Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json)
Hash identifier: hACuVjhIblsX70l1Mae435qcgnxT2TiVcr1uHOu2ZKU=
Subject key identifier: DA:B4:3D:F8:CF:40:9D:99:65:F4:9B:67:71:05:3F:29:28:81:90:37
Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Certificate serial: 0195E0B4AA73072E76955D5027CBE2C6A386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 07:01:31 +0000
Manifest this update: Sat 29 Mar 2025 07:01:31 +0000
Manifest next update: Sun 30 Mar 2025 07:01:31 +0000
Files and hashes: 1: HBQ9odudt8FtC2hg2PdPFEmL6sY.roa (hash: qLOlhGmFNavd+EfWsRToyvlmrGX+k5BkUmneKAiMnB0=)
2: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: NmNH++2mwWOG6i+sbATYVWOYgJxPiu1MqltiM2G5ZwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:aa:73:07:2e:76:95:5d:50:27:cb:e2:c6:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Validity
Not Before: Mar 29 07:01:31 2025 GMT
Not After : Mar 30 07:01:31 2025 GMT
Subject: CN=dab43df8cf409d9965f49b6771053f2928819037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:58:a2:4e:a2:ea:36:44:21:6a:36:22:76:
d3:66:9c:ed:60:06:bf:37:06:a8:ef:fe:85:61:ff:
60:04:41:ae:ab:5f:ab:5c:f7:e7:ee:d7:f1:87:99:
ad:19:d3:97:27:c2:85:76:7e:36:8f:c4:a2:86:4a:
c6:67:23:27:0a:36:7c:5b:50:3f:77:db:f3:16:66:
f3:31:b1:05:33:7b:35:cb:f7:8a:ad:90:97:03:5f:
81:73:fb:64:7a:4b:f5:78:47:48:fc:d5:ec:86:86:
ee:e4:c4:72:e2:ed:95:e2:76:95:ec:b3:60:a0:7d:
c3:03:74:ac:95:43:cf:a8:bd:a3:22:91:20:c6:e2:
63:a7:5b:5f:8e:e3:44:f4:51:f3:32:5f:2f:c2:56:
e2:99:7b:91:4a:4f:b9:59:95:1b:68:3e:1e:05:ea:
6b:16:35:33:37:25:ca:db:87:49:7f:c1:2e:30:35:
47:63:13:53:45:ee:f7:d3:7c:0d:29:bb:56:76:3d:
48:6b:cb:f8:2d:4c:a6:41:6f:b9:f1:71:33:fb:a7:
0e:3a:e2:a1:d3:03:fa:af:fe:61:d1:f4:a1:17:18:
1c:b1:67:19:c7:be:35:9a:b7:e7:46:d5:82:d5:5d:
bc:90:28:77:60:30:5e:5d:1f:32:2e:a7:26:a5:2b:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B4:3D:F8:CF:40:9D:99:65:F4:9B:67:71:05:3F:29:28:81:90:37
X509v3 Authority Key Identifier:
keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a0:77:98:38:5f:cb:62:4d:bc:dd:06:76:30:6a:42:ca:43:
83:86:22:11:45:38:14:05:16:dc:42:ae:52:98:e0:29:ab:e8:
25:e3:3e:aa:65:96:55:e5:12:dd:d2:18:dc:41:2c:66:a7:ce:
a6:94:63:c9:9f:f3:eb:f3:83:97:c3:84:87:66:8e:17:b9:a2:
59:b7:6e:3d:eb:c9:a4:d6:58:32:ac:9d:35:13:9c:17:7f:56:
75:1c:30:e3:ed:d1:66:5b:49:36:6b:e0:dd:38:e6:75:1d:c8:
3e:5d:b9:51:cd:76:54:87:f3:7d:d1:0e:ea:74:61:f4:02:33:
c8:b8:d0:94:ea:6c:98:03:89:18:0d:48:e2:b4:3c:31:23:b7:
34:d6:75:9d:c1:5b:64:06:54:ef:2d:00:78:44:e6:bc:24:05:
4f:da:72:1a:60:f1:ca:b2:e6:71:b0:ea:2a:24:47:52:ed:3d:
62:55:0d:c2:96:b7:08:c2:3b:9f:1e:b3:1a:44:d8:d2:43:a5:
e8:8a:ee:85:f1:94:fc:68:7b:42:cf:a0:71:ae:41:81:57:30:
7e:d7:a9:64:08:db:22:56:7b:ca:50:58:fc:2d:7e:a0:49:c5:
74:11:7a:fa:a3:8b:cd:6e:5d:57:85:eb:d4:f2:10:82:91:bd:
5c:ec:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:44 2025 by rpki-client