Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: /BYOpol7IL4+WO7NB1ig/s8SAa/ZAFp6VppsqZ6QT9g=
Subject key identifier: 55:26:0F:7F:F5:B5:53:24:CA:34:33:27:9B:B0:AE:17:ED:E6:D5:9A
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 0194BBCED313F641787A72B4F3893B5731D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: XAN+0IHRrpbFNNUhCQBpy2nNAROY/2Cx4HbCLyifD/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d3:13:f6:41:78:7a:72:b4:f3:89:3b:57:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=55260f7ff5b55324ca3433279bb0ae17ede6d59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:9c:cc:f0:a6:02:34:8e:17:9f:3e:37:4e:
5f:3a:e4:2a:d5:e2:16:3e:1a:46:2d:72:ba:e2:f4:
7b:d4:05:64:18:1d:bb:8b:cd:f0:60:de:20:4d:3e:
e2:29:ff:14:3b:de:d4:e9:89:2a:d5:99:56:f5:7d:
44:c8:82:0e:51:e7:ad:38:18:a8:88:ab:67:9d:86:
e6:f8:08:46:bc:0e:3f:30:de:4c:75:db:b9:44:e0:
16:55:1c:9b:a4:1e:36:bd:4a:c0:ea:04:4c:a8:61:
a7:40:3c:e1:fe:05:9c:96:41:1c:64:3a:fe:f8:fb:
27:5c:55:36:e4:31:3e:97:6e:af:2d:ef:a8:fe:f1:
09:99:f9:33:92:51:18:d9:1d:45:57:be:b0:1d:85:
b6:21:35:87:2b:52:3f:ec:2d:d7:06:68:48:da:07:
b4:58:a8:72:2a:d6:36:7b:5f:56:4f:68:34:99:5d:
f7:a0:f5:90:c8:7f:aa:c8:4e:27:fc:58:01:2e:0c:
fc:8b:6d:15:e9:52:84:56:28:d1:62:65:25:c4:d5:
16:f3:ed:c6:f8:00:89:08:d0:f4:a2:90:ba:24:14:
51:f4:75:a3:76:84:a3:44:28:a7:78:68:ac:a5:cb:
1a:31:aa:c6:85:5a:a9:46:94:5b:5b:d5:5c:c8:10:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:0F:7F:F5:B5:53:24:CA:34:33:27:9B:B0:AE:17:ED:E6:D5:9A
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1b:61:df:10:dd:25:60:80:61:2b:d5:1c:47:e7:d6:c5:84:
22:0e:7e:3e:a6:5c:51:4f:9f:ca:7c:77:ed:d0:69:24:51:15:
08:80:92:00:2f:4a:24:9d:92:00:ac:a2:9b:1c:69:db:fc:97:
18:f7:0b:8e:af:80:28:a4:69:8e:3a:66:8c:4d:18:5f:e2:34:
20:31:8e:25:14:8b:3e:82:5f:07:3a:1e:93:aa:ec:e5:81:31:
78:d5:13:91:22:a2:ef:ee:d9:1f:38:ce:20:88:f2:e5:70:b3:
8b:75:12:3b:af:b5:da:77:22:6d:2b:bb:ca:54:c6:cf:a7:e8:
ba:45:5b:cb:e8:5b:b2:cd:f9:15:c3:e4:84:cf:d2:7a:b3:79:
b3:22:a9:e1:ce:57:fa:f6:f9:42:66:63:fe:6c:74:1f:c3:60:
e4:12:7d:a3:ee:64:ce:1c:a3:1f:d4:0c:72:5f:21:ab:7a:5d:
82:db:73:03:56:fb:cd:fd:8b:7f:84:2c:43:54:c6:d3:54:a5:
06:00:59:41:36:16:81:ed:80:13:71:d6:e5:3d:00:f9:cc:15:
05:20:17:93:ab:97:ea:ae:a3:b1:c0:76:d4:46:0a:95:7a:14:
34:6a:b0:30:3a:33:73:e1:21:fa:dd:66:cc:db:ea:1a:11:d3:
d8:3d:51:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:02 2025 by rpki-client