Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json)
Hash identifier: tWa/ecj8+iTFCEcNcu8o1xomkBzu6Fg4rWDUAXj0wuc=
Subject key identifier: C5:79:8B:C9:59:9F:AC:32:38:3E:CF:8E:70:83:6B:D2:7E:55:37:B2
Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Certificate serial: 0194BC052BA27A4098271004DE5ABDAC36B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: HZdIrchIDCiQCwbuPhc70E8YbWU.roa (hash: uDrefFzWXlfoxlCxsdKnI68bX6+lo8xUQyNPFxh8fsk=)
2: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: w8YPIzJBIlZFTDBDubd/9cbv31Pm5GJb93S74atTD/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2b:a2:7a:40:98:27:10:04:de:5a:bd:ac:36:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=c5798bc9599fac32383ecf8e70836bd27e5537b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:eb:8c:d0:ac:11:91:8d:e4:25:70:a6:ef:
3f:b1:78:50:29:d3:35:7f:0e:00:a2:c7:70:dd:ed:
c4:aa:d9:c2:47:13:37:d8:3c:d5:14:99:77:44:06:
78:55:b2:aa:63:a4:40:6a:a8:35:9b:e9:87:79:5f:
53:43:48:b6:6a:8c:0e:f3:09:70:ff:93:6a:a7:6f:
63:5a:af:1f:d5:39:e8:5f:61:71:de:48:3b:10:1f:
8d:99:fe:85:ea:30:15:2b:4b:4f:02:5c:d6:76:06:
b1:43:ba:e9:e8:25:09:29:c3:93:bb:73:62:95:93:
39:f9:58:e4:bb:4b:bd:86:88:79:e7:77:93:6a:92:
de:be:4e:e5:66:ea:14:81:41:a4:c9:8e:27:4c:f2:
12:2e:8b:03:c0:84:00:b8:1f:c1:9f:5a:33:d9:e6:
bd:96:3f:63:60:a8:31:a0:99:54:47:26:10:85:12:
df:9d:0b:4e:2a:f5:66:9b:9d:24:04:bf:18:eb:66:
24:88:d9:5e:2c:48:2c:02:52:d4:d6:72:5c:ae:3a:
ed:1f:a4:1f:1f:c0:c2:5b:6d:98:cf:74:2e:dc:78:
c7:37:90:ba:54:b1:b4:da:cc:ca:af:aa:9b:5a:98:
40:9e:30:e9:10:33:ec:6c:77:f2:ed:cb:66:86:1c:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:8B:C9:59:9F:AC:32:38:3E:CF:8E:70:83:6B:D2:7E:55:37:B2
X509v3 Authority Key Identifier:
keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fe:ec:80:2b:4b:1d:65:d5:1c:e3:96:84:37:ab:24:07:43:
81:54:c0:2c:ce:d6:79:13:e2:1d:c0:36:7e:f0:f7:33:8d:86:
60:98:a1:92:d5:99:0f:f1:1d:9f:a1:12:22:e4:cd:a7:79:72:
f0:38:09:b7:e6:6b:98:3a:93:61:bd:96:e5:5d:5d:0f:bc:c7:
ed:a9:b5:d7:a6:57:d3:ce:56:02:46:27:9b:51:0e:8a:01:81:
70:28:cd:e9:ff:ea:b9:48:da:2d:ab:52:fe:be:67:d2:72:af:
66:e9:cb:b1:a5:bf:e1:57:10:02:5c:f7:03:04:67:cb:02:c2:
ff:2f:cd:28:18:0f:6a:e8:32:68:11:ce:de:5e:88:0a:d7:33:
26:05:a0:de:6b:3e:61:77:08:72:12:4c:55:2e:13:3d:8e:e7:
11:18:a4:b6:46:27:65:d5:cf:38:da:b8:cf:c0:ea:e2:71:1e:
de:ff:b5:bf:d3:98:7f:15:27:0f:42:d4:5e:df:33:b1:cf:b2:
80:45:32:be:9e:3a:b2:67:6d:02:c1:6f:48:51:97:90:c0:ef:
9f:a9:73:6c:30:83:56:0c:89:6b:3c:1c:34:66:0d:05:4d:62:
b3:3c:a5:f6:a4:bf:47:c8:ab:94:82:df:85:f7:c8:1c:b0:8f:
40:d5:ed:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:38 2025 by rpki-client