Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: eAxeANlTug7xS4uDkIwcoHZIoI0djsUIB+PpOZMAM2c=
Subject key identifier: 6D:16:1E:CA:AA:5F:05:54:80:F0:82:79:26:87:37:2E:15:0C:A4:E5
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 01962F7497540C17E0535782947AD3AE5679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 0DED
Signing time: Sun 13 Apr 2025 14:01:32 +0000
Manifest this update: Sun 13 Apr 2025 14:01:32 +0000
Manifest next update: Mon 14 Apr 2025 14:01:32 +0000
Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=)
2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: KwKq8nEpC5cAEwUNzEtde01O//wYF4FND80IE4TXDco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:97:54:0c:17:e0:53:57:82:94:7a:d3:ae:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Apr 13 14:01:32 2025 GMT
Not After : Apr 14 14:01:32 2025 GMT
Subject: CN=6d161ecaaa5f055480f082792687372e150ca4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:c3:17:81:8a:67:4e:cf:65:62:95:f9:3b:
dd:4f:bf:95:4a:ad:76:94:95:18:3c:5e:d3:a6:26:
7c:ec:97:c0:bd:6f:47:e0:5e:a4:10:49:a9:8f:2d:
76:df:cf:a7:81:92:3f:2d:2c:e4:f8:7e:bf:6a:ab:
28:82:85:ac:00:9f:ef:27:57:64:6f:01:71:fb:54:
cd:80:76:01:c4:d3:b0:73:98:8d:1b:d6:05:4c:8d:
92:82:f3:ec:4f:9b:ce:d2:15:06:fd:7f:e7:ca:2d:
af:4c:bc:f2:1e:c4:2f:ea:e3:e8:aa:c6:e8:87:29:
1f:5f:fc:ff:ca:15:ce:7c:19:64:6e:39:b7:b5:94:
01:f8:82:a1:a9:be:99:fd:89:56:91:39:5d:7e:23:
63:5a:ee:41:f7:ae:bc:b7:57:6a:e0:e2:81:3f:79:
30:2b:ef:ec:aa:f5:a4:ab:d3:39:47:f8:6a:a1:d6:
20:db:d0:4d:07:e0:83:38:8d:70:e5:55:0e:ee:30:
58:8e:a0:93:8d:15:a1:d3:08:8b:c8:1a:e2:08:7d:
c6:ca:93:82:6a:ed:db:0c:fc:ca:47:c9:38:85:fd:
05:4e:34:0a:10:2c:2a:ec:74:2d:fe:87:91:0f:b5:
3f:f8:0b:7d:78:16:4d:86:c6:74:e9:98:7e:7c:01:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:1E:CA:AA:5F:05:54:80:F0:82:79:26:87:37:2E:15:0C:A4:E5
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:db:1e:ec:87:68:61:8e:e2:b8:4c:fd:69:e5:37:90:5e:3b:
48:e5:37:ea:02:e7:52:13:05:ae:78:93:b1:9f:69:79:15:75:
46:30:4b:81:2d:4b:43:c0:b8:2e:e9:cd:80:d8:4d:11:71:4e:
f7:c8:b9:a7:49:37:7b:9b:39:dc:6d:4c:83:f7:8f:b4:60:9e:
fd:80:a3:0e:c7:b8:d6:10:30:a0:fb:9d:34:b5:73:d1:a0:e2:
a7:6a:d2:c2:fa:db:aa:ff:cb:94:c3:d9:be:92:c4:89:19:8f:
ad:17:eb:2a:c7:8f:8b:c3:d4:d9:4e:3e:e0:66:bf:52:e5:59:
86:01:1f:79:6a:fc:04:e0:45:f6:72:7c:7e:3a:87:0f:b7:d8:
ad:7e:26:65:73:1e:e2:b8:b9:05:b4:20:51:cb:e9:79:e0:07:
7c:75:2e:d3:af:e4:79:71:14:3e:c3:92:b5:94:3f:65:1e:22:
85:1c:02:3f:c2:01:69:5e:14:b7:d7:00:dd:8f:32:9d:d3:8a:
1e:0e:ea:7b:53:93:4a:86:71:f0:ac:9b:c0:92:5e:9f:8a:b9:
ed:48:52:64:20:38:64:3e:bf:50:82:01:b1:44:87:a7:14:38:
69:5c:82:7e:d2:6e:3c:9f:1a:b1:70:96:7a:9f:f2:08:91:c6:
7a:ad:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net