Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier: vnNb4RcGEhIAhOi21X9NO47Ta7ksiT21yQ/btYgBp7g=
Subject key identifier: 5E:ED:12:6F:2E:2A:A2:F1:A0:A2:F1:B4:19:D9:75:E3:04:78:1A:15
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 0194BCA9C595478FDF02539B5E37D39290A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number: 02A9
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: 1uyilBU/Mhu2zFnxwrMKlVE7xJH9J8b3KadWf8LIRmo=)
2: gGyzNC_bO6Lle8RV5kXmkWpg5Y4.roa (hash: WigIW2pDhkOgLUWTO5MtPBxTx3psT/+PtJTxxfI1/hQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:95:47:8f:df:02:53:9b:5e:37:d3:92:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=5eed126f2e2aa2f1a0a2f1b419d975e304781a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:ed:4d:f2:55:39:f9:06:95:e4:4a:3f:82:
12:05:58:be:60:bc:12:fd:3a:9e:d9:8a:3f:8d:32:
5e:44:55:c4:df:a3:91:8f:47:cb:4c:50:a2:88:dd:
9b:ce:e7:90:85:fa:3c:0a:c8:07:65:29:ee:c8:ba:
54:8b:95:66:a3:df:f6:96:30:21:eb:98:54:fa:b1:
b6:e9:6b:2d:a0:45:74:a8:18:90:5c:6f:e7:6a:a4:
c0:4d:f6:0e:6c:75:f8:bc:03:4c:ae:bc:43:30:41:
2c:20:66:0c:ed:41:2b:8d:d9:71:a7:63:55:2d:b7:
01:06:ea:43:21:55:98:94:b3:70:61:42:79:e2:a8:
35:8a:46:55:29:8d:9e:e4:f8:58:87:a2:46:b5:2e:
c5:85:f9:d9:83:a2:de:65:6e:e6:fb:a4:c7:c7:61:
55:d7:3e:84:57:29:16:70:be:54:c6:83:af:e4:b4:
61:61:c5:cd:19:27:ab:21:84:de:7c:fd:d1:a9:14:
f8:87:fc:02:6c:33:48:5f:86:6f:90:31:0c:67:c3:
3e:50:97:a5:f3:dd:c8:bf:71:f6:76:a2:7f:d2:f3:
70:f8:2d:1b:d7:19:80:aa:59:7f:ba:b8:c1:f9:70:
69:b3:97:ac:6e:03:0f:2b:f6:b8:b8:d9:d7:57:99:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:ED:12:6F:2E:2A:A2:F1:A0:A2:F1:B4:19:D9:75:E3:04:78:1A:15
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:db:9a:47:e3:43:43:73:83:6e:ad:90:13:83:a3:c9:4a:
6d:16:b3:97:3d:c3:c5:c3:20:3d:fa:fa:e9:8f:ef:97:5e:0f:
c2:e6:9d:1b:f1:c8:4a:92:70:b4:4e:e6:03:a2:55:1b:a8:19:
fc:33:91:a5:10:f0:17:de:40:c6:b4:4a:23:0e:22:a8:27:57:
db:07:0b:99:6b:b0:0d:8a:46:b0:45:25:c1:32:93:fc:27:99:
ba:5e:bb:35:15:73:7f:65:6c:a7:41:9f:b1:d0:c9:49:cd:62:
a8:63:db:ff:a1:f5:17:80:06:16:7b:a0:35:1d:6d:83:9b:fc:
4f:b8:b2:a7:17:f5:6f:86:ea:dd:53:85:ae:4a:8a:04:7a:5d:
bf:61:49:dc:ef:c4:f1:6c:76:0d:ec:7a:f8:91:5e:a4:3b:bc:
c2:34:25:f8:d0:64:68:8c:94:7a:be:46:b4:72:41:8f:88:24:
c8:0a:9b:50:6a:50:c5:92:3d:68:83:cd:7b:02:b5:f0:ec:e5:
39:5a:d3:a9:9c:df:3d:91:b9:98:c4:e1:2a:07:8f:24:88:f8:
56:9b:79:5a:ca:94:58:19:0f:20:82:5e:2a:43:ef:41:a0:16:
70:db:0d:a4:3d:18:7f:03:2f:be:ad:65:80:f3:1a:c7:01:19:
b8:5e:c6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:02 2025 by rpki-client