Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: AYuyuGJxzZdlzxgkif13/P2o4gh0TOGmicOfc8R4o3k=
Subject key identifier: 2C:86:96:05:D9:6E:86:35:2A:03:E5:7A:BC:BD:24:75:08:2A:73:D8
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 0194BBCE66965F6BC46E7EBB87F18B100E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0A34
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: VNxqK8k5puohgqd2L7zi2xkBMC23bKkf3yU4TI3cXdo=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:66:96:5f:6b:c4:6e:7e:bb:87:f1:8b:10:0e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=2c869605d96e86352a03e57abcbd2475082a73d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:03:c3:f6:3c:40:b5:56:77:9c:e7:24:5d:
28:49:1d:ca:8a:81:2c:51:90:e1:c9:2f:61:76:3a:
bf:07:00:ef:72:4c:8e:b2:de:cc:1a:b6:48:e5:25:
5e:58:0c:1c:7e:72:0b:ec:be:6f:28:0d:29:52:92:
c2:3d:9f:c1:ef:dd:4e:f7:07:c5:db:8e:4a:56:92:
d1:66:e3:af:56:d4:fb:16:82:ae:82:53:34:f8:39:
f9:75:6e:9a:45:6a:50:b7:f2:08:27:80:06:d3:ba:
a2:9d:42:72:a3:e2:71:a8:aa:06:1a:64:0b:bd:18:
88:d4:1e:dc:20:b1:1a:eb:33:53:ca:25:3b:ce:27:
0c:cc:52:67:3a:5d:71:8f:28:c9:62:00:e1:4b:b4:
d1:ae:36:3b:43:fb:d9:8b:6b:d7:f4:47:1a:f0:8a:
e6:34:ba:2d:3c:ea:f4:50:ee:ac:ed:fd:02:b9:11:
b2:27:b1:37:d1:3a:b8:94:33:82:e3:aa:fb:49:5d:
fa:60:0a:f6:21:da:0b:d0:ac:77:0d:50:aa:62:8d:
92:21:3e:7e:75:67:db:7e:ec:48:cb:e9:f1:8a:44:
dd:8a:66:15:72:ce:a1:4a:a9:86:3f:d6:c7:c3:be:
4f:d7:40:bf:4e:a4:42:86:4a:43:68:f7:63:60:7d:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:96:05:D9:6E:86:35:2A:03:E5:7A:BC:BD:24:75:08:2A:73:D8
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:27:d3:b3:bf:88:08:c8:7b:f6:53:71:8f:ff:d6:33:70:59:
20:f7:63:f4:81:8f:8d:7e:09:4c:0e:95:87:77:c2:81:18:6a:
3c:e6:0d:87:77:11:92:6e:bb:9e:e1:df:93:5b:f9:f9:05:dd:
93:86:9c:23:9a:cc:50:28:eb:f6:e2:57:2b:1b:03:11:41:29:
61:f1:68:ab:a2:3a:82:90:75:ab:59:8f:ad:ba:77:c8:73:17:
46:fd:14:e1:0d:7f:01:7e:45:6f:66:fa:fe:72:fc:1d:77:a6:
51:7b:03:66:9c:78:a4:b2:c1:c6:f2:f8:89:92:4b:b8:c9:44:
8b:fd:55:2d:df:ff:5a:c0:ba:24:e8:f5:1a:e9:6f:65:4c:0e:
fb:69:3a:2b:a9:a1:10:34:f0:09:cf:92:bf:ca:c2:9e:9d:37:
af:b9:8d:7d:bc:db:36:07:27:75:37:40:94:ec:62:55:ca:f4:
7d:ca:c2:5e:f9:c1:4e:68:d9:6a:75:57:89:fa:4c:07:6f:cb:
b7:04:44:6d:d5:25:d5:03:bc:27:a8:fa:41:3f:3e:16:e1:f4:
b5:dd:75:d2:b2:08:04:ea:5e:da:88:b6:7d:c3:f3:92:4b:9a:
45:46:a1:51:a6:5d:cd:43:08:1e:fa:e6:37:4f:fc:b9:53:3d:
00:ce:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:26 2025 by rpki-client