Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: yii1bnf/PIGz1wud/ioM2bFPkNLxxJooyDO0gS+mGh8=
Subject key identifier: 85:D2:50:A5:00:84:9E:13:15:7D:92:D9:9F:B6:06:AD:F2:A2:52:5A
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 0194BD854A58BE036C49131161B6BE77D833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: yV/DoYHP6lxZjtqO2rs4Zqtf3xUbLSA9ifU1Q3YUmA0=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4a:58:be:03:6c:49:13:11:61:b6:be:77:d8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=85d250a500849e13157d92d99fb606adf2a2525a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:66:97:4a:bc:be:48:95:d0:43:98:2d:40:
3f:27:e7:63:64:35:02:ae:9d:7e:fa:1d:1b:94:26:
65:aa:6b:e7:86:38:21:d7:30:fb:2f:e5:fb:ab:be:
d7:9e:23:e9:50:9d:f8:c1:6e:1b:2d:95:46:56:9a:
95:cb:5d:12:40:f2:1f:f2:69:1c:b4:78:b6:57:2a:
22:7d:96:17:ad:c1:b9:0c:e9:a9:e1:55:f2:bf:ec:
cb:55:5d:d8:1d:64:8a:3d:89:a2:b4:2c:33:8f:39:
d7:ca:4b:0c:5f:dd:11:e9:72:3a:2e:51:01:45:36:
23:c8:2a:f6:5c:a1:64:e7:a9:46:52:0a:2b:aa:6a:
de:17:ad:45:fe:a5:d5:d9:d0:b9:fb:9f:4d:e3:08:
0a:9a:09:d5:3f:7e:c5:01:1e:6b:bd:22:f7:bd:ec:
27:b5:e2:8c:89:24:38:c7:1f:9e:7e:f8:6a:26:39:
69:d9:c6:6a:b0:23:4b:e2:64:9b:2c:dd:07:16:c2:
85:2e:5c:01:7e:ee:f5:5a:eb:df:c9:68:3f:eb:4f:
30:b0:77:55:1c:01:74:22:2b:55:a5:ed:7d:ff:4a:
aa:e2:76:6d:f0:07:c4:67:6f:01:37:71:9e:fa:3e:
92:f2:54:47:86:de:5f:4c:d1:b5:3b:f7:a8:81:eb:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:50:A5:00:84:9E:13:15:7D:92:D9:9F:B6:06:AD:F2:A2:52:5A
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:10:6f:a6:dc:48:d1:1d:12:a4:3c:42:f5:5f:0a:42:0b:4a:
04:73:01:fc:01:db:a9:6e:5d:21:18:4e:56:cf:72:c8:e8:97:
54:0d:3e:cc:28:6b:4a:31:28:7b:b8:4b:5b:52:60:a0:dd:c4:
72:03:76:fb:ea:b5:d0:f2:26:ee:bb:52:67:3b:c3:ce:31:9a:
75:b1:17:85:cb:f2:92:18:d2:9a:12:91:57:7a:46:01:be:76:
53:15:49:cb:b2:a3:dc:d6:b2:d4:4b:7c:32:3c:31:59:d8:8f:
11:dc:4f:50:d7:b4:ce:58:08:fb:51:aa:a0:98:81:23:a7:01:
c2:4a:c0:04:41:4d:5b:89:5c:99:19:f1:d1:d7:65:17:7c:25:
76:e7:9d:74:9d:a7:d8:98:e5:b8:54:cc:69:2f:cd:ea:bc:1f:
3e:df:7a:4e:ac:d4:72:2a:2c:79:45:8f:55:2c:70:a3:9a:b0:
a6:d6:bd:cb:53:70:61:1d:b7:bd:f1:4a:a6:aa:f2:6f:e3:57:
f8:bf:7c:74:8f:fd:98:3d:03:a8:34:ea:9d:41:e1:e5:0d:fd:
f7:9d:99:cf:04:67:be:a0:b2:1b:44:2d:5f:f2:27:06:3e:08:
d9:fe:31:a9:55:eb:c9:f1:bb:d8:1c:f3:76:56:84:a8:0b:74:
c8:12:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:59 2025 by rpki-client