Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: aRZ2nSlspPDLX9N9zGKjEuS3cM+bTh/K8KYoSiZBhZo=
Subject key identifier: 82:B1:91:6D:D4:81:D4:6F:FB:26:18:E8:D0:F2:E1:DC:8F:84:47:A0
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 0194BCA9BB94C38AF03C22A5E2D15ABF1C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 0D2D
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=)
2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: /pF31XNFxz1X3wrceRddSx1+unU9tBk/7/wOSU3d2jQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bb:94:c3:8a:f0:3c:22:a5:e2:d1:5a:bf:1c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=82b1916dd481d46ffb2618e8d0f2e1dc8f8447a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:2b:1d:e0:c6:1c:14:77:36:ef:f7:1d:99:
8c:5d:84:56:aa:ce:71:54:12:01:bf:2c:73:02:b3:
47:8e:b8:fe:40:cd:27:1c:53:9b:cd:cf:71:cb:fd:
ae:1c:f5:5f:fe:c3:cc:21:81:02:76:2b:d3:aa:81:
55:8f:bc:77:c8:08:09:0b:5f:f9:21:85:7b:7c:a4:
2d:93:3b:3f:1a:13:98:f2:c8:64:db:c2:33:f1:20:
ca:89:38:44:cc:6c:f6:58:28:19:5b:8a:4f:c3:df:
9f:d0:ee:e2:ab:5b:a2:ec:1a:30:ad:99:42:71:bc:
95:75:55:d4:30:01:7c:ed:ad:51:00:8c:7b:1c:e2:
12:57:17:56:47:d8:d4:0f:58:47:bf:c8:72:c9:f2:
cd:fd:8b:68:f3:ee:6e:61:10:85:c6:d3:22:d4:42:
7f:75:d4:49:f6:8b:bd:05:1a:8f:8d:09:df:39:84:
e9:64:2f:18:40:18:35:e2:b4:4c:7d:18:64:17:10:
a2:ef:39:03:23:83:5e:13:52:3d:37:74:f6:5e:a5:
2b:a5:50:4e:b6:b8:d3:96:f2:c1:c8:26:4a:24:ae:
db:e7:92:29:cf:18:90:9f:b1:dc:13:d1:cf:d2:15:
7d:38:aa:9c:18:11:cb:d5:55:12:f6:71:3a:38:6f:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B1:91:6D:D4:81:D4:6F:FB:26:18:E8:D0:F2:E1:DC:8F:84:47:A0
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5d:f0:a5:f9:cc:76:dd:d0:de:f4:6d:ae:14:5c:6f:2b:61:
7c:19:ea:0c:97:eb:32:b0:84:24:ab:df:45:af:59:32:2a:19:
db:79:d8:79:dc:f7:93:83:a8:b7:ec:3a:ad:2a:98:96:5c:97:
4e:c4:4b:9d:e7:d9:b4:a3:30:26:e0:10:a1:0e:a3:1e:0b:e2:
37:df:da:77:5c:71:40:02:c9:40:c2:61:de:d5:1e:e5:e5:0a:
8e:d8:01:cd:f3:ec:94:05:ac:91:33:f6:20:65:37:ba:3c:6d:
0c:dd:0b:8a:dc:4f:ce:18:ca:eb:f7:72:a0:f6:27:e1:f4:51:
59:14:9e:95:2a:c5:46:4d:4c:6c:2b:d7:95:90:31:9f:21:07:
74:97:0c:ba:5f:db:bc:9d:28:42:d1:1a:fc:7c:98:fc:b6:b2:
4f:f8:c1:8c:5b:2f:b4:55:f3:01:3c:d0:39:e5:ca:62:d6:a1:
96:1c:51:c7:fb:a9:4b:5d:a9:9c:3d:77:da:8f:08:61:2b:ec:
3f:b2:7c:20:92:b8:3d:bf:ac:d0:a7:3b:bf:91:66:7c:73:56:
77:6b:d2:bd:12:0f:94:cc:58:ce:57:86:6a:c1:ca:76:c7:e5:
7d:87:6d:8e:89:fc:e3:2e:19:77:66:db:e5:1d:04:4a:e8:35:
77:17:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:16 2025 by rpki-client