Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
File: XU_MyZTpQTHcEb_JXGRYWzReAfU.mft (raw, json)
Hash identifier: dIoJyzrozJIueb7vNdV98Gk7Zykc11Yj+3aRk+2Aed0=
Subject key identifier: 5E:39:0F:6A:1D:05:76:7C:AD:73:3D:9D:37:00:C6:F9:E5:4A:48:29
Authority key identifier: 5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
Certificate issuer: /CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Certificate serial: 0194BC3C3086925E09FC81995A5C98AF50A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 1-QQKoKkBsfVHiC7zwZN32LAwqdI.roa (hash: su6NuoB2BV5792mo+Gkr7XFZc0UAJCglrf+FguhXwQA=)
2: 2N-7q5TUgtNJjxm0U-P63yRLHRY.roa (hash: G9pkPwLHZYXpkwsIscu0rjXE3l/R0/mrWBJWr5iNXtU=)
3: XU_MyZTpQTHcEb_JXGRYWzReAfU.crl (hash: D+RA4gxgfO0pKl0ASUG/BRnVseWqZCa5hT6H4rrUhKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:30:86:92:5e:09:fc:81:99:5a:5c:98:af:50:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=5e390f6a1d05767cad733d9d3700c6f9e54a4829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:62:3a:fe:cb:d6:51:77:fe:21:2b:59:26:
59:f4:04:97:58:1a:f4:08:07:35:65:56:81:45:6a:
7f:38:14:ff:b2:be:11:3a:6d:60:f1:2b:7c:52:01:
1f:20:f2:3f:b5:33:a1:98:eb:d3:49:a1:29:4d:f1:
1f:a5:67:37:3b:2e:df:cc:77:a9:8f:ce:16:1e:df:
2a:f8:34:2b:6c:ff:56:49:57:0a:88:49:31:87:65:
a9:35:ef:e6:bd:3d:aa:a1:54:1f:a4:eb:f8:c9:fa:
9c:b4:19:12:ee:95:b6:df:12:c5:c6:f2:7d:22:3e:
32:72:23:9d:1e:cf:c9:c9:90:6e:89:f8:48:bb:98:
68:02:a7:07:47:ae:10:e1:e0:0f:a6:4d:00:ec:8b:
13:47:cf:45:f1:6a:8d:74:c2:3b:40:a3:11:21:d1:
4b:95:64:3b:e5:c2:df:2b:c3:7d:42:94:89:a0:57:
3f:94:4e:3c:16:9c:e6:a4:76:c2:fa:8b:41:5d:e6:
c2:5c:f0:a5:2e:f1:87:df:98:dc:65:27:09:5f:15:
cc:38:cb:3d:ef:c2:20:be:6e:27:b9:fb:37:96:36:
99:61:0d:e5:0c:bf:9f:42:67:92:4d:f1:41:7a:7d:
e8:b4:94:e0:96:95:d0:c8:4f:d6:39:bf:da:95:8e:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:39:0F:6A:1D:05:76:7C:AD:73:3D:9D:37:00:C6:F9:E5:4A:48:29
X509v3 Authority Key Identifier:
keyid:5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8d:5b:6b:47:79:17:59:4c:c1:43:ae:57:c5:76:7c:3d:34:
d4:08:43:ca:9d:48:7b:69:b4:96:11:3a:22:8f:77:61:0f:84:
c4:2d:21:96:b2:77:e6:df:3c:5c:34:9f:d9:ff:13:6f:a8:d5:
69:86:86:2a:c9:a3:1a:67:a4:28:75:8e:8c:3a:b2:b5:33:69:
df:db:fd:ce:5c:88:21:d1:08:e4:65:27:7d:33:61:38:ce:d2:
7e:a3:eb:f5:bb:45:d8:b5:31:fd:2b:ac:fe:d7:9a:31:ab:56:
f5:05:86:3e:ff:7d:7f:90:10:a4:35:24:a3:4d:c4:05:19:93:
01:c7:9b:1d:04:8f:dd:06:a4:c7:6d:a2:69:75:9d:62:3e:ad:
1a:3b:89:3c:f9:1a:96:df:cb:7d:a5:41:67:f7:e7:2a:a1:65:
5d:b3:de:04:d4:7b:1c:b0:45:60:ce:0a:f5:16:22:3e:b3:a4:
55:57:f1:0d:93:c9:8d:c2:9e:e2:bc:39:04:37:ab:c6:5d:8b:
71:9a:2f:d6:ad:78:9c:ce:0e:a6:98:d6:41:9c:5e:b7:ac:d2:
7c:1b:4d:12:7b:f2:a2:3e:3f:7d:a9:a9:7e:b4:0d:1f:9f:50:
72:7b:71:25:15:8d:f7:f4:35:c5:d2:e3:f0:b8:a8:8c:9a:6d:
32:9b:c9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:16 2025 by rpki-client