Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
File: XYHR_0WxVHwAqEtG75nsot-9Rbw.mft (raw, json)
Hash identifier: oxYyG2Sjj21vg/CTbZDwddb5JVI9TMP6lCmlAQTe/Qg=
Subject key identifier: C2:8B:65:F9:43:33:D4:A7:04:EC:36:C6:41:2D:39:8B:C3:F5:70:65
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 0194BCA9ECF7CEE1E544B8748640E5EFDCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: C-JYvDSVCc5Zd_4Sd7FiFR4ridU.roa (hash: Fud1edK7T1C6PqdOPqDnlVWq4JxXY+eiVXIDYHC1t50=)
2: XYHR_0WxVHwAqEtG75nsot-9Rbw.crl (hash: ZOtAJx0Yhz/csEM3vgZYGQBt0v15J1+U3iNIE6OxQV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ec:f7:ce:e1:e5:44:b8:74:86:40:e5:ef:dc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=c28b65f94333d4a704ec36c6412d398bc3f57065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:fe:35:ae:ab:04:a7:86:68:bc:34:86:5b:
74:9f:7d:19:5d:81:03:25:f0:91:01:30:84:b5:a2:
c2:f7:f2:eb:79:80:b6:b9:f1:b0:bf:24:e9:30:31:
56:64:7c:cc:96:73:d1:96:1e:6e:1e:4f:fd:4d:97:
02:ae:6f:22:75:1f:e8:2e:f9:25:f4:a6:2d:f5:d1:
97:93:19:ac:a7:f6:d9:65:e7:a3:61:ee:d5:b9:a2:
bb:da:96:aa:d3:2f:04:23:c2:9f:ef:e8:0e:54:ec:
6f:2b:e3:f1:13:7f:f7:93:11:5c:83:7e:90:28:62:
2c:b9:d6:ef:9c:83:20:fc:7b:f1:8f:19:da:ce:eb:
5c:18:2a:ac:9b:98:33:a2:fc:27:da:fe:fd:fe:dd:
08:e5:87:17:83:b4:bd:f4:67:43:27:75:44:65:a0:
8d:24:a2:5f:3a:a2:d5:de:ca:2b:7d:20:46:11:91:
d5:5b:97:eb:03:7c:4e:d7:f8:21:e0:1e:8b:7f:e0:
fa:28:ad:25:9f:13:db:75:f1:5c:25:ba:c5:37:79:
3f:11:58:bd:60:49:60:7c:e6:1c:85:b1:15:dc:53:
79:65:d8:d2:c4:50:b0:ea:39:a6:ae:35:ef:1c:96:
84:34:35:d5:aa:82:03:84:20:bf:e1:76:4d:12:30:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8B:65:F9:43:33:D4:A7:04:EC:36:C6:41:2D:39:8B:C3:F5:70:65
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:19:ed:82:ea:a2:23:9e:7a:6f:d5:9f:0e:e5:0d:a8:9d:
6a:c7:a4:a3:70:d8:72:e9:cc:d3:c8:58:42:55:97:de:20:49:
78:70:a2:01:91:23:c8:19:6d:10:10:92:16:fc:18:61:f6:d6:
c5:60:1e:b1:02:7c:07:a9:8a:77:1a:8b:24:0b:1d:6d:d1:f4:
27:f0:b3:76:dc:73:b2:b1:38:ef:c2:23:21:18:ac:c9:14:03:
67:c8:f8:eb:0c:8e:83:c9:84:c5:e8:6b:e0:96:cd:6c:18:99:
3e:a0:2b:64:53:f7:20:94:81:19:fa:73:ad:89:e6:f9:f2:bf:
5c:c5:28:4f:d9:25:7f:13:90:15:81:f0:56:50:9e:73:6d:08:
eb:0a:eb:36:9f:0d:52:a3:d0:30:94:62:73:c8:97:b8:50:9a:
e6:93:84:87:31:5a:e0:bf:3d:11:e8:eb:54:f7:0c:3d:b5:3c:
df:71:6e:63:39:8e:a4:57:19:a4:c5:51:ba:74:99:57:f2:94:
b4:d8:db:11:e5:34:32:76:48:e3:d4:e6:fb:e4:e7:32:08:61:
d9:c0:c6:1e:2c:9f:52:e7:2f:f3:9a:d0:3d:86:0c:63:5c:1a:
cc:33:63:0a:a4:8c:08:4c:a9:0d:4a:3d:60:de:ed:4d:02:74:
f1:9f:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:34 2025 by rpki-client