Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: Q/WheAWp5bcIxfMYEVkTYzAfUh2vboA93MFUrgO5eLo=
Subject key identifier: F0:33:E8:AF:49:6D:10:E5:05:C6:C3:DC:DB:16:68:4C:A2:A2:EB:4A
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 0194BCA9EBF0F90E21817771533DEA9A0FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 104E
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: eOo/9mOnAvv6AviNPPfefZBqUh3yFoD6YeI2xMXh9CI=)
2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:eb:f0:f9:0e:21:81:77:71:53:3d:ea:9a:0f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=f033e8af496d10e505c6c3dcdb16684ca2a2eb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:9b:45:ad:02:2a:23:92:28:f1:03:a1:2b:
b9:84:60:20:9f:a0:7f:ad:78:c2:e2:74:5c:0a:bf:
a7:06:de:ba:5d:a5:8c:54:41:9a:ed:d4:82:07:7c:
17:19:52:cb:c8:2b:c1:5e:ce:36:c9:b0:6f:29:08:
d4:76:b7:b7:9d:7a:96:09:68:86:99:95:8c:12:60:
1c:d4:ed:b5:db:94:f7:0d:1f:40:64:0e:db:b2:f8:
a1:59:81:58:bc:d2:86:90:99:6c:ed:c6:af:67:95:
3c:01:d8:be:ee:61:3a:d4:d1:5a:fa:97:38:d9:8a:
8d:fd:91:67:81:34:f1:a9:d4:e9:ed:c8:a1:85:7c:
43:1e:22:4e:65:2d:f3:d8:4d:01:fb:8d:be:f7:db:
c5:f4:55:1f:a1:14:c5:d2:95:ec:f6:6f:d7:25:95:
8e:78:88:35:98:a2:8f:a8:cb:6c:e0:f2:39:db:b5:
09:35:04:cd:0d:bc:e6:53:b1:36:4a:ae:5f:4b:3a:
53:b2:fb:b2:21:15:10:92:52:85:77:c1:55:cb:2e:
9f:5d:89:f7:fe:3e:b7:9d:11:b9:1e:74:ae:7c:8e:
4a:35:f6:9b:c2:1b:70:8a:58:30:b7:64:3c:13:bb:
c3:04:a6:9b:15:3a:d2:18:5d:01:34:79:c8:a5:d5:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:33:E8:AF:49:6D:10:E5:05:C6:C3:DC:DB:16:68:4C:A2:A2:EB:4A
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:86:7a:33:3b:56:cd:2f:e2:b9:43:34:f4:64:ec:62:9b:64:
e2:a7:28:f2:26:50:bf:e7:ea:aa:a3:59:85:85:3b:c8:f4:da:
56:73:9c:cf:ad:62:f1:1a:99:47:5c:77:33:ec:4e:63:c7:91:
13:ea:7e:48:c1:53:07:7b:b2:c4:db:b9:d8:60:a0:b5:4a:96:
fb:b7:b0:3c:54:10:a6:89:a9:51:fe:02:95:2d:43:5b:91:55:
cb:9e:50:25:2d:af:fc:bb:08:6b:b6:c6:dc:02:6b:b2:21:2b:
28:17:89:7e:05:6d:45:2b:87:c1:c5:fc:75:6e:d4:5d:0a:b3:
b4:d8:98:78:a1:96:e2:4d:c2:38:1d:99:8e:e7:f8:9f:a6:23:
14:9c:22:00:9b:15:e4:d6:d2:cc:26:de:a2:40:c2:c6:57:e8:
16:59:fa:6a:2d:b4:ff:7c:c4:e5:e9:a7:98:8b:ae:0e:9a:d0:
7a:fa:f9:52:ed:9f:06:06:3b:3b:e4:83:48:39:39:0e:d2:9a:
4b:9d:6d:b1:8e:f7:a3:76:98:08:c5:ad:a6:4d:e1:c0:57:01:
37:03:cb:a5:65:21:1d:8c:19:27:2b:0d:7c:fb:3a:41:6f:2c:
67:d9:ce:a6:60:81:02:b3:e9:04:1c:d0:43:33:f4:85:12:e4:
68:b1:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:46:26 2025 by rpki-client