Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: pQljkEhiQanzBBUYh6avMDlinNNPwJz24nfQaHMPBEQ=
Subject key identifier: C5:BC:71:7B:BF:ED:9C:CD:1E:8F:A0:9A:F1:19:4E:07:18:01:0D:9E
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 0194BC72C814DF62ADB2145D0A441AD28371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 1118
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: q/h54Oi65Kd9UcoulAq3guBPW0f9M4Anuh1mZRZzuQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:14:df:62:ad:b2:14:5d:0a:44:1a:d2:83:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=c5bc717bbfed9ccd1e8fa09af1194e0718010d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:83:0f:89:e8:1f:31:85:23:04:f0:14:c1:
cd:5b:50:3d:bf:ba:6b:60:06:bf:b6:04:05:a5:1e:
a1:7d:55:e1:1c:30:f9:3f:21:f2:5f:f0:3a:f2:29:
3a:15:97:5e:0c:88:81:16:34:5d:a9:69:cf:d5:57:
de:ff:93:34:6f:01:f4:35:e7:4d:81:bc:b5:f5:2b:
8b:7b:22:b7:58:36:53:a3:14:12:01:8e:3e:6f:40:
bc:b4:5c:d5:f7:1e:82:19:7b:c9:f8:ad:66:f6:ec:
f4:e0:e5:86:c4:cf:7c:d4:89:ef:bb:25:9f:a8:a0:
1e:be:73:b4:0d:27:32:98:36:3e:53:e2:c3:3c:58:
d2:fc:a4:01:9c:87:c8:c3:32:2e:14:1b:74:85:09:
a5:1b:f0:3a:f6:9c:7a:eb:70:8f:30:8f:8a:d4:af:
c5:50:6c:6f:5f:62:15:9f:22:6c:c7:71:90:49:56:
f4:e6:e0:bb:6b:8c:49:61:97:58:c2:43:8a:a4:5d:
32:a7:7c:26:f0:02:90:ed:d5:5d:84:76:9a:14:e3:
77:76:ba:64:fd:fd:71:de:ed:9e:6e:7c:b9:a1:8c:
38:1c:d3:34:e7:76:bf:2e:39:40:7c:f2:ba:e6:f4:
f3:57:76:d5:9f:45:f0:16:25:2b:12:ea:80:45:dc:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:71:7B:BF:ED:9C:CD:1E:8F:A0:9A:F1:19:4E:07:18:01:0D:9E
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:06:fd:db:79:16:c7:28:2c:3f:d4:97:21:d1:c0:ab:f0:38:
67:94:a1:a7:28:3d:0c:b4:42:08:17:98:91:89:52:8a:7c:b8:
1c:f7:9f:49:83:83:89:76:a4:6a:89:0a:5f:c9:cc:56:09:9f:
e1:8b:0d:90:8c:f1:3e:a5:dd:6a:cf:dd:0a:e4:81:f5:0b:3d:
3d:d3:6e:0b:68:37:21:1b:fa:bf:0f:12:01:b5:f3:f6:28:48:
81:a5:45:b6:d2:b5:6c:25:d5:72:0a:0a:18:c9:46:54:1a:60:
43:f6:35:d3:20:26:d5:83:fd:c3:db:4c:fe:51:3f:a9:fa:61:
85:2d:f6:d3:56:d4:7f:c4:fa:80:98:31:ef:be:f9:1c:25:0b:
32:de:59:ae:c8:ac:12:6f:bb:41:ad:49:8a:28:9a:e0:1c:78:
4d:eb:94:78:0e:2d:fb:a3:b8:16:bb:3a:c4:e4:5c:79:4b:42:
35:06:2a:35:bb:47:36:8a:6c:0d:ba:fd:d9:4c:95:f1:80:94:
f1:4c:61:11:f9:7d:93:41:7e:e8:06:65:f8:3c:69:e2:85:4d:
e3:c7:9f:91:21:0e:32:e3:5c:41:3e:ad:ce:d9:4a:b2:9a:9e:
74:4d:48:98:17:f0:2f:94:bd:3c:9c:1b:be:48:ef:56:0e:dc:
9a:26:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:28 2025 by rpki-client