Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: 9HUQnPkrjYXy3Q97U4rOaZy9cnHQI4N4sK/QsHZYR/0=
Subject key identifier: CA:5B:A5:3D:CA:2E:5F:E7:2F:B2:00:AD:FC:3B:97:0E:E0:64:1D:96
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 0194BD855646013243FE39066301628EA9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 0F97
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: LDHCRme88VFCdMHqtmwRJ+rdyGMbVET/H/Ro2CWQrNY=)
2: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (hash: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:56:46:01:32:43:fe:39:06:63:01:62:8e:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=ca5ba53dca2e5fe72fb200adfc3b970ee0641d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:1b:77:ae:53:ee:cf:84:25:eb:4b:8a:c7:
8e:9a:7d:a0:7b:68:61:28:be:a3:af:5e:4e:cd:81:
b8:0f:76:c0:b7:8a:1f:51:21:02:81:b9:a3:db:69:
ee:36:fb:6b:44:01:ba:73:69:40:30:09:08:0f:7e:
4a:04:28:d9:ca:f3:1c:9e:83:ce:ca:9f:0f:99:74:
ed:0f:79:2e:64:55:8b:6c:08:24:a8:49:bb:84:a2:
51:da:1f:46:b8:23:3e:dc:9b:d2:b2:bc:57:d6:05:
13:45:16:74:6a:50:8d:c6:0d:2d:26:7b:15:70:b7:
45:9a:51:8f:9d:47:87:15:06:ca:6b:59:9d:2f:75:
b4:1d:a8:3b:65:85:bf:08:9f:d3:5c:d5:dd:79:01:
21:a3:48:13:88:3d:bd:a4:10:83:d5:b4:97:5b:79:
1d:42:3a:64:73:15:69:65:96:7e:34:48:ee:da:f9:
3f:58:88:ce:f3:cc:66:24:26:01:fe:d2:d4:f8:a0:
dc:31:15:9c:c9:29:77:ee:0b:a7:cb:b3:b6:0c:45:
3e:dd:77:c7:c4:68:41:4b:5c:3b:98:0e:d5:ed:d3:
f0:48:75:24:c7:12:89:f8:68:d5:da:eb:97:aa:ac:
eb:9a:a1:f3:a1:8c:31:5b:ae:93:d9:e5:b9:87:a5:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:A5:3D:CA:2E:5F:E7:2F:B2:00:AD:FC:3B:97:0E:E0:64:1D:96
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ca:cc:0d:9f:52:60:7e:96:4d:1f:dd:5e:5c:ab:d0:d3:be:
a0:e5:79:1a:62:23:b3:ec:8a:75:87:8c:2a:44:32:ba:20:c5:
4d:dc:ad:98:23:35:c6:4a:5d:c4:ac:3e:4b:b8:1d:0a:68:5b:
f1:db:a5:97:4a:eb:65:ed:da:16:02:48:c0:95:f7:0c:60:ba:
1e:2a:94:e6:37:ed:8b:1e:7f:95:ff:65:77:27:11:70:55:5f:
6c:3a:cd:ba:65:9b:01:8b:fd:71:10:06:3c:57:fd:e3:94:16:
44:56:59:31:5a:53:88:29:85:8a:a2:db:9c:26:68:ab:40:a9:
fc:59:6e:4b:0c:48:42:62:cc:8b:d7:0e:a4:49:be:25:96:a6:
bb:a3:c2:79:32:52:9a:bf:1e:02:1b:31:f8:7a:b7:b8:50:ba:
9e:d3:8e:15:5f:43:bb:6f:84:06:5d:58:ef:e2:a8:83:6f:81:
38:6c:8b:f4:64:2e:52:a5:40:9c:ba:f5:20:5d:f6:11:f9:a3:
9c:4d:a1:87:6e:3a:76:e1:5c:da:99:44:61:fe:03:ca:c1:a8:
4a:c7:48:58:71:9d:44:99:ba:d8:be:33:a6:eb:f1:33:55:de:
5b:33:53:62:6e:aa:a8:0a:44:27:c8:da:89:8c:b7:e1:35:4e:
13:6b:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:53 2025 by rpki-client