Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: hwe2Ojzm+PfLnWVUYHmXNLsbm7SxOIVoUM/1WNgKihc=
Subject key identifier: 12:AB:48:7D:B5:46:43:6D:D9:B4:4E:EC:64:2E:BA:F0:8A:C3:E5:63
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 0194BCA972464DFD0B5925DFB03E162B7F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0225
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: pJwTVKtSpODnZdX1gZMF/QjMW5d+yXJlFwiezX7j90M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:72:46:4d:fd:0b:59:25:df:b0:3e:16:2b:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=12ab487db546436dd9b44eec642ebaf08ac3e563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:5b:97:9b:fc:9c:2a:e7:22:84:a5:0e:aa:
1a:bf:60:e9:28:85:06:45:42:d8:5d:62:ad:dc:cd:
09:07:72:d1:ab:04:19:ef:07:a5:7c:49:d7:be:db:
46:5c:9e:d9:43:f4:4f:1b:8e:10:3d:4b:0d:01:04:
7b:43:17:6e:5e:67:dd:45:d5:77:34:68:d6:f2:15:
50:05:3d:a0:ec:2d:51:b8:b8:c9:8a:97:d1:d0:08:
71:ab:6a:7a:8e:a6:0b:6f:b6:08:43:51:49:86:b3:
d3:a2:ca:9a:98:31:c1:68:d9:b4:80:53:8d:c1:91:
f3:de:5a:5d:5e:04:91:99:b9:c4:12:5a:1e:36:2c:
8b:c9:bb:3b:25:90:bf:74:6c:0b:21:d3:39:e9:ff:
eb:e7:ed:50:d6:22:63:c9:85:c4:4a:f8:dd:bc:87:
f1:9f:b2:f0:c1:5c:e1:97:6c:fb:56:b2:17:ab:5e:
a8:21:85:0c:68:8d:43:fb:ec:c2:24:7e:4d:a7:17:
32:d9:f7:37:c8:f7:4a:7c:87:5b:8e:8b:7a:7b:e7:
89:a8:81:11:80:5c:c8:47:eb:0d:48:ec:70:7d:71:
b8:2b:1d:b1:d2:46:01:38:11:08:c6:c7:cf:a0:4a:
52:64:88:3c:9a:65:4f:ac:69:82:c5:fc:d4:f5:40:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:48:7D:B5:46:43:6D:D9:B4:4E:EC:64:2E:BA:F0:8A:C3:E5:63
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a4:13:23:c1:3b:35:28:a7:6e:b9:05:3d:41:62:d4:38:28:
ba:d0:da:83:1d:2b:40:6f:8d:78:33:d0:c9:4c:45:4c:41:f2:
a1:7e:74:33:09:a3:1c:3a:3c:ee:5c:86:7a:eb:c7:6f:4f:30:
59:95:b0:10:52:a0:86:2b:82:20:cf:1e:dc:52:68:04:db:93:
5b:27:23:40:1e:65:b2:af:00:e2:ec:5b:35:e8:8a:72:2c:07:
bb:73:cb:1d:49:6c:75:10:a0:b7:09:c5:ec:a0:45:44:9f:11:
77:3e:59:f2:45:a8:7f:7f:a5:4b:cb:37:9e:cb:4c:cb:75:19:
5c:2d:07:87:72:ca:69:d4:2c:15:e7:04:7e:ae:d1:f9:61:b8:
61:14:92:d0:60:c6:47:40:04:9a:cd:1f:9d:77:64:9e:74:be:
1f:03:81:90:34:84:56:68:00:21:90:3d:c4:d8:6c:46:76:b3:
fd:4c:f8:67:7b:19:dd:54:c1:02:bf:7d:70:7b:e3:cb:4d:96:
64:bd:52:50:a9:10:9e:96:43:f3:6b:13:7a:d9:3c:70:75:b5:
4b:6d:9f:4a:26:9f:0f:af:29:84:ac:89:cc:47:ff:10:06:fb:
5a:ff:c8:0e:dc:cf:f4:51:5e:a0:7c:ee:9a:3b:81:aa:73:54:
84:bb:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:36 2025 by rpki-client