Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: pGehy5h9AryA9IpWuVYh6byLlNymMku2Qclenofh+QY=
Subject key identifier: A9:B8:7B:E5:CD:AE:8C:26:24:EA:A3:E8:0F:D0:57:01:06:28:D7:E4
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 0194BC0510C3845189FB3DFE02A37427FD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 131B
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: cm96qgSh3MjRZpm79hO/GFkqvpuHZEP9R7BGkJnAOHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:10:c3:84:51:89:fb:3d:fe:02:a3:74:27:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=a9b87be5cdae8c2624eaa3e80fd057010628d7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c7:bb:5e:59:43:90:1b:95:f1:81:ae:3e:aa:
ac:20:b9:ae:46:0b:c9:db:82:f2:3a:a3:62:16:03:
8b:f3:ee:3c:7f:e4:08:7e:20:2a:fa:66:b1:59:a5:
48:86:2c:02:a5:ac:2f:65:42:f2:63:67:af:bc:f5:
6b:44:1e:98:35:e9:23:b8:52:38:a1:78:9b:74:9a:
8d:82:d5:54:ea:f6:89:c5:0c:ed:e8:23:71:a5:63:
dc:75:93:41:ff:7e:82:56:15:e2:59:24:bd:a4:0e:
78:e3:20:37:d5:63:57:ee:7f:90:c3:12:1e:95:a6:
33:7b:fa:fd:b6:7e:54:38:67:dd:18:d9:d0:63:79:
f6:f4:c5:9d:9d:4c:96:b8:1e:18:78:dd:0b:12:f1:
ab:64:0e:76:2c:e0:3c:f1:c3:af:17:ed:05:8f:9f:
d9:ee:b8:be:40:25:2e:79:e5:63:39:ad:5c:05:29:
d0:d7:79:3b:d1:aa:cf:10:1d:cf:c0:fb:ed:6c:00:
37:a1:69:37:7f:e9:5a:b0:ed:b8:48:9d:94:23:6a:
83:fb:e1:fd:16:76:12:3a:9a:b6:9f:64:e9:ba:cf:
c6:9b:58:32:2d:fb:d1:73:75:29:93:2e:b5:23:95:
bf:05:45:5d:47:d1:2a:25:1f:5f:ba:e3:9e:c8:ee:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B8:7B:E5:CD:AE:8C:26:24:EA:A3:E8:0F:D0:57:01:06:28:D7:E4
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:46:d8:4b:6b:63:5f:1c:91:16:93:23:2c:65:f8:f0:30:b9:
d7:40:52:19:9d:80:bd:cf:f0:79:82:f3:16:ff:27:22:be:53:
0a:62:30:6a:44:78:3e:2f:f6:42:89:5d:b5:d3:d1:bc:a2:c5:
61:0c:85:24:2d:6a:22:f6:63:83:f3:d4:42:e4:91:32:d5:90:
b8:d3:54:bb:f3:47:77:b1:74:21:64:4c:4d:a4:04:55:23:a7:
30:39:f3:57:c5:ac:c9:08:ad:61:c8:de:fb:89:24:56:47:c5:
50:c5:a0:fa:c4:ee:09:19:71:14:60:b5:a6:4e:d4:c5:a4:e0:
19:47:c9:49:6b:73:e0:e8:a1:a2:3c:4d:20:d4:0c:bc:f2:31:
a9:dc:ba:53:40:d0:d4:d0:05:f3:8b:6e:3c:ad:97:60:13:84:
46:0d:30:56:78:78:fa:c4:87:56:e7:b7:85:b1:17:4c:0b:9a:
d7:fb:1f:88:bd:0f:2d:ff:52:a0:b2:23:01:a2:f4:08:be:90:
72:37:18:09:f6:28:39:e7:d8:d5:ee:26:86:25:66:85:d8:2f:
fb:a9:24:8b:30:09:a5:86:b7:ab:44:84:2d:1f:ea:39:92:0f:
f0:11:8f:ee:be:37:74:26:57:db:2e:69:e6:f2:ec:4b:4e:b7:
61:0b:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:39 2025 by rpki-client