Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: Br2ar2v6Cp/npamFwETOfxeoqHsesBlre1/hONP73Yo=
Subject key identifier: 50:D6:C7:3C:14:09:D5:BF:B1:6A:57:DA:5A:9E:59:52:92:06:F2:35
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 0194BCA9DCE00FC7C32CE52A2B78016A7CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: RvgkyC1fHcLJsMaJTO1O/OS4IwMKJT6ip7648b/xw2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:e0:0f:c7:c3:2c:e5:2a:2b:78:01:6a:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=50d6c73c1409d5bfb16a57da5a9e59529206f235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2b:7a:07:2b:dd:34:e4:17:e8:59:99:c2:7d:
fc:94:e1:cf:34:af:5b:23:82:23:f1:69:4c:ec:a2:
f1:38:2d:94:d5:32:26:6d:e3:88:0f:50:78:a6:bb:
4b:99:15:fd:31:29:80:fe:ea:7c:f3:1f:47:fd:d1:
b7:14:3a:f4:8f:62:cc:6b:26:f6:0b:14:6d:f7:93:
76:8f:90:20:8d:2a:ac:d1:2c:be:43:bb:5d:90:6c:
ea:f5:71:da:5b:3b:ef:af:5e:fd:d6:c4:7a:71:16:
ca:ef:21:2c:fc:8a:30:0d:67:d4:ee:58:22:b8:3b:
5f:3c:45:3a:a5:e7:4c:81:1a:fe:ba:fb:f2:0a:5a:
c1:30:89:29:82:5f:15:13:6a:87:be:68:08:ac:35:
3e:66:2e:ac:c0:cf:0e:6d:17:37:41:56:16:60:91:
ff:2b:3f:ca:b3:a6:04:61:a1:bc:14:77:22:9e:7c:
b2:7e:60:a4:5a:b9:91:0c:d1:a9:bf:cb:68:c6:1f:
d1:bb:fa:a7:ee:8d:1c:f8:06:31:cf:0d:c0:83:14:
4e:34:8a:8e:2b:bd:3d:55:4d:a7:1b:dc:da:ad:5c:
da:ee:6b:5b:62:8b:19:69:5a:7d:03:c2:67:68:b9:
61:28:5f:a6:60:ec:da:cd:74:32:eb:2e:d0:ed:4a:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D6:C7:3C:14:09:D5:BF:B1:6A:57:DA:5A:9E:59:52:92:06:F2:35
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:32:9e:8c:bc:18:cc:f1:05:1d:f2:9c:1a:de:21:cc:0b:70:
69:6c:23:f8:fa:52:94:d4:25:d2:08:f4:a8:7a:aa:08:11:b4:
e9:a1:85:d2:54:43:e5:68:38:9c:51:95:2d:d1:29:04:18:71:
87:c3:c8:74:9c:eb:21:99:2d:cd:b4:7f:fe:3f:6d:e9:58:3e:
c7:96:b6:df:aa:0e:ab:c4:c6:e7:2a:3a:b5:d7:f7:c4:76:97:
ce:ff:b6:f6:1f:59:14:7c:b1:79:67:40:2b:93:81:3b:c6:f8:
64:54:16:66:cf:e1:e2:0b:41:2e:a0:04:52:64:bb:0b:e4:11:
7c:4c:02:a8:92:4e:a2:13:b6:c4:d8:7d:3a:ce:47:26:9b:fa:
5a:c0:4d:92:dd:de:32:61:af:bf:dc:02:99:0c:89:7e:d0:cc:
4d:3c:d4:c3:03:02:c9:ff:87:22:68:32:29:e3:cd:e9:dd:cf:
73:e4:71:6e:63:dc:b1:a5:a6:2b:55:85:d0:db:3f:0d:d5:2d:
96:38:c8:df:bd:30:29:17:52:25:b5:fc:0c:56:70:e2:1b:23:
3b:dc:25:2e:76:d8:72:2a:7c:ab:60:89:82:ee:78:dd:55:be:
ec:4d:f0:83:2f:cb:2c:b7:85:bb:d3:4d:3e:8c:f4:54:ab:45:
ba:f7:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:12:09 2025 by rpki-client