Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: Scs3rd2WQ/RqI7g/Sx8mqdQ9iV+GZ32W5asy4ZlB3Sw=
Subject key identifier: 3F:E4:20:5B:B2:0D:AE:5E:FB:53:5C:41:F1:AF:24:A1:83:54:C5:0A
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 0194BCA9D6A2683F7113ACE1FB47314626C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 03EB
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: yhCLQCgvaXq0VfnxB+OpOy/aJsWXe9g0um8aFWs91G0=)
4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d6:a2:68:3f:71:13:ac:e1:fb:47:31:46:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=3fe4205bb20dae5efb535c41f1af24a18354c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bb:6e:fe:91:bc:f9:30:47:c6:af:50:55:0d:
8a:7e:36:b3:ae:00:d8:b5:76:99:17:7d:99:e5:7a:
7a:9a:f8:b0:27:ac:90:1a:39:4d:66:e6:3d:79:63:
6c:7d:91:0a:64:55:fa:59:0f:92:e8:b1:59:e8:f0:
c1:fc:26:8a:1c:a9:7d:96:24:25:fb:d5:4c:90:cc:
f9:4a:47:22:c0:72:30:e5:25:f8:73:7b:b4:29:fd:
86:34:1d:80:13:bd:0f:5e:9d:e1:21:9f:9c:f8:b5:
e7:0d:31:38:fb:01:5d:eb:9d:5f:e5:ef:3e:0c:50:
a7:60:43:68:82:ab:5d:5f:9d:b3:c3:15:2c:2c:d0:
e2:b1:0c:64:a4:c4:ae:c0:eb:66:67:47:14:a1:40:
49:fb:1b:6a:e1:db:32:b5:f3:5e:d2:ba:04:5a:11:
8f:b0:65:bd:bc:e2:ef:b4:3a:86:4c:67:c6:fc:24:
6a:8c:b6:3a:93:3e:8b:8e:1e:d6:cc:bf:22:7b:25:
a0:d4:44:c7:a7:bb:5a:27:b3:12:f1:cc:89:19:2a:
fe:7b:c4:98:15:f1:65:be:34:61:2f:64:26:5f:d4:
fe:bd:ee:6d:e2:ec:34:7b:33:4e:c7:a7:33:ce:d7:
95:5c:33:80:fc:ee:c7:1b:24:62:c3:88:01:22:cb:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:20:5B:B2:0D:AE:5E:FB:53:5C:41:F1:AF:24:A1:83:54:C5:0A
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:4c:e3:6b:f5:9a:9a:13:c0:0c:d0:9a:5e:a0:cf:97:82:
c4:dc:07:4d:30:84:8d:6e:0d:fb:d8:d4:d0:b0:8a:d3:61:d4:
0b:95:c3:e7:6c:00:d0:d2:41:b2:a4:92:cc:e2:9b:52:d7:59:
95:e1:7c:9c:11:b4:d6:1c:4a:03:86:12:9e:7d:6d:2c:f7:ef:
b2:2a:70:0c:59:37:47:8a:8b:66:ee:72:0a:2a:54:63:10:bb:
b5:c5:cb:35:e5:a2:09:7e:25:e8:39:b6:df:dd:3d:b0:2b:ae:
09:b5:16:af:d8:c2:0f:db:bc:1e:c8:07:a1:96:af:8a:c3:75:
83:f4:cd:b8:a3:be:48:e8:25:e9:a4:e7:fe:30:0a:f3:88:17:
84:49:97:e3:c8:82:c3:fb:dc:f8:51:2a:38:63:a6:d5:09:71:
75:94:80:e2:b2:6f:f7:22:81:eb:c4:fe:3a:ed:c8:52:fd:76:
1e:fb:51:f6:4b:e0:b6:74:c1:ee:26:65:f7:8a:59:84:ea:22:
a3:33:0c:60:fb:f1:1d:8c:f5:02:67:2a:47:a9:ee:4c:70:b9:
9d:b3:cf:63:97:55:24:fa:cd:cd:cb:1e:4a:eb:50:a3:17:9a:
6c:1b:9e:a9:54:91:f4:86:6b:62:dd:99:5f:55:fa:8c:91:b5:
5a:94:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:35:40 2025 by rpki-client