Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: IeOFJu0PSQogymYeBDzoqdHW76dgVRliQrkgoS5lyKE=
Subject key identifier: C8:D3:11:01:EE:FD:9D:A9:27:B7:9B:FA:B4:BD:F5:82:22:E2:C9:31
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 0194BD8535ACB9FC8B06530207D2BEBA0ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: +ElA86tJwkA36Vf0iHQ4NHqmpuTc6eHpauQ9Vqz1EJo=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:ac:b9:fc:8b:06:53:02:07:d2:be:ba:0a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=c8d31101eefd9da927b79bfab4bdf58222e2c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:1b:56:57:4d:01:d7:d6:b2:cb:aa:3d:19:
3e:b0:27:7c:3d:70:a1:35:c3:60:8e:3d:81:4a:ae:
29:7b:6c:59:bb:48:bb:b3:52:1b:93:0e:c0:e1:4a:
7b:20:19:51:5c:b9:2c:9b:de:60:61:53:6a:75:fa:
4e:57:00:84:18:e7:27:9b:3d:ff:5d:a4:14:37:21:
58:ce:fb:55:80:15:bb:5d:19:dd:20:7e:e8:08:91:
fd:6c:d9:00:ea:56:86:70:5f:db:a4:b1:59:01:83:
df:41:05:3a:ed:f8:dc:73:14:c5:f4:f8:fe:21:b5:
df:02:eb:79:53:10:d5:39:66:21:bb:f8:f7:f3:3a:
1c:98:f9:93:72:0b:b6:1f:78:72:ac:86:cd:6b:0f:
e9:2d:93:87:97:d5:8f:9d:af:97:93:7c:29:cf:d8:
da:89:a0:f6:1b:89:81:7d:38:e5:fd:0f:88:ab:07:
d5:fd:db:11:72:22:25:81:ab:5b:50:ee:19:88:23:
5e:d7:ee:97:12:1f:61:68:20:13:89:d0:3c:13:53:
ef:53:00:42:f1:9c:af:5a:25:b6:9c:18:17:87:08:
9d:53:73:c5:51:58:63:e0:90:d6:f4:67:55:53:1c:
54:bf:3e:31:ef:c2:52:9b:ad:26:9f:c9:9f:91:54:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:11:01:EE:FD:9D:A9:27:B7:9B:FA:B4:BD:F5:82:22:E2:C9:31
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fe:49:30:0d:7e:d0:45:21:8f:f5:af:c5:22:1a:dc:38:43:
82:9f:ad:81:73:0f:02:1f:70:55:34:af:d1:f4:a8:1d:dd:9a:
14:18:52:a0:e4:57:47:4b:98:3c:91:d8:4c:03:da:22:00:f6:
af:98:58:95:76:14:ed:30:d7:79:b1:67:f6:1d:95:63:18:b3:
12:56:5c:66:e5:84:d5:28:45:9a:49:7f:6c:5f:f9:d5:2a:ca:
7b:06:59:f7:59:31:9b:df:13:2a:78:99:d4:57:a7:26:32:18:
fb:cd:77:6f:cd:40:a8:c1:98:e0:4e:12:4e:92:f8:54:33:cd:
e0:87:ab:e3:5c:4d:8b:5a:f9:41:95:9c:22:e6:87:ef:71:64:
88:9a:28:86:ad:32:9c:0b:a4:db:bb:33:8b:5d:ed:5f:96:6c:
49:63:32:bd:fd:6d:e9:91:03:7c:08:f3:07:fd:ff:cb:89:41:
5c:73:bc:4a:1b:56:a0:d4:01:b6:01:b8:1a:be:66:8d:9e:cb:
d4:27:ce:e0:c3:b8:22:bd:e1:8c:ba:94:ca:ea:a1:9f:62:ef:
14:c6:14:09:72:7e:f0:ed:2d:1d:3e:be:84:71:9c:d0:b6:4f:
36:fe:9e:e9:3a:0b:f0:60:d2:5a:f2:74:b1:08:78:2f:8a:f1:
6a:9f:ce:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:59 2025 by rpki-client