Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
File: xYSSMuOUO_JXydyuqw75LTCkz60.mft (raw, json)
Hash identifier: QL8H0PejP4wL9H86P9woF+2FG26XhawU7WU2lwEOs6M=
Subject key identifier: D8:59:A2:E1:BD:E7:B3:FF:9C:B4:92:E3:1C:18:99:98:E3:11:E1:82
Authority key identifier: C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
Certificate issuer: /CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Certificate serial: 0194BC04F3A33BD995BBB28C3E30DAE7B0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
Manifest number: 03B9
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: Ax2MQ5Lb54u4442Uota7T1lDXqU.roa (hash: WtpxYyNpcHNC3G/vVwvJ9snmh6XrLgpD5cHVaG5LTa8=)
2: owZzsAnJSaU1iNYi45n_txLL9DY.roa (hash: mcBj/ytCvuFdEBFFZvoIyH3aWBfrAgmYQKhMFyspI2M=)
3: p5VeBb53f0-trs6dCEU052R8j6M.roa (hash: Xnzai9MWsx1KpCjRV19PKhOCyTafRZxI8PEiad1933g=)
4: xYSSMuOUO_JXydyuqw75LTCkz60.crl (hash: 4jwm+FwjcAFbV5gUjUi7gsqzUetjCSIKwhPnLpK2148=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f3:a3:3b:d9:95:bb:b2:8c:3e:30:da:e7:b0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=d859a2e1bde7b3ff9cb492e31c189998e311e182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:d7:cb:ca:5b:ba:ce:95:76:c8:45:f2:2c:
ee:f1:73:48:a3:e2:5f:8f:ca:68:ba:3f:2d:e4:c3:
f9:e3:d4:4b:09:15:3a:55:f0:7f:a9:bc:a2:e3:16:
e2:70:a2:95:26:be:a8:a4:b5:cb:b6:68:4c:26:26:
9f:69:9d:34:de:98:cf:a9:fa:c5:1d:dc:62:c4:4f:
91:2f:4a:31:df:57:a7:e4:72:68:06:4f:b1:9b:82:
56:e7:a7:bc:9d:79:65:13:72:24:88:62:09:32:f2:
3e:ca:e5:f2:28:e4:e3:fa:e0:74:ca:1d:5b:f7:4e:
92:07:e7:90:37:c2:a3:0a:bf:c3:c5:df:1d:00:db:
d5:c9:9e:51:aa:22:d6:fd:e6:8d:27:94:64:10:5d:
3d:ac:c7:7a:f3:f0:27:76:8a:3e:22:c9:68:98:21:
54:1e:4b:f1:df:bf:9f:84:9e:4f:d7:92:90:0c:d5:
8b:5e:cc:be:ae:a2:67:82:22:0b:75:ca:aa:b2:b1:
f7:9d:ee:41:d3:47:cc:2e:56:39:af:74:5c:d7:9c:
b2:90:95:ba:8e:5e:16:53:f1:d2:e8:c2:dc:de:f4:
dd:7a:47:9c:1c:68:0d:65:9c:bf:4b:c5:2a:1e:90:
26:04:e8:a5:ea:29:2c:60:73:18:78:19:aa:40:1f:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:A2:E1:BD:E7:B3:FF:9C:B4:92:E3:1C:18:99:98:E3:11:E1:82
X509v3 Authority Key Identifier:
keyid:C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f1:bd:20:47:08:b2:2b:bf:01:c9:81:68:d4:ff:6a:e3:9c:
04:ce:7c:68:59:78:88:2d:97:ad:55:cc:44:97:09:4f:75:a3:
1a:64:67:af:4e:09:ca:ab:88:23:88:33:55:17:70:3b:d2:24:
21:60:9c:f7:56:81:ad:7b:1c:b8:ae:95:ac:73:f2:30:15:ae:
1a:12:b3:1c:c8:c1:f7:10:8a:8f:9d:df:81:27:f1:fd:51:88:
88:38:a4:0c:4a:db:09:7e:80:11:c5:17:8b:30:4e:e8:f6:88:
02:4b:46:9a:83:58:77:d9:43:76:06:59:9f:a7:53:21:68:af:
52:ca:33:4b:84:83:57:01:f6:e9:3b:f6:7e:55:b4:55:57:e4:
b7:13:f2:c0:c7:ad:a5:74:59:ca:7b:f8:c0:03:61:c3:ff:82:
3a:30:f7:02:fb:55:73:ba:8f:df:a0:57:c6:f8:20:e8:16:d1:
96:dc:b1:74:b5:a1:65:48:41:93:d4:4f:67:3a:96:46:3c:83:
5e:a6:af:3f:f6:67:d6:03:37:f9:18:42:2a:42:cd:29:af:d6:
2e:90:cd:75:7c:8c:13:17:ab:26:15:7d:ad:2f:9a:b5:15:bf:
25:b8:77:cc:a6:21:b5:bc:e3:55:2e:92:0a:74:80:87:dc:78:
19:84:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:28 2025 by rpki-client