Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: +Lpw4hqD0Gheb5TCiGVBWJC2cktSivxmH5vDp4BIohs=
Subject key identifier: C9:EC:27:82:86:BE:C5:51:93:A1:D8:F7:A3:77:CB:41:7B:88:17:CD
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 0194BD4EAC3FA94B8AA0A5D76E4DB08F03A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: OLRpOWNxaARjrnvlnIRZFNajQbb0lZWc2zPfYfkBflc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:3f:a9:4b:8a:a0:a5:d7:6e:4d:b0:8f:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=c9ec278286bec55193a1d8f7a377cb417b8817cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:74:59:de:e6:cc:3e:2e:18:32:56:52:bf:
42:9e:c4:a0:3e:87:71:77:ea:28:17:19:b3:83:ae:
05:d2:6f:5f:30:10:65:44:ef:95:91:fd:49:13:0e:
2f:4e:99:e1:11:e7:cb:db:22:c5:2c:ff:b2:84:5b:
67:51:f7:6f:49:79:e6:7a:1b:32:fc:69:79:0f:82:
be:ec:22:43:39:27:d2:4b:4c:10:65:48:01:be:22:
88:4c:5c:bb:6d:75:26:88:9c:8f:ad:3b:33:a2:68:
da:67:39:8d:d3:d9:eb:71:ae:20:c3:de:b9:39:cf:
76:a8:6b:f2:c7:59:34:fd:5b:92:33:c5:b1:13:2b:
82:4b:90:cb:22:96:ae:26:a7:3a:86:64:30:75:07:
5a:f3:dd:bc:ab:c1:b1:ad:67:4a:3b:60:5d:0c:a0:
6f:1a:f7:db:42:3e:d9:95:40:b0:b1:a3:86:35:93:
16:0c:f5:26:83:82:85:84:8b:01:e6:00:38:c7:10:
21:a8:53:8d:a0:fc:d5:30:c9:e2:62:a1:10:3c:b8:
b5:4d:83:66:7a:2d:22:c5:3f:7e:62:40:45:e6:a8:
78:d7:31:22:f8:fe:b1:86:a0:73:92:d0:15:d1:16:
10:6a:64:d7:21:e4:74:81:6c:df:8b:31:62:16:07:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EC:27:82:86:BE:C5:51:93:A1:D8:F7:A3:77:CB:41:7B:88:17:CD
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b8:b7:7e:15:55:af:43:44:81:04:1a:14:77:67:e8:a6:5b:
50:90:2b:ce:28:8a:6e:ad:51:bf:21:6b:f3:c9:62:8b:de:80:
6d:27:8a:fc:ca:31:88:4f:63:ae:3a:81:bc:db:d0:54:a5:49:
b2:4d:83:f6:75:68:23:30:a6:f9:94:85:28:fe:33:77:65:89:
cd:b0:b6:2f:1c:26:04:b9:29:9a:81:87:b1:8d:69:bf:c1:d8:
51:42:46:dc:ed:bb:99:8a:10:b6:62:ba:ec:a8:8c:35:06:d8:
a4:ee:f6:5e:73:d5:3e:4b:10:20:76:4d:63:25:8f:b3:f1:39:
4c:e5:35:3c:38:fb:2a:e6:3e:39:42:9e:d2:04:df:29:00:52:
11:18:0a:1d:48:de:90:7b:df:5c:16:e5:bf:c5:31:d4:40:91:
be:aa:40:45:6e:91:3d:b6:a8:37:ec:04:a9:fd:c4:61:f6:e4:
cb:b6:56:5e:4c:73:d7:92:5f:04:fb:0c:15:5f:80:fb:c2:2d:
75:90:2d:2c:b6:34:ff:ae:78:9f:cb:1b:cf:d5:b7:b1:d7:05:
93:eb:47:c1:48:12:90:4c:a4:dd:45:6d:e4:25:9c:03:f5:6e:
1d:80:69:4d:58:18:ea:0d:ff:9e:90:ed:e5:25:83:68:97:fa:
73:87:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:16 2025 by rpki-client