Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.mft
File: XiVOwyZYUUKP_zNyGoXICy8ej7w.mft (raw, json)
Hash identifier: fOu8w9Ow4YLWjnpHwFkR6UXAy6CFizEnqqXD3oSgCgE=
Subject key identifier: 53:42:0C:48:17:BA:45:03:C1:C8:29:E7:9B:75:30:7D:5F:E2:99:61
Authority key identifier: 5E:25:4E:C3:26:58:51:42:8F:FF:33:72:1A:85:C8:0B:2F:1E:8F:BC
Certificate issuer: /CN=5e254ec3265851428fff33721a85c80b2f1e8fbc
Certificate serial: 0193F109B8C9387CBCEF3C8FE14A8432DEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiVOwyZYUUKP_zNyGoXICy8ej7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.mft
Manifest number: 0C4A
Signing time: Mon 23 Dec 2024 01:02:46 +0000
Manifest this update: Mon 23 Dec 2024 01:02:46 +0000
Manifest next update: Tue 24 Dec 2024 01:02:46 +0000
Files and hashes: 1: XiVOwyZYUUKP_zNyGoXICy8ej7w.crl (hash: wAq9HHMMA0H3NX8ogGpbC9N2cYYC2VJ/GVQ4loODk2E=)
2: y3G9QW_9GQasYvn_Nilngc1DZSI.roa (hash: dnrDQQmrJW+2oy97yVVm+FfEd94mEB2OlqwdVGWTVPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:09:b8:c9:38:7c:bc:ef:3c:8f:e1:4a:84:32:de:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e254ec3265851428fff33721a85c80b2f1e8fbc
Validity
Not Before: Dec 23 01:02:46 2024 GMT
Not After : Dec 24 01:02:46 2024 GMT
Subject: CN=53420c4817ba4503c1c829e79b75307d5fe29961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:c3:30:a6:0e:d5:5a:30:7e:ce:28:ff:6c:
b8:e5:69:fd:c2:08:db:38:47:3b:93:d1:8a:75:9d:
54:0a:6e:96:cd:1d:9b:52:1b:60:f5:ed:4b:d0:bf:
e4:2a:aa:1e:50:bf:78:17:56:48:3c:25:47:76:63:
91:d9:31:f9:e3:e0:50:f1:8c:3d:ae:8a:c0:f0:76:
3f:ae:35:e1:47:a6:d1:7d:06:30:7d:e1:fa:d5:34:
df:8e:0e:ec:05:32:75:d4:29:00:6e:45:4f:e8:7b:
bb:98:ee:ba:46:3d:00:25:34:ff:ce:e0:00:8b:b0:
c1:84:e0:64:82:72:06:df:3d:fa:15:46:ed:e5:72:
76:3c:6c:02:02:4c:9f:c7:87:68:0b:b1:b6:ac:e5:
7c:4c:05:d8:12:58:2d:27:ce:59:32:9f:a8:e5:c0:
57:a1:03:6b:55:09:53:fe:74:e9:b8:ca:6b:82:aa:
32:ec:d5:5c:5e:be:bf:52:29:c2:23:c2:8e:32:42:
cc:46:6a:48:f6:1b:67:92:53:d0:e6:ab:37:d7:90:
cb:2a:81:5f:09:5d:50:92:20:d1:b1:a6:01:60:2c:
3b:e4:83:b7:2d:6d:c7:1b:1e:f7:bb:5d:a9:54:b6:
20:f1:23:a1:e2:2a:74:23:64:54:65:af:e1:7c:07:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:42:0C:48:17:BA:45:03:C1:C8:29:E7:9B:75:30:7D:5F:E2:99:61
X509v3 Authority Key Identifier:
keyid:5E:25:4E:C3:26:58:51:42:8F:FF:33:72:1A:85:C8:0B:2F:1E:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiVOwyZYUUKP_zNyGoXICy8ej7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:dc:88:2a:fe:b3:0c:2e:bc:84:7c:63:c1:38:39:27:6e:90:
46:28:b5:ee:eb:b7:6d:4c:10:9f:31:81:9c:7b:84:e3:4d:84:
dc:31:db:c0:ec:c3:12:5c:c3:b6:77:30:99:4f:d3:bc:91:99:
7d:48:25:4e:98:69:91:af:db:44:81:35:85:0e:f9:85:58:09:
b4:e1:99:b7:d1:20:ea:30:32:d3:7e:73:40:af:a5:ab:bc:f8:
bb:df:90:19:90:41:cd:3a:a2:e6:74:03:a8:9b:93:8c:a7:c3:
41:a9:d3:26:0f:94:20:c0:80:b8:ec:b8:7f:f6:d0:58:83:f5:
93:45:46:22:a3:3a:1c:d3:9d:32:0f:bf:f7:3b:20:e5:07:79:
9a:84:61:43:d6:28:61:9d:93:65:bb:5d:06:f2:1b:d2:f6:2e:
d7:4e:75:c4:9b:db:a8:ef:cd:32:de:12:fe:d3:81:14:39:75:
5f:28:dd:0b:b3:91:bb:4d:a0:37:cc:81:91:bb:60:f7:5e:2d:
a4:ac:80:5e:84:d4:a2:c4:55:73:7b:61:64:e7:43:4b:46:06:
9b:8e:59:8a:d1:f1:80:60:f9:73:d7:c9:49:4d:55:30:0d:9b:
f9:f5:a4:f0:14:05:99:17:56:fe:fb:d3:d8:fa:3e:88:0d:f5:
f9:5b:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:58:05 2025 by rpki-client