Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: rFJ0NpT8PWLhlWdUlb9+6Akh7MNZh3FaWxJJE3ny05k=
Subject key identifier: 9C:2C:0B:79:4A:8F:B3:F8:2B:99:9D:C1:FB:BD:20:42:28:A6:39:3D
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 0194BCE0CD58F9066F0308FCDE90EB161B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 1328
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (hash: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=)
2: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: BK6HOPn/7dmco+HtoPSZz12/FCnnrQvUQZBzPgDWjTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cd:58:f9:06:6f:03:08:fc:de:90:eb:16:1b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=9c2c0b794a8fb3f82b999dc1fbbd204228a6393d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:42:9c:ef:e9:f8:7e:78:f4:7d:a5:bf:e9:
44:24:38:62:22:ec:f5:4d:05:7f:90:cc:5a:b4:55:
20:6a:df:24:d5:98:09:ee:5e:39:b2:5a:ac:7e:6d:
39:da:04:83:a2:26:0f:fe:6e:88:75:2f:09:fd:95:
06:55:da:5b:1f:52:7b:76:b2:61:70:22:a5:c8:08:
76:55:54:e8:14:95:86:96:ba:d0:56:38:89:8f:c2:
6c:00:3c:7e:bc:5f:87:38:7a:18:db:c5:9a:f2:43:
15:b1:d5:33:ba:5c:b9:10:0e:07:bc:a8:34:d8:af:
01:dc:1a:3b:73:d4:2a:62:3d:77:67:ab:62:73:ed:
62:c3:ed:3c:0f:74:34:d2:c8:46:1f:e6:65:0b:3c:
df:89:b7:3f:62:66:b2:ff:98:37:79:2a:3c:f1:48:
c8:04:99:1a:b3:db:a0:f6:0c:49:21:fa:a6:be:b0:
3a:c4:09:02:78:6a:b4:5e:23:20:50:2c:65:f8:51:
e1:17:44:30:ba:f9:18:b2:2f:68:f3:b6:50:8b:15:
5e:7f:44:f6:37:cb:e0:33:08:8a:77:3b:2b:59:4a:
c4:89:2e:b3:8d:c9:c3:95:03:78:54:e8:3d:a2:63:
f1:bf:ea:9e:53:88:a5:25:11:be:34:42:40:01:d1:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:0B:79:4A:8F:B3:F8:2B:99:9D:C1:FB:BD:20:42:28:A6:39:3D
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dc:e5:6f:c9:b0:d3:32:87:0a:b6:d4:6e:27:ca:06:26:ae:
de:6f:7d:71:de:f7:86:0c:4b:6a:13:7a:4b:75:20:44:c2:e6:
cf:80:ee:e2:76:0e:8b:f9:44:2e:8a:8a:3c:16:ce:b2:ec:2b:
b4:ab:9a:1b:4e:ca:28:d4:dd:7a:68:f7:bc:5a:4e:44:d2:e4:
4a:76:0d:18:90:b2:5a:df:e8:cf:33:56:a7:ea:f7:07:f8:74:
fe:11:e8:a3:37:f3:3f:25:89:ae:93:00:47:dd:4b:39:b1:f9:
dc:81:b7:24:27:41:ea:45:e7:5b:5b:7b:b1:5d:0d:8a:d4:48:
b8:3f:7c:e8:ee:62:70:49:08:27:91:5b:eb:28:be:33:13:f2:
47:1b:9f:fc:c4:bc:2e:c6:f3:dd:11:c4:05:97:99:78:94:1e:
d7:85:29:c5:80:77:82:e7:2e:8a:25:89:9b:94:6a:c0:e2:0e:
43:8d:37:72:1d:fc:d7:e3:93:a2:c1:fd:5e:2c:b9:33:7b:3d:
f4:cc:65:7f:e1:0b:ad:46:33:0e:ce:de:04:8f:af:cf:8b:da:
be:17:19:1b:c4:e3:61:51:cc:bf:84:90:c6:be:d8:4e:90:3b:
98:64:b7:10:d6:49:1f:de:86:2e:15:ac:0b:9c:77:8b:c8:02:
08:d3:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:27 2025 by rpki-client