Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
File: xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json)
Hash identifier: uozz1ma7MhCAU3ojdomyTwLu5tAJAfbFubJiTT0wi+M=
Subject key identifier: C1:21:D5:A8:50:77:30:24:E3:75:A3:99:4A:C6:BC:88:02:CB:F0:A0
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 0194BD4E734B709D664311AC882932ABFEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: Bbxo5GOkMtBPV4eyDiJBtgGCAvs.roa (hash: gPTOZ/QwaGNzYqcGskaYm0Q9CUgsB/kmTCxE6lNVoV8=)
2: GkWtiMh4Kekgq83feCXLfv_pub8.roa (hash: UboiG7GPy5Vm4OyfuuuEVh7hhcZoHsmQQgbXPLJ/4ug=)
3: ScP8kW7fVZKKIlJqtoPhrGG1uQo.roa (hash: kBK8cN2i6ByxK8RJnTQxES9FzgvOd8FoOcnJVY/e4Bc=)
4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: YGpiKKnUV3HYgIaWrZMWJ4SEAWQDctSzqneUgdpLyfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:73:4b:70:9d:66:43:11:ac:88:29:32:ab:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=c121d5a850773024e375a3994ac6bc8802cbf0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:62:66:76:84:7f:c3:39:7d:f3:77:ed:2f:
67:fd:2a:a7:a2:81:55:58:e4:5a:71:bd:97:8c:ac:
23:c1:bf:80:2b:b5:0c:a2:27:f2:08:e4:46:f5:82:
3a:be:e1:77:cd:04:3a:ff:17:53:27:f4:99:ee:f6:
4f:4c:cd:11:3b:62:2b:8c:fe:ee:37:08:c8:0a:72:
f8:b0:cd:99:96:29:ba:ad:63:23:f2:96:5a:c4:6e:
8a:b0:a2:47:56:fc:66:28:c7:b7:10:b9:94:5c:77:
00:9d:83:1c:07:b5:cf:c9:cd:bb:c7:cf:bc:d1:e6:
ca:ef:8b:65:0c:73:d8:4e:dd:2f:f5:19:b4:c0:93:
f6:8d:48:dd:b9:51:7c:5f:e0:3c:33:f4:4e:26:1c:
d7:32:4b:34:4d:98:d9:f6:e9:1e:88:94:2b:34:31:
e1:f6:dc:88:ef:8d:d9:ea:dd:4f:dd:87:e8:15:97:
2b:94:e2:89:5c:24:71:e4:2b:ec:87:77:d2:d1:f1:
bb:70:b7:ab:91:f4:11:02:7e:21:62:91:2d:f4:24:
88:49:7d:5e:21:40:2a:75:67:17:28:e1:47:b1:a2:
4e:46:bb:33:9e:23:a8:92:db:24:d9:5d:0c:70:29:
ff:66:b7:54:58:72:39:73:b1:9f:ff:4f:92:8c:c9:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:D5:A8:50:77:30:24:E3:75:A3:99:4A:C6:BC:88:02:CB:F0:A0
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b1:6d:67:d7:94:e4:a4:8e:3e:85:a3:5c:9a:2b:87:17:4e:
f7:03:f3:d9:12:d2:d5:09:b7:08:5f:9d:2b:6f:12:86:f2:48:
30:b0:c8:9a:82:6e:ee:fc:1b:58:a0:92:6a:47:36:da:5a:33:
44:3b:d4:9a:30:36:c2:38:b4:5c:05:1d:1b:63:ef:8f:1a:53:
7d:40:4e:d9:27:a9:e2:52:d0:fa:cb:a1:19:76:ca:51:d0:60:
6f:39:af:4b:ce:02:c6:22:14:0b:51:aa:54:67:07:74:94:f3:
44:44:c1:36:65:27:09:e3:b9:05:d9:00:06:fd:f3:5b:dc:f4:
93:6d:17:44:4d:0e:e7:be:ec:90:8b:0b:c6:0d:ae:8a:be:9f:
4d:d1:1c:d0:de:39:0c:c9:c7:13:77:f7:9e:bb:e1:fd:37:18:
f0:07:21:a5:81:ae:40:f9:5e:1a:db:80:be:ac:b9:2b:79:a4:
17:d2:9f:de:60:ec:e3:09:51:ec:b2:07:5a:4f:6d:08:67:d4:
32:4a:ac:4e:63:c6:28:62:8b:92:32:84:c4:52:99:37:74:50:
58:25:e5:f8:a7:dd:6a:4c:33:f6:cd:24:0b:02:d1:5d:83:12:
7a:0d:91:4c:bd:3b:61:15:2c:68:9d:a1:16:41:ca:f3:52:91:
99:15:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:03 2025 by rpki-client