Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
File: XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft (raw, json)
Hash identifier: ViOLvFfU6KsLjFQq+h2oCmrVKaqhHdzeqjiF/D6fERs=
Subject key identifier: 2E:45:F1:22:BF:50:79:B5:86:38:5B:52:97:12:B4:F8:9F:6F:09:86
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Certificate issuer: /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial: 0194BD17A21DBA07B354CF07AFC94FC67433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 8x6SWTgZKaQldoz2iRV_QSdqbtg.roa (hash: LzTLrE8ZLdriPR/s+lretToH9KQur6QiGymJnQCIGiw=)
2: XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl (hash: /aCyyXaAHBRCV8LwnhtwhhABWw0qMHcsAcvqkDt9JMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a2:1d:ba:07:b3:54:cf:07:af:c9:4f:c6:74:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=2e45f122bf5079b586385b529712b4f89f6f0986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:1d:35:ee:32:30:9c:5b:18:f0:9a:68:b7:
50:26:f5:4e:2c:63:9a:a5:11:65:92:ff:63:98:ea:
a5:92:32:07:e9:60:91:06:2a:8b:81:b4:d7:71:ac:
f4:0d:a9:c3:09:11:35:02:64:df:67:95:24:81:5f:
9d:20:35:fe:26:0e:5a:b8:0e:e4:a1:91:ce:b2:1b:
8e:89:07:58:b9:f7:21:64:f8:fa:0b:89:ba:32:0c:
16:0d:82:27:1c:af:fc:4c:8c:96:00:96:4c:22:ec:
78:c2:9a:fe:28:fa:df:30:e6:b5:89:56:42:db:b5:
89:5e:5e:4c:2c:0b:f9:71:a3:01:b1:9b:6c:f1:3e:
de:b3:f8:0f:53:a9:6f:36:45:d6:74:df:a0:f3:76:
75:e1:60:2c:9f:b1:d1:24:ac:f4:ce:64:30:27:90:
e9:1c:62:83:ab:91:6e:29:7a:ba:4a:6a:e4:eb:34:
ae:99:c7:5b:19:d7:0c:24:54:18:86:c4:f7:36:85:
16:4e:b0:ea:f7:7d:4c:c3:06:9d:d6:87:6a:dd:9c:
3f:7b:0d:17:41:e0:04:75:9d:73:70:9c:73:86:88:
27:a7:ba:d4:87:65:26:a9:fa:79:eb:42:3e:05:f6:
ea:13:59:33:95:82:e4:4b:c7:16:f4:25:54:7e:dd:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:F1:22:BF:50:79:B5:86:38:5B:52:97:12:B4:F8:9F:6F:09:86
X509v3 Authority Key Identifier:
keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:46:c3:0f:43:11:1c:12:2e:36:57:a1:fa:93:89:b4:40:4b:
88:b8:a4:c0:30:8f:32:7f:46:d2:a3:f9:d6:ed:e3:ed:6d:57:
56:cd:68:de:fc:92:79:1a:3b:e7:a4:fb:3a:37:af:d8:61:2f:
ca:8f:76:c0:9f:67:4f:32:55:b7:60:87:5e:5a:85:b8:9a:bb:
e4:de:91:fd:d0:21:5e:54:99:bd:3d:d7:c2:dd:01:ce:db:a7:
30:09:ee:9c:e7:05:1e:86:69:50:09:cd:d7:d7:9a:f2:6d:04:
03:6e:4c:64:aa:15:27:a2:5a:0a:bc:5b:74:54:06:32:e3:06:
13:6c:e0:b4:8a:99:49:1c:8c:3a:ab:83:b6:78:b9:cb:29:4b:
aa:8c:af:6a:8c:ac:06:52:23:31:f0:a6:43:cf:4b:98:c2:e6:
9f:0a:05:f0:0c:89:f4:23:07:25:41:1e:c0:4d:6c:47:8f:de:
a4:ad:e6:d4:b3:b8:ad:cc:95:1f:ad:3b:e3:88:87:bf:fc:f7:
86:df:d4:38:d4:57:68:53:af:63:c2:ad:5b:b4:c4:5f:de:95:
c0:70:c6:9d:3d:b5:5e:0d:b3:9a:bc:6a:13:ce:02:09:49:70:
4e:25:2d:11:8c:e0:25:5c:9e:48:c0:4a:cc:ef:2f:8d:05:68:
41:3c:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:58 2025 by rpki-client