c:05:82:91:b8:27:0d:c6:a7:21:3c:72:12:30:b4:
9e:5a:51:75:3f:49:25:d5:7a:11:f2:ad:27:ba:6c:5f:15:6f:
55:5e:8e:94:17:76:bf:52:06:67:32:70:21:fe:af:cc:57:1e:
b2:d8:28:75:42:fc:cb:7c:39:07:9c:0d:57:f7:ef:0c:54:b0:
66:ea:8b:35:8b:3b:bc:32:7a:47:a9:25:28:c7:8b:3d:d8:1b:
84:52:77:cc:0c:90:b4:c1:e2:8e:d7:61:ff:27:6e:da:fe:a2:
dd:f5:b7:8a:18:11:8a:ee:4f:3d:4b:06:82:20:4c:45:ab:2f:
1b:22:59:d7:9e:57:ae:ac:7b:63:f8:93:70:cd:f2:02:18:6b:
6a:c6:2d:16:a7:ba:98:a4:c1:22:81:f9:01:49:2d:37:89:d1:
be:73:6c:2a:03:fd:c2:7e:17:30:3b:b7:ec:00:80:12:77:1f:
10:d3:32:83:8a:e8:0e:07:db:7e:a1:4e:4c:e5:d6:91:d7:1b:
e1:76:d0:21:ae:25:4b:55:e4:ef:59:4b:ea:ef:ed:e1:ba:a8:
07:19:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:50 2025 by rpki-client