
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: ZaLLBX7oSwpYfV6hwrYxvb1xtWi+0L9hdQY2cAPi9O0=
Subject key identifier: 86:4E:E1:99:1C:F5:55:DA:00:84:B4:EC:08:17:5A:70:69:2D:D2:17
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 0194BD4E75727EAAB9ECC34A348A5C7BB404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 0EE8
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (hash: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=)
2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: l4EmFPUio7oioX33qBjLoCL6UR21bQkmnxgupkjxYtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:75:72:7e:aa:b9:ec:c3:4a:34:8a:5c:7b:b4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=864ee1991cf555da0084b4ec08175a70692dd217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:d4:45:eb:25:40:37:d7:78:ed:7c:44:4f:
15:b7:de:08:1c:d5:4d:de:90:db:a0:de:0c:6e:98:
23:61:82:36:eb:4c:53:e9:20:46:1e:b7:50:63:2b:
bc:98:ac:3f:4f:8d:59:1e:fb:3d:f1:40:aa:a3:ce:
40:fe:51:20:be:cc:97:b1:64:e3:1f:de:98:e9:38:
57:35:77:0d:91:fa:e4:e0:de:ac:c9:b1:0b:c7:cc:
c5:fb:c1:d8:10:82:c7:0f:b8:31:f8:50:51:70:0c:
7e:b0:1f:c0:8b:df:06:8f:61:d3:31:f3:2d:4b:fc:
f8:e7:2d:30:ba:da:93:bc:ff:48:9e:06:04:85:69:
ed:94:6b:c0:13:be:7d:82:7e:4e:75:9e:56:e9:f5:
e8:f1:fe:d2:23:53:ed:88:6b:8c:cf:ef:a3:3a:de:
ab:38:51:75:78:ff:e5:50:d4:89:80:9f:e1:60:43:
d9:71:73:79:d5:33:22:24:90:8d:6c:b4:99:d6:b0:
aa:07:2d:f5:63:b6:12:59:19:f4:66:8f:3c:e5:c3:
43:8a:84:e6:06:07:08:61:cb:56:7d:c8:c0:5b:8c:
9c:f9:f4:a3:b5:90:bb:af:8b:63:02:8b:e5:d8:46:
27:27:a8:be:58:33:1e:fd:34:ad:09:2a:b1:63:84:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4E:E1:99:1C:F5:55:DA:00:84:B4:EC:08:17:5A:70:69:2D:D2:17
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d3:2e:16:f8:af:03:20:87:e6:6e:6b:17:07:67:3c:86:15:
b8:92:9b:36:e0:f0:42:82:1b:01:e2:ad:f3:97:f9:d5:90:27:
3f:54:49:de:71:08:d2:6b:78:56:fc:d0:93:2b:e1:99:88:94:
b8:51:5b:f5:06:8c:17:69:a4:2a:eb:bf:22:b1:9e:a2:c4:78:
d2:d3:6f:24:88:68:b4:b7:62:da:5b:b4:b2:6e:9f:68:99:cc:
57:d0:55:1c:1d:5c:3c:7f:f3:45:2d:69:51:03:8e:ba:b7:3d:
73:c8:89:05:09:f6:db:d0:d1:ab:85:c0:52:8f:0c:80:8b:23:
2a:22:4a:3b:db:ae:42:99:85:e8:13:53:2a:1f:63:18:7e:50:
d0:6f:82:80:be:e8:ec:a2:63:93:db:35:0c:47:2c:4c:f0:4b:
b5:d2:9e:be:b7:83:92:ed:03:6a:00:b3:a1:a6:35:94:2a:d5:
ee:29:6b:b0:3f:49:aa:c3:26:a5:0f:16:ff:05:54:25:88:4e:
11:87:4d:85:3c:51:80:0e:ac:04:0b:b0:19:68:6f:cd:8e:89:
b8:fc:3b:40:79:ac:b2:e8:44:94:fe:a0:0b:90:f7:0f:1f:70:
b4:22:09:a4:1c:69:ad:d1:6a:85:28:14:ae:9e:b6:62:ca:d3:
a2:0d:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:50 2025 by rpki-client