Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: FoBK6P43ffkHmg3gSbtCo65AsbKzuEnhiQhD2BCn1XI=
Subject key identifier: 07:8F:32:E0:38:4D:92:8C:08:AB:AC:94:A8:88:22:F0:F5:29:A5:BE
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 0194BC3C8F102551E5085BAC33FD70CF227C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: jts7zD7cnMWB3Kl32Ihqz7sEBvdSVuWfDN1tzyG5EjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8f:10:25:51:e5:08:5b:ac:33:fd:70:cf:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=078f32e0384d928c08abac94a88822f0f529a5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:5e:a3:9c:31:5f:ac:90:12:2f:ea:92:31:
3d:35:d9:3f:be:91:a0:1d:06:62:87:d3:e9:b3:1f:
d1:38:f9:e5:f1:04:78:e2:2a:f7:3c:f0:06:3f:d1:
dc:97:33:c9:5f:07:ed:99:0f:ed:04:cd:bf:56:f8:
48:6a:36:64:83:f8:16:c1:48:ab:16:bc:bc:98:9b:
18:05:9b:7c:9e:6c:22:3b:d1:2e:a2:8c:5c:bd:5a:
6f:6c:fb:c1:81:68:4b:2c:6c:f9:24:ec:56:9d:1d:
70:97:a7:6f:cf:5c:1d:06:bd:7f:7d:d8:b9:41:14:
de:8e:34:26:c1:e4:72:2d:7e:15:23:c7:75:1d:b1:
3d:25:d6:a0:fa:dc:65:80:e7:b9:f1:bd:ab:dc:2d:
92:9d:39:b7:a4:3d:33:cd:76:ce:37:fd:9d:b9:db:
85:cf:92:2b:f1:d8:c0:e9:13:9f:21:6f:4f:9f:9b:
90:bd:7d:58:15:0d:e3:82:a7:a9:6d:b1:38:ff:f8:
d2:47:d5:92:5c:53:33:a3:8e:d6:67:12:92:54:f8:
5e:b6:6e:e0:1a:39:95:84:a3:5d:b1:9f:a9:3f:35:
64:82:8b:c5:c1:35:af:d7:d9:05:84:81:8e:32:a6:
93:ea:50:7a:9e:e8:bd:7c:d4:12:82:92:a4:d2:cf:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:32:E0:38:4D:92:8C:08:AB:AC:94:A8:88:22:F0:F5:29:A5:BE
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ad:41:a4:9e:7b:3d:38:2d:c9:1e:cc:d8:f3:f9:ae:01:07:
3e:28:35:ce:30:7f:1e:30:53:29:bd:98:f4:d7:a9:6e:de:39:
01:59:0a:4d:b2:4d:d0:f4:08:8c:b0:7a:46:13:be:77:53:52:
83:66:2b:90:26:e6:ea:6b:d1:24:c6:a2:95:a0:83:05:84:d8:
86:9d:13:99:3f:31:da:b6:3a:ec:2a:e5:ee:8d:48:97:39:fd:
9c:5b:3c:6b:46:c9:b4:f4:0d:b6:15:e0:2e:79:90:00:56:7d:
e8:75:1c:86:33:18:34:ca:a0:be:38:a7:b6:4b:68:d7:44:be:
d8:cf:af:95:68:f2:56:88:77:ca:31:03:1e:83:e1:9a:57:28:
00:ca:cc:8b:9f:02:a9:9e:0e:e1:3a:c7:5e:50:a0:5c:a9:46:
08:9b:f8:47:09:f5:66:5d:ef:20:e8:d0:c8:78:59:c8:2d:ad:
4c:75:bc:38:23:86:dd:e8:57:79:95:5f:3e:52:01:e9:79:73:
f1:7c:c5:18:4d:43:4a:d3:c2:b4:8a:ba:b0:5c:d9:ae:14:54:
fc:b5:d0:43:e3:a2:1f:f6:21:aa:cb:c7:88:67:6e:92:1e:4e:
01:14:75:ee:7a:86:7e:0e:20:ac:be:f3:e0:a8:65:70:bc:b2:
ea:a8:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:22 2025 by rpki-client