Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: eB5Kqd3csZ1+xlxjPm6QTIRRHc/U4kmIkkP61ppeETY=
Subject key identifier: 24:EF:66:F2:72:B3:13:E8:11:0D:F1:62:BE:E0:33:02:DF:B4:87:A0
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 0194BC3C64BB437F84C5C56134207045244F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: ex+I6DGZO6UQmYT+ZCoBh7wabC6P9D1bWzIN3cUYPpI=)
3: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:bb:43:7f:84:c5:c5:61:34:20:70:45:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=24ef66f272b313e8110df162bee03302dfb487a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:ca:0d:36:25:da:fa:4c:f7:f2:02:93:8c:
0b:13:32:20:70:76:d1:e1:aa:1f:bf:f8:ed:1f:e4:
f6:40:2c:f6:14:37:2a:d4:1e:fd:07:3c:52:ad:4e:
ed:59:96:f1:33:2d:f0:6c:b2:3f:5c:a4:26:db:86:
d3:a5:cd:07:9d:db:12:4d:f4:d9:dc:92:ed:a5:6c:
4b:dd:c7:59:43:df:22:d1:44:2b:f1:44:c0:64:f0:
9b:be:62:f5:92:76:de:74:6d:f8:22:a7:1a:87:7a:
99:0d:8c:8b:b4:5c:a5:5a:12:77:71:8c:df:61:00:
98:1d:9d:76:84:c6:d1:bf:a1:b4:11:82:f0:4a:68:
6e:63:58:fd:ed:7c:e2:d0:8a:33:f1:3b:3f:fc:6a:
84:0d:b1:d2:34:42:b9:99:16:e4:56:9d:c9:3b:74:
fa:51:9d:85:5a:6d:07:6f:92:fb:98:c8:ba:0e:26:
37:9f:32:63:c0:ab:4c:a0:7e:2e:55:fb:6f:72:2f:
5d:50:08:6d:7b:53:e3:d6:fe:dc:95:cb:29:87:4e:
94:14:bc:e9:af:0d:e5:5b:cd:94:a5:e4:ab:43:ab:
70:27:76:77:87:cc:df:5c:81:92:14:5d:8b:36:5e:
d3:2d:28:96:06:3b:48:ee:d6:b1:8b:d4:ed:a8:97:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EF:66:F2:72:B3:13:E8:11:0D:F1:62:BE:E0:33:02:DF:B4:87:A0
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1c:d3:ae:d4:c0:8a:79:c7:12:18:64:ef:9e:91:5a:e5:ab:
9d:69:9e:50:42:0b:f6:8d:3c:13:7f:02:8e:13:b9:1b:71:eb:
d6:f4:b3:5d:6a:e5:4e:e6:77:ed:6c:87:4c:82:a8:0e:6b:a2:
ed:8c:a6:c4:c0:82:b4:0b:2e:42:b2:34:33:e3:00:c0:b2:19:
0e:fa:9c:dd:0d:be:6f:f3:cd:0c:db:de:60:c2:57:55:1e:b2:
0b:94:f6:4c:05:70:68:7e:5b:f4:00:82:e5:10:0f:54:b1:04:
8c:d6:eb:95:1c:82:a9:23:26:2c:74:0a:72:49:08:e9:72:bf:
17:33:63:f5:71:e7:19:cd:f8:6a:64:e2:cd:9c:f7:94:d8:27:
87:10:f7:76:87:8f:5b:40:59:bf:e7:be:0e:e8:64:a9:b3:c6:
19:4a:a1:ff:45:ac:11:a9:be:cf:ab:99:dc:be:0f:09:39:51:
02:f7:e6:fd:0c:f9:06:bf:00:f4:92:72:96:fc:15:e9:c9:6f:
c0:e7:36:30:f2:53:cc:9d:03:c2:2d:f9:8f:4a:27:5b:e5:21:
5e:a4:c0:17:e1:1e:c1:47:5d:b8:8c:50:81:2d:08:83:59:9c:
73:20:49:45:ae:26:0b:6b:db:6a:73:97:28:5c:03:f0:a3:92:
74:9b:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:29 2025 by rpki-client