Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: DUatsyDySBs8Rx9Ugm2y0/95cJWedgUUaV6CXpqi4+8=
Subject key identifier: B4:E4:61:6B:C5:FC:44:0F:60:31:48:B5:C3:D3:CC:F8:35:5A:BF:37
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 0194BCE0E059082D812C87FEE9455CED2393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
2: O717_3WL1ywuJ5U7Gks8_FPNaW0.roa (hash: 0dHSB4WOyjbfnp96/SIFBaQgsSLMwg+jvOl2qiquYcw=)
3: aHqqL1NN5YtLBNmQYn6ZUukv3fE.roa (hash: LV3wM5zWPJWC7ZTCI+xUuEUT6iOR32mYf+UKwFD/zS0=)
4: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: Uuc0SxFsDislr4v07ZVDlnvQhhz0Vt9kTc8P1p3NOMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:59:08:2d:81:2c:87:fe:e9:45:5c:ed:23:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=b4e4616bc5fc440f603148b5c3d3ccf8355abf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:50:91:f4:a7:fd:8f:27:0f:40:b9:b8:6b:
54:f6:cd:eb:5e:7e:a6:15:cb:6b:45:d7:95:58:23:
28:3d:0f:73:06:83:4b:b8:5a:00:85:17:f6:43:4f:
ee:cd:00:4e:94:b7:d7:85:a4:9f:13:89:17:bb:e7:
6d:6b:70:dc:ef:bf:b8:62:26:ce:fd:fd:f4:d1:c5:
af:1e:f4:4f:b1:ab:bf:88:a3:36:ca:ac:e7:82:8e:
6b:5a:5b:cb:8b:24:32:ca:cd:a7:4e:1b:63:e8:2d:
da:db:aa:fb:e6:15:44:1c:01:64:5b:44:f1:56:47:
77:70:19:1d:c6:5d:68:13:5e:3b:2d:31:5d:2a:23:
a5:dc:f5:5c:fb:d7:68:6c:f4:ce:a4:1e:2f:72:49:
59:99:4f:3e:7c:bc:c8:73:89:85:6d:3c:11:3a:77:
e1:3d:d6:be:3b:20:ee:b6:2d:ae:53:32:6a:27:b6:
45:23:fb:85:c7:54:59:67:f9:a2:f1:9b:97:d3:42:
98:b3:28:06:ee:38:29:d3:f5:5d:65:89:8c:69:02:
c3:e5:cf:18:5b:ea:38:9d:fb:2f:98:3c:ea:63:0d:
da:9f:8d:5d:6b:e4:42:ab:1f:09:25:2f:8a:41:2d:
d7:3d:8a:33:ec:f8:26:f7:fb:92:80:67:01:de:b8:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E4:61:6B:C5:FC:44:0F:60:31:48:B5:C3:D3:CC:F8:35:5A:BF:37
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3d:0f:16:05:34:de:32:06:70:d8:08:5f:2e:ba:be:2c:95:
37:22:d4:ed:07:34:2f:44:ac:99:03:bb:f6:2d:57:1d:82:11:
59:e9:4a:9c:9c:a9:49:19:15:75:8b:39:37:7e:cd:91:ad:2f:
ad:28:9c:54:ad:73:e7:68:49:df:78:20:ba:9b:05:9a:9d:15:
f1:33:cd:d1:93:ee:90:e5:5d:8a:93:e7:2c:e3:3b:63:1b:54:
19:d8:f2:52:09:e4:b0:e4:2d:5e:a9:2c:b0:95:aa:b7:23:d5:
64:80:f0:c1:ee:c9:a3:51:c5:1d:0b:01:39:f3:bd:a5:55:38:
a8:c0:1a:7a:ff:2e:d0:1c:4d:b3:85:bd:6d:72:2f:0b:dc:78:
ad:f8:5b:29:f4:3b:fb:19:b1:e7:35:b4:b2:8e:dd:66:3c:75:
a0:b6:4d:0a:29:ef:bf:73:b2:f6:03:9e:5d:50:77:a4:56:4e:
83:9a:b3:39:6e:d1:67:cb:aa:d7:1d:72:30:25:e5:7c:8f:70:
0b:5a:48:a8:28:ac:fc:18:16:ea:89:39:4a:e8:aa:77:cc:ef:
d3:68:5c:fc:55:4a:74:40:6d:ec:c9:5d:04:4a:c5:33:33:80:
e5:eb:d9:20:05:f9:26:d1:d2:13:82:c9:be:be:f5:c6:ac:e2:
cf:bf:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:21 2025 by rpki-client