Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: /54CuqGAIiVYeOUpgRKzFp59Np/tL77ivZUT6jDkpBM=
Subject key identifier: 1D:21:DE:80:09:FE:3C:1C:3D:6F:96:12:2A:50:11:B1:E4:74:CA:BD
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 0194BCAA163A0C01C20B599E8F59EB5A9BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0862
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: IzmeYXYlO_xmlW74WeQyL7gffpE.roa (hash: Z5XX/V/bAHCE8fRhzNUzhUtEMOMQ14B1YoCinHSL1lM=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: SF+cYGKRwE7HcP1bV+lBpTKEGVZM9kEq1KuwPIBEStk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:16:3a:0c:01:c2:0b:59:9e:8f:59:eb:5a:9b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=1d21de8009fe3c1c3d6f96122a5011b1e474cabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:65:91:ad:fd:7f:8a:2c:f1:a2:16:a2:aa:
5d:5e:c1:8d:01:30:f2:de:9a:cc:fa:e5:70:1d:46:
40:01:10:82:50:6f:87:20:74:df:9b:5f:ec:44:e0:
23:9b:9c:0b:19:fd:af:65:8d:38:5f:68:35:f2:b4:
ef:9d:4c:b5:50:0b:40:be:10:49:19:c6:95:4b:f2:
92:e7:ca:8a:5e:46:2a:02:60:e7:1a:a4:83:dc:0e:
8d:cb:b9:ba:23:fa:d5:47:11:3b:11:7e:e5:c9:65:
20:23:85:00:63:d4:19:5a:ee:0b:8a:b7:1b:25:3d:
af:e7:94:9a:e9:14:42:b6:63:77:94:7f:c4:9b:3e:
4e:fa:82:65:e3:a6:0c:59:d7:32:75:db:39:44:a5:
21:98:b1:11:f3:0e:9a:23:aa:0b:c9:f4:96:a4:e7:
c7:7f:91:ae:97:6b:12:a2:eb:60:a4:db:23:de:96:
9c:da:25:ef:ff:bb:41:75:69:4a:f2:de:1a:87:6c:
1a:9d:a8:f5:cd:64:89:63:31:24:8c:fe:d1:fc:58:
26:3a:fb:d6:cf:b9:43:ec:4c:c1:46:67:1e:f8:59:
04:ab:93:96:4a:9d:c0:7d:bc:bd:c1:c4:29:e1:73:
5b:ce:ff:4c:95:2a:a8:8e:94:b3:13:0c:25:91:66:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:DE:80:09:FE:3C:1C:3D:6F:96:12:2A:50:11:B1:E4:74:CA:BD
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c4:4c:36:fa:35:1e:94:e2:0c:75:7b:23:21:42:d4:e9:ba:
6d:6a:a6:1b:7b:b9:b3:09:ee:2e:57:3c:bd:81:4d:7c:a5:c0:
5d:cb:13:8b:d3:ad:a7:1e:04:6c:5d:b5:e8:27:2c:0b:70:25:
ae:5a:9c:9d:aa:9b:21:e4:04:62:89:bd:18:c3:7b:59:39:29:
d9:a0:76:65:04:ca:51:cf:1b:d3:f9:bc:52:ec:c9:74:f9:8b:
7d:a3:0c:8f:cd:bb:27:f0:b3:01:1f:33:02:b2:02:ed:11:8a:
c0:d6:a3:94:ad:22:a3:8d:05:ac:95:d1:9c:de:c3:6f:ee:d9:
a1:45:65:cf:fb:77:5b:33:11:98:51:70:3d:ad:ba:c0:49:15:
a6:cb:6a:e7:a0:b8:af:ca:9a:3c:8d:d3:45:77:ef:c4:0e:40:
6c:9d:e2:25:58:77:60:11:47:05:cb:0b:0a:cc:52:9e:d2:4f:
2a:11:87:bb:68:21:24:58:d8:90:88:dc:05:5d:46:89:ce:aa:
fb:af:a2:43:09:c3:b5:36:c3:f6:5a:22:42:9b:82:19:36:db:
97:9a:b3:ce:9a:43:51:cf:37:22:21:fd:12:8b:e1:8f:c7:27:
79:49:e8:0a:f2:8c:35:fa:d9:6f:a5:6e:a3:cf:08:13:a9:1c:
02:50:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:03 2025 by rpki-client