Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: g3S7xzCySheZtvoHsNcfCBMen0QYL2eC1U+WN6LsTOA=
Subject key identifier: 07:5D:3F:0B:F9:AE:F2:1B:C5:D0:B4:3E:74:F3:06:87:DB:21:3F:1A
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 0194BD17C2CBC7A6261D0A35FABE07BFEFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0B12
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: 7ItD4PFMGY6WLxQXj2HHc44xo1/8md2keVu4X0ePa1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:cb:c7:a6:26:1d:0a:35:fa:be:07:bf:ef:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=075d3f0bf9aef21bc5d0b43e74f30687db213f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:76:df:6f:bb:e8:f8:a1:29:18:ec:f7:05:
d4:38:b5:e2:a6:e8:09:86:98:cb:da:dc:ef:45:17:
c6:14:ff:53:ca:ee:11:e4:c5:7b:dc:66:3d:04:d2:
a0:cb:c7:84:00:95:1c:bd:01:6c:90:78:25:ba:49:
b1:38:99:6e:3d:0e:d1:bc:8e:cf:9f:96:eb:93:47:
4f:38:11:cc:82:95:2f:4a:4f:e8:54:31:87:b2:70:
f7:27:37:7b:4c:2a:37:38:18:04:5a:88:f0:a0:cc:
ac:25:8e:88:74:ec:68:42:09:15:2a:90:33:1f:23:
a9:e5:8c:9f:62:9d:ff:bc:88:af:22:5b:5b:5e:47:
c0:e6:7b:0f:73:dc:26:bb:9d:0f:5e:f9:a1:be:ca:
f4:30:81:41:4d:d6:8e:3f:52:8d:a1:6a:ed:08:58:
0b:07:3d:27:d8:20:1d:42:76:b2:7b:e6:e4:52:d8:
a5:be:ff:ad:f1:e6:f9:cc:2c:fa:7f:66:5d:96:78:
45:e3:56:46:44:78:8d:52:05:bc:31:4d:55:51:fe:
63:50:74:8e:0a:a1:a5:86:f5:8d:2d:d3:43:c8:d0:
4a:30:11:0e:5c:f4:e9:be:3a:f7:ec:1e:96:f3:41:
ce:f4:30:29:20:8f:f8:45:39:e7:d2:73:a0:02:03:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:3F:0B:F9:AE:F2:1B:C5:D0:B4:3E:74:F3:06:87:DB:21:3F:1A
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:68:fb:ee:ce:9b:15:ad:b9:01:f6:9d:47:86:bf:7a:91:
de:7a:85:a0:cf:98:fa:25:19:3d:12:08:3a:86:a6:3d:92:d7:
98:41:7a:09:f1:d3:f3:66:2f:0c:6f:b4:05:7b:ca:9b:bf:33:
74:f3:84:fd:33:ea:ef:a9:a1:7b:d4:9a:a0:cc:e8:db:25:b9:
63:f6:90:22:61:52:af:62:f4:5a:cf:da:5e:75:96:6b:ac:98:
11:c5:30:3e:74:e7:ec:30:44:eb:b0:f2:73:3a:06:d1:aa:bd:
c0:85:ea:ac:33:bb:85:6f:74:c2:d8:fc:f2:da:f9:cb:ff:20:
76:2d:6f:52:57:1b:50:28:aa:5c:d5:45:d2:42:1d:bc:86:61:
e1:95:57:0d:24:48:44:28:fa:d1:12:38:38:45:b9:17:1d:50:
c0:80:b0:d8:bb:e4:95:02:8e:5c:ab:e1:25:66:bf:2a:6a:a9:
37:fe:8a:a7:0d:fe:43:bd:62:d8:69:e3:72:c0:41:57:68:c9:
aa:99:b4:b6:41:b4:c1:d9:2e:9c:0b:e7:c7:0e:cd:ec:03:e0:
dd:32:5a:f3:5a:6a:db:48:d4:e2:1b:3a:82:f9:7a:f9:92:84:
cf:20:4e:79:b9:b7:89:90:f5:a5:63:2a:77:53:01:92:81:f6:
82:3a:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:05 2025 by rpki-client