Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: aWvmcIOMHo005wGrYzuW+fysOjTSz4wMV8tvcLKNzgg=
Subject key identifier: 21:E5:F0:84:E1:8E:36:25:AF:1D:4B:1D:3D:8D:DD:A2:C5:DB:78:C5
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 0194BCA9CA21D9008FB86D4D64F9A3B6637F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: eV8ij3f0rna2skIgF13P6/RN3Rj2UBSNw98D9btQEQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ca:21:d9:00:8f:b8:6d:4d:64:f9:a3:b6:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=21e5f084e18e3625af1d4b1d3d8ddda2c5db78c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:67:d6:91:2a:74:6d:d7:c6:7b:54:0a:04:
38:23:d4:37:f2:9e:df:bf:19:e3:36:b2:df:5c:77:
98:cb:93:50:2c:e7:22:17:98:3d:51:fc:78:3f:f4:
9d:fd:df:ba:ed:dc:a0:b5:1e:06:bc:e6:46:e8:ba:
a9:09:02:c7:60:12:f8:ac:90:af:06:24:34:0f:e7:
d6:95:e5:26:ea:9c:f7:9e:e3:0f:2e:27:c6:f9:43:
70:68:9a:0e:56:d2:9b:cf:48:bd:b4:6d:72:25:c6:
42:08:29:50:79:ff:91:c7:91:33:04:60:dc:b5:83:
4e:96:df:72:ee:a4:e4:49:d8:6f:e7:51:fc:8a:45:
0f:cf:f8:b0:7f:ea:4b:ad:ef:18:15:97:85:43:5e:
df:92:8e:51:00:a1:92:3b:bc:32:85:76:2d:19:c6:
e5:f3:93:24:b3:21:e2:d2:dd:6a:f3:25:3d:f4:86:
62:b7:f1:56:5b:11:a6:f7:b4:c1:ff:5e:c7:d9:4b:
ca:7b:0e:40:32:e1:ec:ed:76:1f:b8:b6:ae:af:19:
2f:71:a1:6e:ce:72:5d:9b:d5:50:8d:cd:90:22:25:
1a:50:e5:ed:46:1c:1d:ef:c8:ab:91:76:e6:09:d7:
f0:4c:a3:09:1a:d7:e3:de:19:b1:59:9e:b5:a4:c3:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:F0:84:E1:8E:36:25:AF:1D:4B:1D:3D:8D:DD:A2:C5:DB:78:C5
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c3:eb:67:75:ac:b6:34:7d:01:29:60:3a:53:e0:8a:f4:e7:
62:30:7c:7a:06:00:5c:fe:ef:6c:7a:3c:25:1a:61:7b:4c:0b:
3d:75:de:61:4a:b8:41:1f:ce:f8:c9:6f:49:d8:d3:ed:17:c3:
a8:7b:5c:fe:d3:93:4b:dd:28:f5:79:57:af:77:94:2d:05:c0:
d6:ff:6f:07:5f:dc:d8:5a:ec:45:a8:99:84:4b:15:73:8c:87:
dd:76:fc:1f:53:e7:28:61:c8:93:9d:38:99:9f:56:01:18:3b:
32:14:c7:e4:19:ff:cb:6e:7a:e9:b8:0f:b9:a5:b1:4a:45:2c:
8c:bd:e2:8e:a9:58:79:5f:44:7f:4f:74:f8:06:30:5c:5f:1c:
d5:bb:f4:72:39:e5:e3:57:b3:a1:ee:09:3c:64:2e:ea:c0:a9:
46:b4:25:fc:9d:f0:ab:09:dc:5f:ad:56:c4:3d:2e:8a:38:53:
e1:09:a9:20:5f:fd:ad:0e:1e:b4:5d:b3:ce:47:f4:0e:86:6e:
bb:bc:eb:ad:64:c3:3a:53:c8:82:c6:f4:4c:f9:39:80:fa:40:
74:5b:b5:db:ed:bb:25:3a:34:8c:6d:cf:99:e9:95:98:44:1b:
9e:9e:aa:a2:55:9d:38:bd:dc:01:87:b2:a5:41:1b:39:2d:25:
93:03:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:39 2025 by rpki-client