Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: bhz1xcIKjfZuWYBprCNwq0yJcMcQWmY3hyJCrIiGdF8=
Subject key identifier: 4E:ED:98:39:16:25:18:A7:5E:1D:8C:56:5F:1B:51:9E:7A:C0:5B:6C
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 0194BD176772DA7E706DA861D142AEF1D79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: hNGI7dyjqahok7IxTT650PQlo1tHcT70qK16rh+AC/E=)
2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:67:72:da:7e:70:6d:a8:61:d1:42:ae:f1:d7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=4eed9839162518a75e1d8c565f1b519e7ac05b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:60:7e:71:be:31:36:c5:ae:66:bc:9d:9d:a5:
ff:37:f0:d5:49:ba:47:5c:d5:a9:70:88:fa:e0:c2:
2b:56:04:cc:46:e0:5c:54:09:b9:e9:93:7e:da:d5:
48:b2:d2:9c:09:78:74:3c:61:91:05:70:fa:56:01:
77:c4:c8:d5:01:4a:4a:0d:bf:83:f4:a0:85:46:dc:
ab:30:2e:b6:e7:d4:8e:3c:f8:bb:be:63:a8:e7:1b:
19:d7:e1:01:cb:43:46:c4:1f:4e:a5:0c:b3:f1:37:
4c:8d:49:d4:f8:13:92:69:52:83:2e:66:7b:f7:e6:
5d:17:fe:0b:b2:6d:cc:02:f6:c1:91:2c:40:d9:96:
44:23:ab:a3:3c:ce:5e:18:53:ad:20:f8:31:9c:1b:
c7:90:44:b5:f0:98:8a:e6:b7:8b:f5:71:57:a2:43:
95:0e:a6:68:e0:12:f2:15:31:7c:30:df:1e:e8:0d:
6d:d3:a4:18:e6:9d:49:e4:c2:38:c4:a0:a4:1f:68:
3d:2f:ad:38:45:09:d1:92:44:51:7c:63:07:c8:6a:
13:12:49:c7:66:21:65:dd:0a:f2:1a:92:fe:6a:ab:
73:aa:19:c1:d0:a8:de:49:e9:48:d5:16:71:fd:c0:
69:fc:d8:24:1e:1d:55:f0:2f:0c:d6:51:19:ec:f2:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:98:39:16:25:18:A7:5E:1D:8C:56:5F:1B:51:9E:7A:C0:5B:6C
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b3:47:3a:2a:c7:d5:35:fe:29:3b:56:39:e3:14:34:78:ef:
e7:10:37:79:62:11:6b:9c:21:e6:6c:57:0d:a7:77:5c:42:53:
14:5b:08:4b:c1:fe:7f:b0:6b:c3:22:3c:2e:f9:ce:82:3e:74:
ea:c6:55:e6:37:2f:3a:e1:1b:38:5e:08:3b:90:01:6c:f4:15:
46:d0:73:2c:44:be:b5:ad:08:a4:a9:99:a3:7d:22:85:4e:e9:
5a:e4:4e:09:8c:84:12:7d:dd:e5:0e:b4:c0:12:55:c8:54:60:
70:bc:a9:7e:4a:d2:3e:98:8a:5f:08:04:37:bf:43:f9:55:68:
79:2f:33:cd:a9:33:6e:50:2a:e2:4c:e2:80:26:c0:2c:b8:a6:
f8:25:34:89:31:55:55:89:1d:0a:25:6a:3e:3d:14:c4:23:17:
ee:84:2c:44:f1:75:c3:81:1a:32:62:8e:b1:17:58:37:7e:62:
ca:57:3f:ce:84:6b:14:28:29:3d:c5:a1:08:2e:87:1e:eb:f4:
33:fb:e6:31:c2:a4:49:25:01:0c:cd:21:2e:03:df:d5:87:c5:
71:d8:34:97:b8:70:77:c6:b0:8c:4f:ba:f4:c5:bd:f9:56:3d:
bd:5a:49:1d:8c:4a:fd:9c:03:29:29:19:07:a2:8f:3f:8a:fc:
d6:d7:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:51 2025 by rpki-client