Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File: XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier: nh1ntfEw+wUk8islXah8TaWkZtInEZfyFbisBoJjGz4=
Subject key identifier: 01:C3:28:1F:9B:E3:25:1F:9B:8A:EE:B8:F0:A8:AB:31:0F:BE:4D:7D
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 0194BD857B6A833FA3767F114E0B69628458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: bTZ9JUqvc2xqceVcYBhTYCJBeIF3Daz/HFZMtMMjX0g=)
2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7b:6a:83:3f:a3:76:7f:11:4e:0b:69:62:84:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=01c3281f9be3251f9b8aeeb8f0a8ab310fbe4d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:bb:9b:aa:c5:9c:e0:22:59:1f:5d:97:cc:
64:46:ec:1c:19:95:d2:a2:87:a8:7b:1b:5f:aa:51:
0a:6a:a3:10:57:bc:1c:4f:ae:fc:ab:f2:e9:d2:91:
ca:2a:41:e1:75:65:1d:de:ff:a3:cc:ef:d4:8f:90:
2e:f1:55:db:82:62:f3:7a:c5:35:6d:ca:a6:8a:9d:
3a:69:ae:4c:a8:26:05:d5:f9:20:82:1d:61:ee:bc:
04:c7:dd:1c:91:ae:95:6e:00:5f:41:fd:5e:ff:6d:
96:bf:bc:bb:15:43:0f:c0:a0:c9:34:b1:40:0a:3d:
ef:77:d5:91:57:ab:f1:80:3a:59:a3:9b:2f:82:85:
c7:85:1d:64:79:1d:91:f6:89:30:2c:31:24:b8:d1:
d9:3e:fc:c5:15:44:59:e9:57:ba:e9:4b:23:25:da:
30:d6:fc:10:5d:97:c5:03:f1:30:5f:24:4c:f7:bf:
ff:45:2c:46:5e:e0:33:5a:67:8e:6f:01:fd:e8:80:
57:bc:97:f6:29:af:15:e2:cc:7c:de:0b:26:88:45:
90:38:1d:13:30:67:e4:9d:e4:09:f4:fc:6e:55:30:
4f:fd:09:50:58:61:6b:0f:a6:a6:d4:41:c9:9e:9f:
18:e7:1a:a1:6d:74:ea:c5:fe:b2:57:a8:62:97:27:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:28:1F:9B:E3:25:1F:9B:8A:EE:B8:F0:A8:AB:31:0F:BE:4D:7D
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6a:bf:4f:b1:d0:30:3e:bf:46:67:b2:28:2d:35:d0:bd:51:
48:b2:55:92:a8:77:42:80:eb:ee:c8:c5:aa:b6:b2:3b:52:0e:
7e:fd:2c:26:05:96:ac:19:e5:35:2a:2e:f1:41:cb:b4:4a:a3:
fe:08:90:86:79:5f:70:ca:be:ef:bc:5d:60:e8:48:82:95:2f:
de:6c:5a:ad:57:10:85:6a:00:b3:bc:74:94:14:ae:e3:ab:46:
22:81:f1:31:4f:0c:94:66:4c:7a:93:14:3f:eb:3c:c8:96:6b:
15:26:b3:10:df:c0:90:09:5b:fb:e4:85:5b:4e:7c:b1:bf:38:
de:67:67:ef:93:1b:c4:a2:0a:58:49:17:0a:a8:30:a3:d6:d7:
f4:0f:2b:48:31:f3:e3:7c:6d:88:fa:cd:1b:6e:38:51:43:5d:
df:0b:5f:1c:1b:c0:9f:12:db:e0:64:43:2b:cd:f1:4b:c0:47:
48:d8:4d:f7:5c:a0:04:5c:51:30:77:c4:f7:7d:7e:74:7e:86:
6f:3f:9f:53:cb:27:c8:6e:54:4c:bd:b8:75:f1:cc:3f:e7:2b:
db:18:16:8d:73:a8:4e:a5:a7:3b:5e:ca:59:61:20:d6:04:77:
c9:a9:19:b1:c8:8f:ab:6b:9e:5a:e1:70:d1:3d:56:94:49:46:
0b:2d:f9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:46 2025 by rpki-client