Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: fZ7K8WHnU5oIWhc77KuKy56coh7LUKlzf1KU9Os9wtk=
Subject key identifier: 89:3A:A4:9D:31:AE:23:EE:C9:54:33:93:18:26:5E:A0:E3:BB:73:09
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 0194BC3BFE84AFC7E6A95045CB73DC432DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0446
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: tSCZj83Zhq6Jbl1rSM8fxlArDqsYGdkd7OWfTJquGN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fe:84:af:c7:e6:a9:50:45:cb:73:dc:43:2d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=893aa49d31ae23eec954339318265ea0e3bb7309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:75:72:f1:f9:ed:a1:f8:ba:c6:ec:43:ea:
3b:11:c8:c6:18:1a:19:41:1b:8c:69:ea:eb:18:d6:
3d:95:ba:91:ec:49:f2:e9:47:1a:ef:41:f1:6a:d0:
40:9d:bb:2d:05:41:8b:a1:e7:4a:53:f8:5f:22:eb:
4e:a0:43:d2:2a:08:f0:34:f5:f4:b5:ab:f1:a2:f8:
37:a7:04:9d:90:2a:09:52:9f:21:27:e6:01:cd:e1:
a8:29:ff:e8:e6:28:c8:4a:74:57:e1:cf:bd:dd:6f:
e0:25:ae:04:1a:57:db:91:6e:64:c4:81:e8:6e:1d:
ab:8c:ca:49:52:e0:d0:5f:f0:6e:cc:2a:8c:61:dd:
2a:a2:ea:6a:d1:4f:f1:d5:6b:b8:b4:d9:50:39:87:
af:f1:d8:cf:3d:8f:1a:32:74:bd:86:a0:c0:81:31:
6c:63:18:e6:5b:12:d1:d9:e7:1b:6a:85:2d:cc:74:
57:5d:19:09:fe:1a:10:27:ee:de:06:71:20:4f:3e:
18:3b:61:59:4e:b1:fa:af:6a:62:9b:57:96:a7:9f:
dd:55:22:90:36:3a:fa:4a:15:bc:6d:50:60:cf:a9:
48:8c:f4:9a:61:a5:52:a1:52:83:81:9f:df:11:99:
98:51:bc:27:1b:39:17:62:4e:e1:70:5c:f3:7e:ef:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:A4:9D:31:AE:23:EE:C9:54:33:93:18:26:5E:A0:E3:BB:73:09
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b0:19:06:fd:28:47:db:f8:99:a7:2f:b3:e0:a3:e0:ca:eb:
57:b0:3e:c3:e1:17:ea:cf:a7:16:fd:9f:16:30:dd:03:73:70:
b1:71:47:54:f6:11:53:f3:9e:ba:2e:1c:12:5a:73:ad:5e:a8:
ca:d9:51:4d:92:e2:c3:65:3b:ae:a4:bc:b2:70:0b:d4:35:c0:
c6:92:9a:8b:76:bb:27:2b:b2:71:1d:60:c2:c4:43:c2:e4:33:
bb:d9:d5:c7:63:33:de:08:0f:62:56:40:fc:6a:3e:5e:c2:44:
23:6a:bc:56:fa:e4:6b:7a:d3:73:11:ff:77:46:fc:89:84:b6:
39:50:fc:b1:05:95:c1:02:11:11:68:d9:ad:07:01:21:d4:74:
4d:de:76:97:5a:64:32:11:6d:00:63:7b:77:4f:d8:3a:71:d5:
ac:20:9f:f6:2e:8c:18:66:dd:11:48:e9:3b:d4:91:a3:24:2a:
8c:1d:47:d1:9f:eb:2e:f2:30:80:e1:48:46:e7:18:09:a5:ff:
2c:4d:c0:2b:79:30:16:5b:06:30:3e:fb:39:f6:83:14:30:e7:
74:aa:dc:83:ce:50:4e:b7:23:14:28:ce:6e:55:c4:b7:c7:5a:
05:2e:1b:2f:6f:bc:11:3e:21:48:f2:26:1a:3f:a7:b1:c0:52:
8d:c9:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:13 2025 by rpki-client