Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: MBtjWxhi8ZIV4ovGEggX8vjpHggnnQwJdUMyxvvCHTc=
Subject key identifier: 8E:7D:C9:03:65:1C:18:6C:42:F9:54:71:0A:C3:13:45:0F:91:87:82
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 0194BC72C3B0D5C944F092C7C664F2FACAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: Q19jRkC9iAuAJsBGHO0oERn4DEbp+U7Ox9dHoHVddY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c3:b0:d5:c9:44:f0:92:c7:c6:64:f2:fa:ca:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=8e7dc903651c186c42f954710ac313450f918782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:9f:6e:e7:91:e3:9a:fe:93:3a:da:fd:af:
7d:53:ec:65:5f:07:3f:3b:e1:30:3e:83:b9:13:34:
53:ea:ba:c1:a2:33:e3:2c:c5:2c:52:2c:cf:24:97:
2e:3b:4e:2d:7c:e9:6b:74:5f:26:18:9b:86:67:9a:
6e:d5:c2:af:dc:e1:ac:fd:a5:40:d0:37:b1:3d:82:
65:38:03:2c:9d:1e:37:fc:2f:79:87:1c:92:2c:c5:
c2:72:05:e9:5d:e6:3e:9e:7f:31:a0:2a:47:a3:d8:
ca:44:c0:14:2e:b0:92:0a:b4:26:43:71:41:f9:14:
f1:e0:44:04:e3:60:dd:be:51:06:f6:f3:08:44:1b:
f8:54:93:b7:e6:dc:37:7e:6c:f2:cc:15:ef:dc:1c:
99:a0:e4:67:3b:a2:86:00:90:0e:36:9f:fc:73:08:
8a:ec:c4:8c:5c:6d:35:90:f9:28:3a:45:ba:96:11:
e3:c5:7e:71:68:7e:9c:66:de:b0:b1:74:de:5e:6a:
dc:06:81:b4:03:8e:34:58:f4:80:1c:0d:5d:a5:80:
7e:f5:b1:c8:ff:33:79:80:57:ad:08:b6:ee:13:57:
3b:81:26:a1:81:0c:12:72:7b:3f:78:c7:0f:ac:73:
78:bc:42:a7:33:2e:8a:06:b7:be:01:c3:54:47:df:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:C9:03:65:1C:18:6C:42:F9:54:71:0A:C3:13:45:0F:91:87:82
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:02:60:56:b6:39:86:ac:e2:35:0b:c0:3b:61:72:76:5b:a9:
fb:62:b5:06:ea:ad:20:d7:0c:a4:2c:34:c7:9b:1f:f8:fa:4a:
45:38:ef:fd:66:bc:ef:d3:7a:7e:f7:eb:c5:b1:7f:5a:4d:6f:
f9:ae:0c:90:ea:82:59:b6:98:74:bc:6a:cb:d5:71:99:75:88:
9a:85:e1:61:a9:60:c3:54:c8:06:a7:06:31:c6:49:6c:dd:4f:
37:ac:52:3f:01:c7:73:90:1f:a1:63:36:2b:01:75:db:28:2f:
90:83:f7:66:36:8a:0f:b7:98:6a:84:77:42:7d:fc:41:02:c3:
4c:49:9b:7c:b3:1e:1e:ec:ee:78:3e:b9:e9:27:cf:06:d1:7d:
28:12:47:c7:a9:e1:b5:db:f7:4e:af:81:6f:70:c2:8e:ec:b4:
ae:5b:94:e3:d2:c9:b5:eb:6a:03:0a:49:17:67:0a:d8:e3:5e:
a5:e4:59:78:a6:c8:04:7f:6a:b9:7b:72:b9:63:49:e1:5a:17:
5c:7c:dd:40:6c:b6:7b:41:69:2b:67:67:ab:8a:b1:84:7e:06:
2c:74:03:93:75:74:8d:2d:a3:11:22:31:e2:51:af:79:23:92:
b3:3b:3c:8b:3a:f3:45:24:a9:9a:62:99:f4:5d:b0:1e:c4:4c:
5c:8c:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:24 2025 by rpki-client