Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: KmKuBC38nDhGPa4nMTZHI0F2GRblyMgGtrPTLBKFVPw=
Subject key identifier: A4:13:89:4C:3A:DE:04:A7:E3:71:57:38:AB:57:4C:71:F8:04:E5:3A
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 0194BD853BB8B219FE37E37D301B97DD4AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0B90
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: 7AnGJWDwetZDIP23qq1dE/s5KRQLSa+hNY0ZuUo192g=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3b:b8:b2:19:fe:37:e3:7d:30:1b:97:dd:4a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=a413894c3ade04a7e3715738ab574c71f804e53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:22:c3:24:ea:cb:0e:4b:ce:46:8e:17:3d:
67:01:b4:b9:11:8b:88:12:dd:4a:e5:80:b3:e2:d8:
59:88:03:b6:c9:41:8f:4b:29:70:4b:f2:ce:af:de:
e2:b6:ba:20:38:c2:24:a3:59:bb:01:49:2a:1e:19:
ad:c4:d6:01:f4:29:9f:8a:0d:de:b6:a7:ee:4f:f4:
5c:bc:2b:d9:2c:7d:c3:62:e3:1f:a9:3c:17:1b:4e:
ea:03:74:d3:a4:38:f4:fd:f5:c1:2f:d9:d0:c3:02:
fe:6b:77:6a:07:16:b3:33:4e:bb:5a:87:77:14:8e:
38:b7:69:15:55:16:10:b1:18:f1:62:46:3f:9d:3f:
55:2f:c7:4e:8e:b1:dc:75:66:54:74:7d:b2:af:0b:
16:21:b0:4d:20:63:99:e7:79:91:7f:8d:e6:ca:9a:
29:2a:47:88:96:8b:7f:aa:63:b8:bb:bf:02:24:ac:
68:f7:9a:10:46:f5:5d:e6:57:d3:96:82:17:11:d4:
04:76:51:87:7b:ce:82:ff:1a:76:89:71:2f:e0:2d:
4f:4e:77:c6:da:15:8f:40:87:5c:4c:37:2d:e3:14:
bc:7f:39:b1:fc:3e:8e:db:8f:b5:22:a8:24:da:ec:
ee:c1:25:f3:04:1f:51:9c:30:1f:76:11:44:07:a6:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:89:4C:3A:DE:04:A7:E3:71:57:38:AB:57:4C:71:F8:04:E5:3A
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:20:fb:c8:5e:29:54:ad:b1:4f:a4:0d:e2:c9:25:df:84:0c:
eb:a1:85:e3:7f:86:ce:61:02:49:87:10:6f:7d:af:ed:a9:59:
f5:fe:98:49:cb:84:b3:57:99:c8:94:ba:b4:26:82:42:4b:f6:
e5:17:5d:bb:56:cc:5e:c4:be:2b:b2:7f:17:87:e4:3b:a4:28:
07:09:c5:44:33:3b:3f:a1:a1:41:d7:41:7e:75:a3:11:9a:e9:
73:3c:26:ec:4a:66:52:5c:4c:2b:9a:83:13:99:1d:8a:ab:4e:
13:f9:93:55:fd:61:35:30:e1:c8:30:02:21:7f:32:84:23:98:
5c:a1:0b:23:db:9b:f9:c2:5e:8f:ef:5d:16:c8:90:ba:3c:4f:
51:45:48:f6:e4:6d:66:1e:78:0e:fd:82:60:50:2c:e5:31:e3:
91:5a:4e:46:f1:e0:7e:45:d2:e1:6a:ef:51:64:17:8f:6a:3e:
85:de:ee:79:ff:51:54:92:44:52:7f:0b:30:fd:e7:a9:50:95:
5e:5a:d0:89:e4:17:d4:d5:91:39:32:c9:5e:39:6a:f5:85:a9:
98:df:2a:e6:51:75:9c:1d:04:c3:40:96:84:9f:9b:3c:df:c6:
f2:cf:db:2d:23:67:17:9d:34:96:f8:4d:e8:7c:34:b6:c0:30:
58:1a:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:42 2025 by rpki-client