Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: vhgWBRPQbODT7NaIPnAtu+TL7fbQVF22l++zntqR2M8=
Subject key identifier: 30:11:A3:EB:4B:5F:EF:4C:EC:3B:6D:91:5D:AE:B9:E1:F5:CA:FA:74
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 0194BC72DA813A90EC3EDBD166F46F8E82FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0C5B
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: r0aAYsC80yJafNnoyvzDTUx4RozCNX0cr1Bd9ZnpNG0=)
2: rCcV6Zewu1Z9eZJuSlVmU21XPSI.roa (hash: faeDhvfDA6I7kGgODqOk5x1S+G4V8KqFh6Vs8sDfnGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:da:81:3a:90:ec:3e:db:d1:66:f4:6f:8e:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=3011a3eb4b5fef4cec3b6d915daeb9e1f5cafa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:1c:6a:51:a3:cb:cb:5f:5e:31:7f:04:65:
27:83:e4:4e:dc:5f:45:0a:8c:be:e9:dc:e1:f5:92:
5e:7b:ae:c3:c5:a0:14:c7:b3:ee:c7:a6:f4:73:5a:
13:8e:bc:39:7c:38:7c:1f:6a:24:55:2f:77:cc:ef:
41:e1:31:f0:1b:cf:f6:4c:ac:10:f3:ea:c6:3a:1f:
da:0b:b0:35:a2:2c:58:80:fd:85:33:07:a5:36:1e:
83:f3:7a:dd:19:71:8a:5f:1e:ff:6a:93:c4:55:bf:
91:d5:e8:8e:68:9d:88:34:37:48:07:29:12:4a:6e:
1a:10:52:2e:8b:21:1c:2c:a0:51:43:e2:75:07:f3:
fc:2f:7b:ad:2a:9e:48:f8:ba:2e:52:f2:1d:c7:ac:
92:07:4b:e7:69:a9:ce:65:a1:3c:f1:71:c1:54:88:
44:86:e9:1d:3b:5c:d3:d3:47:b0:2e:fd:d8:ba:d8:
85:29:61:7c:88:40:44:a2:37:3f:5f:a0:38:ca:cd:
e4:a6:6c:fb:7e:a6:4f:68:c3:15:a2:49:a1:e5:c5:
e5:62:43:30:b0:d0:ac:2e:bd:98:79:90:43:b3:59:
7c:d1:2b:fe:23:a6:ae:00:32:ae:a0:61:15:5d:0c:
10:f3:d6:00:eb:55:d3:69:b3:37:a1:de:2a:62:5e:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:A3:EB:4B:5F:EF:4C:EC:3B:6D:91:5D:AE:B9:E1:F5:CA:FA:74
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c6:19:1e:73:c0:e3:96:b7:60:bc:cd:13:0e:ed:c2:7e:27:
32:6d:9c:22:84:c8:0a:ab:a2:22:f3:d6:45:f7:f0:3c:6e:87:
96:2f:16:58:de:3c:4d:be:45:5d:2f:33:9a:c0:a8:02:d5:f6:
cc:05:ca:23:86:26:21:a5:7a:76:44:18:26:84:ba:ae:b4:fa:
9d:14:ef:7b:41:be:fb:a8:06:14:f1:aa:d0:c1:d5:23:6e:7a:
3e:88:08:94:08:24:04:85:55:5b:ad:d2:43:fe:f7:00:57:c6:
43:7a:d3:cc:9f:da:93:7a:4c:83:bf:53:86:73:88:03:27:eb:
e6:9c:e0:73:9e:6b:94:b8:80:a0:96:1b:0f:7c:e8:3a:10:1e:
99:5e:54:7b:8f:a6:ee:67:7e:0e:29:4d:0b:39:01:71:c3:53:
e6:6a:d2:a2:e2:1d:34:c0:81:fd:1b:60:42:3a:47:a8:e4:ed:
e7:55:f2:c1:de:73:b4:85:69:bc:89:89:1b:23:da:44:2d:fc:
fe:d9:d0:35:bc:b3:38:e4:1b:b1:2f:d0:7f:a7:6f:ac:3a:7a:
a1:94:50:e6:2a:b2:f8:4a:38:49:e3:45:db:8b:27:36:53:d3:
da:f9:6a:39:8e:c9:62:42:eb:99:38:56:94:4e:9f:43:06:95:
4c:df:00:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:45 2025 by rpki-client