Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
File: XAJzZX7FoThNU28b2Z2RZQf-eyk.mft (raw, json)
Hash identifier: ROjushk87MLjsevA4fRYkYmZMtUPKQ7dYAN0LNkcV10=
Subject key identifier: D5:69:09:42:49:77:10:FB:6F:64:4F:CF:D6:4E:60:5E:72:04:6B:6D
Authority key identifier: 5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
Certificate issuer: /CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Certificate serial: 01968ADC4D844262A0597F9790030B7A9F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
Manifest number: 0FB2
Signing time: Thu 01 May 2025 08:00:15 +0000
Manifest this update: Thu 01 May 2025 08:00:15 +0000
Manifest next update: Fri 02 May 2025 08:00:15 +0000
Files and hashes: 1: BjEhACV2yXJRHQhe31y5AzO3--o.roa (hash: IOjD1WKD18GQcde1wwfvHfJUbrYC9FaaN08pCD3XzFo=)
2: XAJzZX7FoThNU28b2Z2RZQf-eyk.crl (hash: plGymD+kFmV7BTa22o/+DXNAARkLxri4OI9AgtwueFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:4d:84:42:62:a0:59:7f:97:90:03:0b:7a:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Validity
Not Before: May 1 08:00:15 2025 GMT
Not After : May 2 08:00:15 2025 GMT
Subject: CN=d5690942497710fb6f644fcfd64e605e72046b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:42:c0:1b:2c:f9:3a:24:b0:41:e4:0c:33:
c6:e9:58:25:a6:31:d3:ec:77:e0:23:e8:34:ef:45:
5d:36:ba:2b:19:3f:85:9a:fd:91:0a:95:88:80:6d:
c2:8d:b9:83:5d:28:02:39:71:78:18:2e:7a:6d:4c:
31:ed:a3:83:57:70:dd:b8:43:6f:db:c4:ee:b3:4e:
5c:11:87:ff:e1:91:6f:bb:84:46:fc:ef:ab:01:db:
5f:7d:11:81:bd:0c:7f:19:46:5a:93:09:a5:ae:03:
d0:47:13:c6:10:7b:f8:99:3b:37:9c:4e:39:12:fd:
94:bd:b4:bc:ab:5b:fe:49:18:f0:ba:2c:02:35:c5:
c2:54:cd:b8:b2:0e:87:67:b5:53:8e:9f:fd:99:66:
34:db:6c:2e:92:01:1c:c4:49:66:a3:ae:ac:3a:9f:
1f:10:2c:7e:b0:a5:60:10:90:e2:12:ba:37:7b:da:
e7:d3:79:36:35:31:54:e5:85:ba:30:de:e3:73:74:
f8:9a:6a:9c:83:bd:a2:bc:24:89:eb:a4:a9:fd:be:
c3:ce:56:29:45:de:a3:a8:12:7b:d1:ef:11:c8:f7:
24:e8:df:d9:22:2b:74:5e:81:06:2a:23:15:08:b0:
45:88:1a:4d:bd:5a:d9:86:73:3e:f7:0d:2c:66:8b:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:69:09:42:49:77:10:FB:6F:64:4F:CF:D6:4E:60:5E:72:04:6B:6D
X509v3 Authority Key Identifier:
keyid:5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9c:74:14:7c:df:5f:fd:81:4a:45:39:35:51:f5:4c:b6:92:
5d:3f:c2:c9:17:3b:91:4a:b4:36:7e:58:e2:7b:2a:d2:a1:e5:
8b:5c:d4:96:ad:ab:4a:f5:b5:33:b6:a0:9e:b4:6b:95:8d:0f:
7d:69:ca:17:b0:a6:a0:f5:51:95:ca:e0:9b:b9:81:12:35:fe:
1e:26:7a:3d:14:36:9f:f1:01:9b:1a:9b:db:05:91:ff:43:3e:
84:e8:74:71:b4:4f:3c:86:1b:f0:5e:0c:e6:1d:4e:29:58:3e:
9f:c1:d0:5f:2b:9d:06:77:1d:a2:ec:40:ec:2c:3f:c7:9a:a0:
b8:d6:c7:99:e7:6a:04:0c:f1:8e:06:21:07:02:6c:72:af:0c:
12:5a:04:bc:b2:97:58:ab:6f:81:29:2b:54:52:5e:a4:7b:90:
00:7e:6f:ef:71:8f:92:85:0a:40:a8:b2:c4:37:79:6f:92:75:
3e:7f:7f:91:bb:15:5c:71:40:29:7f:c0:b6:a0:f0:e2:a9:29:
41:91:16:1b:26:95:33:46:eb:02:c0:a9:86:a0:e2:39:7f:ca:
31:25:93:3c:17:18:9c:ee:b0:7b:9c:32:c2:a5:53:64:f3:a1:
33:69:ee:f5:ca:e5:8a:7d:d3:b8:e4:3a:7d:b8:58:81:23:43:
0d:d8:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:04:12 2025 by rpki-client