Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: 1q7udOxGRimgP62liOGDmUenTQvv55q8GkNukyBblP4=
Subject key identifier: 88:FC:80:92:78:6F:B0:12:93:3B:25:39:BD:89:81:D3:98:BF:FA:B8
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 0194BD1777A0ED93564C6E3E6FCDAD8F1E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 0D05
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: M7JPCcRooH+x9Qan8f+9PFOKpWPsQZSBZXlppSYY0v4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:77:a0:ed:93:56:4c:6e:3e:6f:cd:ad:8f:1e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=88fc8092786fb012933b2539bd8981d398bffab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:7c:5a:9c:66:d1:62:02:95:2e:d6:d5:81:
09:cc:e7:18:7f:cb:d5:7a:35:4d:4b:fd:f4:f8:9c:
4c:71:21:1b:9e:75:a9:d0:db:33:95:03:11:9b:39:
30:16:3e:f1:9a:f2:9d:94:3c:27:84:fe:5c:eb:db:
8e:05:0b:7d:ad:3d:29:75:3d:b6:55:5e:ee:40:81:
d0:9e:22:7d:48:69:1b:13:c0:cc:1b:47:f5:7f:49:
9a:bd:fd:8d:3e:8f:a2:74:f7:fe:96:b5:06:86:25:
1e:94:36:09:93:e2:67:5f:a0:b6:71:d7:25:82:fb:
01:a1:e3:09:ef:a9:cb:44:27:a7:9e:da:ae:b7:4a:
c4:f5:ee:80:b9:09:c0:95:a6:a2:eb:b7:78:1e:69:
2f:93:44:cc:6c:72:3f:f5:f2:b6:db:0a:ef:b1:e4:
d9:8c:96:04:ef:1d:08:34:8e:91:7e:8e:a5:e8:f8:
bb:44:f2:38:26:2c:9a:c9:a3:06:ae:a0:03:4d:ad:
a5:c1:ab:1f:14:9b:cf:fa:33:8e:6a:ef:11:8a:4e:
84:91:8a:87:b6:e5:6b:8d:b1:e5:95:c8:14:ba:55:
db:a9:5c:d0:ad:0d:1f:96:82:8e:6e:25:93:00:d4:
8c:6d:05:13:dd:b7:34:a6:8b:75:f8:54:60:f6:65:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:80:92:78:6F:B0:12:93:3B:25:39:BD:89:81:D3:98:BF:FA:B8
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:70:86:5c:b1:ad:f0:0b:01:0d:4e:82:79:b8:2a:51:6f:e3:
87:84:11:d3:4a:48:14:7b:84:85:e8:f8:7f:e2:2c:82:1f:32:
07:9b:4b:61:cd:78:34:45:89:d0:d2:5a:a1:e7:49:2c:0e:eb:
7f:af:47:0b:4d:2e:d2:33:05:40:b7:bb:94:65:b9:40:6a:b1:
e0:07:cb:95:33:38:18:34:de:57:a5:c4:92:b8:a2:d0:60:5d:
94:e0:2d:83:bf:7d:1c:94:32:cd:88:c9:d8:3f:57:78:30:f6:
5c:3d:1a:b9:59:30:2b:e9:ac:b0:5c:8c:b1:26:0e:d2:7a:cd:
d7:9e:0e:db:87:58:5d:8f:bd:ea:f3:ed:ae:1f:3b:d1:1b:c4:
aa:59:4d:9b:b3:fe:f9:61:21:34:05:20:de:dc:1e:65:fb:cb:
e7:07:ff:c5:12:49:81:27:c5:f8:ab:24:06:4d:a2:05:ae:f2:
f9:6b:16:21:1f:55:cd:8c:38:8c:2c:e7:65:87:19:8f:16:0d:
05:32:27:ec:69:47:04:48:14:4a:1c:6c:ba:43:9d:be:aa:be:
ba:18:76:4c:dc:0e:d8:49:7a:42:bd:c1:16:22:84:94:a4:28:
ec:3c:a4:17:4f:cc:73:c8:43:c0:06:e2:c2:9c:a6:d7:02:21:
d9:21:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:02 2025 by rpki-client