Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
File: XsApKzJbgsdEucIBMrg7M7Uv_5c.mft (raw, json)
Hash identifier: nArkhR3e5u6MSCDBv7SMBKPLnmyl9e2jK7SQgNn+PP0=
Subject key identifier: 84:22:5A:7C:31:D6:63:DB:77:C0:64:E8:AB:86:B9:98:AE:C3:E8:38
Authority key identifier: 5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
Certificate issuer: /CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Certificate serial: 0196D7096C189E32756D4669CE1439D836FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
Manifest number: 0402
Signing time: Fri 16 May 2025 03:00:41 +0000
Manifest this update: Fri 16 May 2025 03:00:41 +0000
Manifest next update: Sat 17 May 2025 03:00:41 +0000
Files and hashes: 1: XsApKzJbgsdEucIBMrg7M7Uv_5c.crl (hash: WLI2bJpm5/LoaNGsqNMpDpmBRdqJmwCYtawevLwFKtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:09:6c:18:9e:32:75:6d:46:69:ce:14:39:d8:36:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Validity
Not Before: May 16 03:00:41 2025 GMT
Not After : May 17 03:00:41 2025 GMT
Subject: CN=84225a7c31d663db77c064e8ab86b998aec3e838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:9b:b7:07:e4:67:57:b9:9a:f4:99:a7:95:
0d:c2:63:a5:f0:2d:53:f9:ed:9f:94:08:89:94:0a:
7f:9f:09:90:ac:fa:6e:9a:3f:67:fd:13:d7:5e:cb:
59:f5:92:75:d0:d5:a1:eb:88:70:fe:48:3e:ce:54:
75:ae:b1:f1:9b:49:d2:01:37:2c:d3:f6:c8:63:1d:
c5:1c:54:97:37:6d:04:bd:7a:3b:ab:74:d0:47:54:
dc:b1:04:f7:82:ca:60:0a:92:f1:4f:0e:88:34:ad:
b3:39:2c:7c:ea:a6:91:93:b0:78:6f:1a:08:9a:ad:
e5:14:03:6b:67:b7:29:a9:dc:6b:02:d1:c4:69:e9:
be:60:91:f7:08:67:f7:b6:1b:00:46:a6:a4:ad:da:
07:df:e9:ec:a9:24:e2:25:c1:0a:30:a6:ad:d7:a7:
c8:dc:b5:70:fa:07:c9:47:e8:34:98:67:a4:14:4c:
16:39:26:f1:b4:a7:f8:4a:8d:88:40:a5:4b:3a:67:
95:cb:5f:20:1f:b4:ea:68:21:f7:ac:b3:fb:98:00:
86:c5:7b:56:46:89:c2:2f:e8:e1:d7:dc:c6:8a:67:
35:fc:e1:0e:85:06:f9:ec:ca:7b:5e:2f:d6:86:5f:
04:da:2d:a1:f6:3e:a2:af:4a:4f:42:c4:c2:b5:f0:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:5A:7C:31:D6:63:DB:77:C0:64:E8:AB:86:B9:98:AE:C3:E8:38
X509v3 Authority Key Identifier:
keyid:5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d8:6a:fe:73:6b:2e:59:e4:ad:7d:ee:b4:a4:51:57:ea:04:
a0:75:83:86:d8:df:41:a4:fb:31:83:e8:74:c3:d0:f0:d2:62:
8d:bc:e6:a2:1b:68:98:6b:1d:85:66:e4:09:70:32:a9:1e:ca:
e4:ea:34:58:32:70:a9:4b:85:42:75:dc:2b:bb:24:06:bc:f0:
5b:d0:77:b3:6f:0f:1b:53:01:5e:e4:ec:6c:d1:0b:2c:78:32:
c5:ef:02:03:78:0b:06:79:7d:14:10:9a:15:7e:60:3c:5b:6e:
a9:15:f3:73:f3:41:9f:08:af:62:b5:78:d9:fe:fb:33:48:3e:
ef:a7:f5:dc:6a:67:bb:b9:89:23:62:27:aa:79:58:35:0d:c3:
ee:99:94:58:88:25:aa:d1:ea:07:d0:67:11:0e:6b:fe:1b:e0:
e3:0d:1c:55:2c:4b:93:d5:7a:7e:54:28:36:bd:7e:3a:b2:a4:
20:45:8a:53:0f:79:5f:b8:f7:da:37:e6:42:b7:2d:01:60:aa:
37:e6:3c:65:f6:d6:dc:a2:36:28:8e:81:40:55:da:26:6d:17:
03:bb:fa:f4:5f:b1:54:3d:11:1c:ae:df:40:03:6b:ee:e9:4d:
9c:42:4f:ca:41:92:a1:73:75:db:e2:10:13:cf:d1:cf:35:c9:
5e:78:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:24:03 2025 by rpki-client