Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: aIBO7qvov5x+QhjZOXQqvPEyWlBxijn3PAx/lf8LEfs=
Subject key identifier: 38:91:B0:58:A4:90:91:FF:BF:92:5D:6A:BC:60:BB:85:55:D6:01:6B
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 0194BCE0E8D3778CD025AEF682EFA362724A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=)
2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: WF3ueAQj60rBxdsD4P4CGqlHcPqYEiotsQpG0dB4GHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:d3:77:8c:d0:25:ae:f6:82:ef:a3:62:72:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=3891b058a49091ffbf925d6abc60bb8555d6016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:74:1a:23:a2:48:92:50:63:54:43:10:38:
8e:2b:79:ea:a2:4a:d5:e7:62:15:44:ad:7d:ea:3d:
83:aa:79:9e:81:01:63:f5:a3:8e:72:56:49:12:f7:
19:38:bf:63:5d:77:e1:e3:80:9c:f6:87:18:4c:3b:
a4:fa:3d:4f:be:c0:7f:02:c1:e2:04:52:1d:92:5a:
ae:93:64:bb:b7:11:ff:c8:2b:57:48:a5:2b:e0:78:
9b:80:e6:12:77:85:8a:f6:28:62:a7:89:42:cf:16:
6d:9f:b3:57:3b:aa:60:c9:7a:8f:9b:69:a7:f0:d8:
7f:ad:43:8d:5c:2b:e5:c6:2a:1f:7f:6f:50:9f:e7:
b8:80:6b:a3:d3:7f:19:8c:94:05:43:6b:4e:73:41:
29:9f:5b:43:96:40:9f:eb:c2:f6:37:88:2f:00:02:
91:e3:f5:15:24:85:f8:74:a6:bd:6f:73:73:f6:f4:
d3:68:7c:8c:5a:f0:25:ec:e4:a3:29:ef:6e:bd:15:
cf:2b:92:d6:c5:92:58:8b:16:d1:d2:ae:e6:39:43:
04:2d:10:d0:d8:f3:f0:d0:77:26:35:5c:9b:4b:48:
dc:ad:c1:8a:3a:ba:e9:8c:66:d3:99:50:35:55:a4:
42:5b:c0:ae:46:cc:c7:93:df:65:4d:65:10:b1:fd:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:B0:58:A4:90:91:FF:BF:92:5D:6A:BC:60:BB:85:55:D6:01:6B
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a3:2e:36:ac:dd:89:08:80:ad:81:1a:f9:27:4e:34:79:ca:
21:d0:a5:a4:0a:96:5f:60:f4:17:03:b5:be:35:b2:84:f4:32:
5f:c7:19:72:d3:27:78:80:c1:9d:b3:e2:02:21:4a:6e:83:7d:
9d:6b:b3:74:d6:84:d6:cf:19:1a:00:1b:63:94:79:58:7c:a2:
12:cd:65:e2:f4:b3:44:28:37:22:a5:d5:4c:b0:4f:59:2c:af:
1e:78:59:ab:83:f3:d3:fe:60:47:34:46:07:79:03:79:2e:00:
55:af:ea:fa:83:13:d7:3c:bd:3a:80:76:2b:f9:dc:fa:b1:8d:
82:24:ab:9d:35:38:98:5c:b4:4e:e9:4b:26:4c:b9:14:a4:f4:
21:af:30:79:6a:3e:ce:bc:5f:2f:26:20:6d:76:ec:af:db:bb:
9e:7c:1e:47:a4:17:96:fe:79:93:af:d6:64:8f:a0:dc:12:c6:
1a:7c:7a:81:8e:9f:82:a5:39:ee:69:e6:d0:6d:4b:a1:5f:cb:
61:ee:3b:0d:67:bd:c6:f9:0a:26:b0:8a:86:59:e8:ca:66:79:
b1:81:a4:13:a0:33:df:68:f6:fc:9d:5c:77:2c:8a:39:c6:d6:
3a:e7:c3:1b:f2:e1:b4:61:da:1c:78:e2:7a:53:3d:59:80:c4:
3c:b4:da:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:48 2025 by rpki-client