Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json)
Hash identifier: S40HgqP6e9ebwyY/ScTVx2mxwZJMIRyaDLigQsyTDTQ=
Subject key identifier: 17:2A:DC:F5:D7:36:66:0C:5D:0D:BA:55:82:40:33:42:AF:E7:60:B0
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0194BCE0D29F5BCFB17AC62DF7FCFF76ED45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
Manifest number: 1443
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=)
2: ZtiS9Pto6VHvMUHwUiqh0R5TY5s.roa (hash: LS84CtdfUD65sIZiV3Ayic6gxW4afu2zea6JfhhyLEk=)
3: g8YSxO_8Ip9UBLYet8A0GL5zXR0.roa (hash: sivOq0uVyUFZk0M3eQF/V08mpS5FONf5vLTU66PZnoE=)
4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=)
5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=)
6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=)
7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=)
8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=)
9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: 7y+IJvTNDlHLofUQIYjDlHkHrsGLP/RLor36G6Kt4Zc=)
10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d2:9f:5b:cf:b1:7a:c6:2d:f7:fc:ff:76:ed:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=172adcf5d736660c5d0dba5582403342afe760b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:cd:11:ea:d9:b1:9f:5c:f2:f8:69:ab:3d:
50:0e:7d:5d:51:b8:05:19:85:6e:f0:6a:67:e0:1c:
9a:ce:1b:fe:2c:9e:6f:96:4d:5a:99:1e:05:b9:5a:
18:49:ac:99:5d:90:4d:34:21:88:11:b0:36:5c:6b:
df:98:fa:37:55:4f:ab:13:b0:d9:73:29:f5:99:8e:
ac:09:f0:1a:00:68:cd:16:41:e4:59:f9:6d:71:6f:
f6:ee:a5:56:ec:8e:bc:50:81:83:31:c1:95:1f:d0:
ac:52:14:5d:a0:53:67:b7:c5:8e:11:68:9f:e3:6a:
75:b7:6c:b5:43:b9:32:d5:83:c9:e2:03:66:91:1b:
02:bd:22:a7:35:a1:18:cc:de:da:3f:02:8d:da:5c:
31:56:3d:2d:71:e9:86:45:0a:94:20:0d:eb:fb:fd:
d8:11:67:63:b7:c6:05:46:0c:63:1d:ad:d4:81:aa:
c5:c9:dc:f4:45:52:a0:dd:e9:de:56:b6:a4:56:6c:
7f:05:5e:5f:89:69:78:28:34:46:1b:9f:14:84:4e:
b4:81:9f:91:bd:70:57:d1:41:02:ab:9f:11:86:a4:
d8:0d:17:a1:c8:11:3c:44:7e:91:38:8c:2e:24:38:
7e:49:53:4f:12:d2:f4:0f:e4:4b:41:dc:26:e0:d0:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2A:DC:F5:D7:36:66:0C:5D:0D:BA:55:82:40:33:42:AF:E7:60:B0
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a4:6e:b5:29:a8:a2:ff:4c:55:b3:85:e3:b4:7f:12:66:37:
c1:80:b1:be:96:f3:e3:e3:be:67:5a:cc:6b:97:56:8a:06:df:
34:e1:3b:be:df:10:40:e6:d8:1e:7b:05:80:a7:6b:62:76:29:
6e:0c:30:3a:b4:94:89:d8:4e:fb:e5:34:24:17:79:41:3c:ae:
ac:44:91:2b:c1:11:ff:fd:f5:28:ea:cb:d9:9c:26:3b:b4:23:
6b:bf:6d:e7:18:f3:34:41:19:0f:cf:f5:1f:d1:42:7f:7e:93:
1e:86:3f:47:88:b5:08:29:37:e6:e3:0b:e7:86:db:d1:cc:c4:
1b:61:cc:43:f8:2d:2a:e2:3b:0e:62:c3:27:eb:08:c2:a4:94:
e9:aa:d0:49:b1:55:1f:53:31:6d:e2:b0:9e:85:58:27:51:a8:
54:ab:02:7f:84:e6:fc:3e:a8:f3:5a:98:32:2d:ba:ce:74:fe:
9e:5f:a9:d4:2a:1d:f5:63:d7:5b:1f:1c:aa:33:96:59:d4:96:
57:4f:fb:d5:a2:14:fa:01:3b:02:a6:19:36:85:20:98:6f:a8:
ac:d8:f8:2a:fb:5b:99:87:1b:9f:88:7b:05:1c:c0:6d:23:4f:
1d:bf:77:d6:f0:a0:fa:e4:cd:f4:c4:73:c9:3c:93:06:c5:66:
1b:5f:d2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:46 2025 by rpki-client