Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier: mz3aorymNHOTw+ZFV+OnXCt6jLkCjy2FCXxlU4edh7I=
Subject key identifier: A7:75:15:2A:E8:03:37:31:83:4F:E5:0F:CD:7A:86:B0:3C:EC:AE:FA
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 0194BC3C8481BDA3657C2E18574ACEED75C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number: 143F
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: 42NnB3jW5n3RbWWrHMDd_7NubAY.roa (hash: bZyySLXxgMQfpoBtEuXSmgHgMgLKQxBjV3IqMenXg0E=)
2: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (hash: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=)
3: U3GEel-_AheBYgIYIVYL9mt_5dg.roa (hash: qjeuuOD21NigMG6GkIxT7OwP2vU0izG4cg6tV2NDSPY=)
4: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: Fhvtygs8YqOI7atyd8vrAv1oU0Z4AKduGDa78WHxHVg=)
5: hMxFbe2_woNux6m3JkElwux-E5g.roa (hash: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=)
6: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (hash: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=)
7: r39ohg_NZTgE7vtYFVHPRToAzuA.roa (hash: 4FTLuNfEgCKiNNKOFBDQPOMSv9rbnZNd+FbSRU1rmMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:84:81:bd:a3:65:7c:2e:18:57:4a:ce:ed:75:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=a775152ae8033731834fe50fcd7a86b03cecaefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:af:6f:bf:69:47:28:99:1f:7f:31:66:45:
39:da:ef:89:53:5e:97:d8:36:2b:f3:bc:47:f5:e2:
6c:d2:3e:3b:1f:25:a6:1b:40:b2:ae:a6:09:6a:da:
bf:c4:8b:d1:78:7a:30:f8:ef:16:56:b3:13:3d:45:
6b:d4:66:27:93:47:bb:d6:de:0a:7b:8e:fd:f1:77:
d3:04:8f:05:0b:1c:27:48:ae:63:cf:d4:39:fc:5e:
8c:e3:b4:ba:92:13:11:1b:bd:bb:fc:83:ce:48:e3:
af:8f:8e:db:1f:d7:e4:74:5b:a3:55:2e:57:02:34:
84:67:e1:e4:fd:a1:be:c3:6f:47:39:3b:1f:2d:1e:
a0:94:75:54:0c:53:20:64:d6:98:2a:ef:74:6d:3c:
5a:78:be:c3:72:5d:94:58:47:ac:e3:75:87:14:0d:
ab:43:20:ca:a4:32:b4:1b:34:16:42:27:0c:60:e2:
c2:d7:64:4d:5b:42:63:8b:98:07:dc:40:1f:bf:93:
e7:db:89:af:c0:5f:28:53:f3:c1:35:5c:9c:0d:20:
c6:00:1c:5a:67:38:a7:c7:8f:fb:99:6e:11:27:b9:
a4:70:d0:9d:d3:13:57:2a:4f:80:45:77:84:1c:aa:
f2:30:6b:6d:a6:a7:c5:cd:d7:be:d1:d0:64:6e:e4:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:15:2A:E8:03:37:31:83:4F:E5:0F:CD:7A:86:B0:3C:EC:AE:FA
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ed:49:a3:b4:3d:b0:28:a5:60:b5:78:09:c6:68:a5:86:71:
fb:43:26:05:2a:de:41:93:ad:dd:5b:d9:3a:f7:8b:5a:fe:f9:
76:c0:a7:b7:34:02:20:28:09:5d:6e:92:75:21:ca:16:51:0f:
c2:5d:bd:41:8c:d6:4b:36:65:a5:4d:0f:6c:ea:00:77:50:8c:
37:a5:6b:1a:2b:1b:98:92:8a:b0:e9:01:05:11:6e:50:45:d0:
e8:8d:ce:6e:02:bc:6a:c8:e5:30:8f:51:bf:3e:3a:8d:53:93:
ae:fe:47:c2:e1:9f:b1:2f:20:cc:b1:90:b7:85:db:47:9f:2f:
d1:3a:e5:e0:78:b3:2d:81:75:15:02:b5:40:0a:66:ca:cb:cd:
e7:af:9a:c5:e8:9f:42:33:f9:0e:d1:62:99:c7:92:85:90:1d:
1f:b0:37:af:2e:f8:59:49:18:bd:04:8b:75:98:86:0b:7e:ab:
26:ea:75:a7:76:d9:07:27:f5:33:47:f4:ab:92:02:46:78:58:
b8:27:e9:c1:e9:b7:97:6a:24:66:94:06:a4:25:95:f8:6b:0d:
45:e5:39:07:02:1b:6c:81:c8:78:bf:a4:3f:a4:94:7d:cd:6f:
e2:03:f4:53:32:78:02:b0:46:3d:54:34:20:1e:2e:42:a6:99:
92:91:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:42:42 2025 by rpki-client