Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
File: XchzCYds7EBPAHv22gQ0wL3GLYs.mft (raw, json)
Hash identifier: hkA9WexIxp+w/IpOVwK+6iZPDWcEcsMcHtZYBJuMiMA=
Subject key identifier: 23:AE:80:36:3D:BD:36:1F:E7:AE:15:BA:21:5D:BD:6E:4B:A7:D7:77
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Certificate issuer: /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial: 0194BD854C98A36E88458F0617DF2DD46799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: XchzCYds7EBPAHv22gQ0wL3GLYs.crl (hash: ZYTACRmYjp10OqM0vnM6VZUmoSzujxw+rCWpiogW1eE=)
2: jcQt-MOzJfjybIamiUioFB-oBn4.roa (hash: vxzopxc1UXJfcspNz3GsRCac77+K0gwBOQSeqjgarpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4c:98:a3:6e:88:45:8f:06:17:df:2d:d4:67:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=23ae80363dbd361fe7ae15ba215dbd6e4ba7d777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:36:44:50:1f:d1:a3:de:3b:18:c8:9f:ec:
e2:cb:ba:33:25:7d:89:af:86:f4:2d:46:45:93:a4:
60:ee:a3:81:07:67:ec:4a:f8:e8:22:3e:c3:62:84:
a6:17:2f:8b:6d:1f:73:31:69:31:74:be:cf:62:e3:
b7:27:b1:a9:aa:68:28:cf:5d:1e:23:d0:e0:3b:aa:
4a:fe:f4:52:fd:aa:63:bc:13:bf:50:53:28:64:97:
5e:33:fb:0f:01:15:7e:00:f4:5f:8d:fe:b6:00:bc:
ee:d0:f0:2c:68:e2:56:55:98:15:d9:31:53:d4:db:
fd:1c:d6:37:cf:26:17:48:1d:78:7a:5a:15:3d:3a:
bf:a5:ad:9c:23:ed:f1:52:4e:fe:6d:21:9a:f4:55:
fa:bb:31:60:94:14:8b:3d:7f:41:d4:80:ca:04:f5:
65:c6:e9:f2:20:c5:31:a6:70:fe:7f:bb:52:33:d5:
22:bc:35:1a:d3:48:45:c2:9e:4e:f1:96:f6:37:1f:
67:be:da:f9:e3:67:22:5c:26:f3:72:f3:f6:27:7e:
ab:28:75:09:eb:5d:05:3e:fe:da:b6:5d:06:f2:a0:
29:a4:1b:5d:14:80:47:e9:32:ab:9c:1d:50:4a:b6:
12:98:b8:be:38:76:44:6d:d4:6d:03:5c:b5:7f:90:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:80:36:3D:BD:36:1F:E7:AE:15:BA:21:5D:BD:6E:4B:A7:D7:77
X509v3 Authority Key Identifier:
keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bc:a4:5a:7b:67:5c:5e:ca:6a:d4:79:da:04:49:a3:60:ec:
97:ec:91:ff:ab:ee:22:5b:ed:85:7a:5c:71:de:26:40:df:b5:
c6:7a:d0:56:78:ef:ee:3a:5f:de:6d:5f:fc:f9:cb:e0:e0:c8:
96:22:8f:69:23:53:db:43:cd:f9:a2:0e:61:95:a3:89:6a:73:
58:e8:d8:e2:d9:31:cb:43:29:91:79:a0:74:b7:78:3b:16:5a:
f6:e2:c2:f5:1d:7f:91:98:ca:5a:32:37:89:b2:06:b7:18:6a:
82:90:64:77:c1:54:10:4c:ab:cb:b3:34:97:3e:f7:c3:05:0a:
11:6d:49:f8:a3:92:d0:9f:05:ce:fa:60:dc:ae:85:36:b3:2b:
20:c5:54:81:bf:61:e2:f5:0d:bf:e7:bf:14:16:40:67:2c:28:
be:97:ae:24:8b:dc:de:80:59:2f:ea:d4:72:17:9d:d4:2c:be:
fc:7b:36:f0:53:b8:d6:97:f7:55:02:45:1b:bf:c3:3e:25:00:
ac:0a:d5:2e:5a:87:44:38:0e:db:c2:e0:6c:29:81:d9:81:f0:
1f:f6:ac:18:38:45:fb:3e:08:e9:89:41:2c:28:17:e3:6b:56:
5b:24:d3:7b:ce:27:36:a4:b9:ff:3b:ac:35:54:41:c7:1e:dd:
b3:e7:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:08 2025 by rpki-client