Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: +vwKTl3ZyTy44fopwVKjin2o9cU0nedzdaigXFjtxwk=
Subject key identifier: 11:F6:4D:91:D7:50:C2:28:CE:FB:21:53:86:FD:DD:58:FA:EF:9F:25
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 0194BD17A7DC0EF029FB9F60AC0F66DF7599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: nwFx8HeCp/9s41OaKlylWmlZKk/4ItQD3tw8lmwywwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:dc:0e:f0:29:fb:9f:60:ac:0f:66:df:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=11f64d91d750c228cefb215386fddd58faef9f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:dd:ff:6e:72:ff:42:de:1a:e5:43:bb:7e:
bc:ed:78:62:80:15:fe:36:c1:2a:87:43:f6:fc:26:
0a:e8:c7:34:b5:1c:a3:bc:4e:a5:af:00:71:cf:5a:
62:5f:57:d8:ff:7e:c3:26:af:64:cc:82:94:0d:70:
4c:4d:2c:ea:e8:b6:81:a2:84:d0:59:56:bd:34:1f:
d9:5a:33:59:84:cf:0c:e5:c9:a7:ed:0b:c1:bf:1f:
ac:46:e0:d0:ac:e3:1c:7f:38:2f:04:b2:3d:69:76:
71:9a:43:f1:b9:5d:59:13:b8:a1:e7:60:2a:3f:06:
48:9f:82:70:95:bb:5b:8a:e0:db:b0:0f:fe:55:5a:
9a:ff:c4:35:e8:a7:3c:d3:bc:d1:46:87:8f:1c:cf:
b7:9a:7b:59:86:c8:ee:8b:5c:ec:a9:36:62:97:c9:
4f:06:ee:eb:f0:9e:64:dd:27:f2:f4:db:d9:cd:23:
ca:88:10:ec:73:a2:8b:e9:b6:92:18:16:c9:a4:6a:
62:d2:0b:68:68:aa:b4:83:85:3d:c3:e5:36:04:f1:
fd:cc:a0:ea:82:3e:24:41:e6:46:c4:a8:fa:da:3e:
21:78:b2:b3:3c:61:b3:b0:96:f1:99:3c:8a:ec:9b:
a4:f5:f8:81:26:09:2b:5a:7d:1d:f8:94:6f:a7:27:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F6:4D:91:D7:50:C2:28:CE:FB:21:53:86:FD:DD:58:FA:EF:9F:25
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fa:60:b8:d8:00:07:80:d1:b1:91:18:7c:3c:5a:f2:30:1c:
86:ea:23:55:a1:3c:27:6c:2c:f3:59:f7:6f:06:4f:e4:c6:73:
47:b8:66:4b:90:9f:72:c8:4d:79:31:04:17:d5:ca:ef:ad:75:
5f:71:77:2a:a0:82:14:30:36:07:a9:a8:e4:26:fb:0a:5c:4c:
73:50:0f:10:d1:8c:fe:25:58:9c:cc:87:34:1c:c8:c0:cf:4e:
3e:de:52:19:53:2c:07:7b:99:3c:b7:98:58:a5:7d:55:e2:36:
a0:c0:13:3e:7a:ad:ab:89:3b:f9:3e:c2:44:2c:68:ab:6c:d3:
2d:34:a8:f2:dd:67:7a:d6:80:62:34:c9:5a:2b:a2:0d:e5:10:
5a:b1:dd:7f:02:aa:8a:cb:f7:53:59:f2:98:ee:41:fd:0a:79:
97:8e:5f:2d:2a:b1:b6:8f:eb:c2:62:53:49:98:a0:53:3b:eb:
8e:de:cf:40:6b:2a:49:48:6c:9b:ea:c3:b7:f5:75:93:b4:32:
7f:3f:29:e9:72:ad:50:43:27:bb:5c:03:ef:f0:2c:e3:e0:e6:
47:5b:af:cb:31:62:9a:f6:02:57:a6:86:aa:e0:32:c9:f2:e3:
4a:29:1e:08:7e:0a:2b:c7:7c:b1:07:dc:3c:e0:8d:69:55:4d:
ba:ee:9f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:05 2025 by rpki-client