Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: rRzcXxV9AbNzrbP74OR+Sn3U29rqsaq+QavMi3gre9o=
Subject key identifier: 65:EA:EE:AC:D0:38:11:AD:1E:17:0C:A2:41:BE:B4:DA:9B:AB:5A:EF
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 0194BCE0E0274A5F0B1F48AD9CCE2E76D4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: sLYOrH9C9GrsHPDpppR3xx/oQhS5FumOG+aWpbVo93o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:27:4a:5f:0b:1f:48:ad:9c:ce:2e:76:d4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=65eaeeacd03811ad1e170ca241beb4da9bab5aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:70:62:b8:97:6a:08:b5:e9:e0:ce:b9:ab:
3e:72:4d:43:00:77:e9:c1:b8:61:69:c0:ac:83:53:
df:e0:33:92:92:e3:0a:55:41:8f:12:93:5e:36:43:
97:14:78:30:04:83:80:55:a8:a6:c0:3b:d5:a9:15:
05:a5:5d:65:b5:80:35:61:0b:b7:9a:d8:4f:af:50:
14:0b:e9:a4:85:8e:c8:63:7d:4d:40:b9:9e:bd:28:
1d:89:e8:18:7e:d2:f5:b3:a6:5c:96:0d:1e:62:39:
c2:73:26:57:9b:5e:f2:98:11:a2:4a:b2:10:fd:89:
6c:b0:c3:e3:ef:fc:52:06:f8:2d:0d:8a:8c:8e:b3:
4b:3e:e9:76:12:52:38:e3:db:75:8d:fd:47:ff:e8:
aa:62:3f:22:39:df:71:d7:df:c2:0e:99:4a:21:c4:
15:23:62:ff:30:bf:92:7b:b5:5d:ab:e4:f9:be:bf:
b3:69:d9:22:2c:41:f2:8a:8f:a1:89:a8:26:a5:22:
0f:b9:7d:33:b7:2f:ed:a6:3b:87:dd:08:38:92:a6:
21:44:0a:28:61:a6:1a:25:94:b8:f3:4a:4f:b7:22:
52:24:02:c4:80:7b:99:12:45:65:6c:8a:69:c7:f8:
6a:9d:13:b9:e9:17:7e:69:39:c4:c6:86:3a:37:7c:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:EE:AC:D0:38:11:AD:1E:17:0C:A2:41:BE:B4:DA:9B:AB:5A:EF
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:e4:58:a0:5e:e4:42:bf:39:ef:2d:34:cd:f7:41:f1:c9:
d2:6b:30:2a:f3:a1:20:02:81:d1:d8:b7:ad:97:c0:fd:a5:de:
d0:9b:c7:e8:0e:1a:b4:fd:65:f2:ae:5b:13:15:94:3d:f6:ae:
1a:1b:0f:de:97:82:61:1b:bb:62:76:a8:b8:89:32:4e:6a:9a:
c1:e9:b0:42:72:0d:6f:6b:2a:ab:a0:d1:99:57:a0:82:68:14:
2f:c3:6f:08:b7:9a:f5:32:c5:e5:ea:5f:ea:0b:b8:39:9b:d8:
4d:f4:78:d9:18:bb:23:17:23:08:4d:84:aa:0a:11:e6:3a:17:
ff:af:0f:29:d4:41:0f:6d:77:4d:54:d4:40:61:6f:6e:a3:fc:
27:31:bd:4d:81:f7:97:f8:b0:3d:27:19:ba:5d:25:4c:ed:cc:
70:a5:d9:eb:6e:e3:a9:05:1f:92:98:50:55:cf:cd:13:0a:87:
2d:09:35:89:b3:53:de:31:c8:17:47:7d:54:1f:8e:e5:e2:35:
d9:31:34:59:70:7b:4c:15:28:4b:81:b0:de:71:69:54:44:9e:
e5:e4:04:4a:50:8c:aa:cb:3a:a1:81:35:80:9c:c0:08:42:dc:
8d:cf:e1:26:8e:a0:ed:b0:ac:8b:67:f1:0f:77:52:e0:b3:a8:
45:a8:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:43 2025 by rpki-client