Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: JoehPf3xXJCLY7KpqBwyo11Q1TJ60BQGnEtchJ2bT5Y=
Subject key identifier: 5C:EA:97:59:D4:DD:C2:10:1D:84:EB:77:D3:6B:C9:D5:A3:BA:6E:EC
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0194BC3BC12ECBF905E8713183FC5F820BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 074C
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: p/wFo4doU4OW0Juc3R8QVpj56naZ/9Shtv2EHnmRK8k=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c1:2e:cb:f9:05:e8:71:31:83:fc:5f:82:0b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=5cea9759d4ddc2101d84eb77d36bc9d5a3ba6eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:19:34:aa:b8:88:f9:75:8e:37:86:b2:e0:
e0:e1:1e:da:48:eb:75:46:20:0d:f5:0a:a4:87:8b:
49:b6:7a:f7:25:4a:99:9d:4b:d8:a7:14:02:08:6c:
8b:26:01:c0:3f:7c:74:13:b6:bc:7c:e0:54:f7:58:
4e:e1:a0:af:99:52:94:1a:4e:6d:25:2e:98:34:58:
68:58:77:da:10:64:19:8e:ef:16:60:9a:28:c9:73:
db:0e:52:5c:56:32:61:f2:e7:b5:76:81:8e:54:14:
ae:8a:34:c5:2a:c1:23:05:c1:d9:11:18:fc:5e:6c:
8e:c5:e4:e1:49:e2:a5:ee:26:4c:12:a6:45:6e:90:
f7:83:74:e3:e4:6b:7b:fd:b0:7e:b5:5f:fc:be:de:
97:60:23:b6:86:8f:d7:ba:57:32:26:4f:c1:91:ee:
91:e3:70:7a:0d:94:8e:f0:d3:ef:2f:a3:79:a4:6f:
a8:e9:0e:23:e5:3e:4b:7d:63:ad:a3:b6:bd:b3:2c:
5e:29:fc:49:bb:cf:ac:20:2e:94:3a:a9:21:99:26:
7c:b1:a1:6f:1e:61:01:68:98:3b:43:c8:eb:89:0f:
e4:49:a1:68:cc:09:69:ac:0e:bb:41:40:53:e7:21:
e5:3a:0b:fb:43:e9:cf:6a:91:28:f1:d3:d6:29:70:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:97:59:D4:DD:C2:10:1D:84:EB:77:D3:6B:C9:D5:A3:BA:6E:EC
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:86:d4:69:a0:6c:e6:42:b5:c9:6a:e1:7b:60:d6:1b:37:fa:
63:5b:41:e7:3b:0c:ac:4f:80:45:a8:7f:d7:d7:ed:91:5f:a7:
d9:a6:7d:6a:6c:13:be:25:6f:9d:8f:7c:bb:4c:83:ec:ec:57:
58:e5:db:3d:7d:ab:3a:7c:80:39:61:89:81:be:e1:ce:f3:32:
9a:3f:0f:57:a1:0d:e6:3f:78:02:11:91:d1:7c:61:97:d4:f7:
b0:22:f6:ed:6c:c3:8a:59:4b:a7:e0:17:36:ab:1a:f9:5b:a0:
d6:fc:e2:c8:7b:49:90:e5:ba:e3:b3:93:05:66:55:3d:fd:27:
cc:e5:00:69:58:06:7d:b6:1e:c5:aa:fc:cb:67:07:14:72:c7:
28:aa:b8:70:0a:fd:f4:60:58:aa:36:63:43:b4:0f:8e:04:a1:
56:bd:e8:ab:e4:00:b5:1d:31:85:ea:d7:36:1a:f1:a4:a2:06:
8e:ae:75:de:90:a3:fc:48:5a:df:d7:f4:ef:82:17:df:59:b4:
51:49:0c:80:27:13:18:5c:19:df:db:10:f2:61:2a:06:86:32:
1f:97:0f:8f:50:8c:83:3a:77:b1:30:8d:fb:53:4a:63:bb:81:
2a:a2:dd:2e:dd:f5:4c:a9:7e:c9:1f:db:00:8d:56:36:35:4d:
16:d1:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:30 2025 by rpki-client