Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: ENAfmIEhjay8IMTwm8q2Nvd6J/tsbqNHgKp1Sy+uI0I=
Subject key identifier: E4:C9:50:A1:01:0C:73:08:46:DF:6B:66:3E:09:50:D4:BF:9C:C2:69
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 0194BD4E5569BAFD02A59824921311113F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 1165
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: L/n9AI2+QaF/ViselAk+4R63fGTZuhu3+et6KjwQBbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:55:69:ba:fd:02:a5:98:24:92:13:11:11:3f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=e4c950a1010c730846df6b663e0950d4bf9cc269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:21:e1:ee:59:d2:b3:8c:79:cd:df:03:61:
9d:cb:76:5d:7f:55:89:a0:ed:6d:64:cc:3a:7b:77:
80:41:0e:85:80:e4:0e:80:98:a1:63:0d:97:eb:e1:
34:74:a8:b6:32:97:6c:d1:f6:6a:ea:f7:e3:06:53:
73:8c:47:70:51:7e:8d:76:83:78:e7:a3:2a:57:15:
76:d9:03:cc:53:74:6e:78:50:bf:52:44:9d:fa:a2:
f9:4c:31:e9:0c:79:54:b7:66:bf:f1:c9:8e:83:e6:
fe:d9:c4:14:09:b6:18:58:39:d3:08:31:af:3e:88:
a0:f8:49:a6:d2:1c:10:de:2f:66:6e:70:a6:32:46:
66:94:e8:1b:41:fd:17:73:6a:d1:32:84:a2:8a:be:
74:1a:95:4e:4d:23:63:73:56:67:36:ad:3a:da:50:
d7:92:54:82:23:24:c3:ac:96:11:cb:ab:0c:74:50:
f3:50:2a:2a:dd:87:87:44:97:31:78:15:1f:a4:9c:
c4:5b:6b:15:dc:1e:21:ba:73:cb:5a:cb:30:89:e2:
34:94:23:9d:44:08:8c:42:1d:28:25:9b:48:e0:09:
61:b6:71:06:c2:89:61:1d:f2:ca:b6:fe:d9:ce:6b:
63:8b:88:01:1c:fa:a5:c3:cf:3a:18:30:20:eb:d7:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C9:50:A1:01:0C:73:08:46:DF:6B:66:3E:09:50:D4:BF:9C:C2:69
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6c:a5:ba:86:33:72:f0:d6:16:a1:60:d9:df:72:14:86:55:
d0:87:f4:47:2f:49:f7:02:d7:a8:62:a1:a6:f9:ae:5b:6c:ca:
28:49:88:38:c8:75:d0:43:90:6b:f5:52:39:ea:10:07:b7:ab:
f7:91:81:38:cf:49:7f:ad:8b:a8:26:6e:b4:ff:e3:cc:d6:e4:
44:1f:c5:a0:b8:b1:0c:19:5b:49:97:f4:fb:30:d9:df:5d:a2:
22:ca:e8:2f:73:28:bc:fd:58:4c:bf:21:3a:14:77:69:40:37:
d3:11:f9:c3:dd:d1:1b:62:40:37:22:58:a7:ce:49:09:2c:e5:
1b:58:3c:e2:4a:59:26:ab:49:5e:6f:50:2c:dd:c3:0d:2b:78:
95:09:22:aa:0c:e2:34:ab:ba:fe:50:03:f6:da:dc:9b:d6:b8:
61:70:88:51:a7:5c:98:3e:a4:cb:f7:35:e6:9c:8c:39:7d:22:
a2:56:91:11:d4:34:b7:9f:af:5c:15:90:6a:06:99:b9:45:57:
be:26:17:44:6e:1f:16:bf:86:17:ce:3f:e1:0a:1c:d4:17:7b:
a1:59:fd:c0:ec:60:00:2a:41:1a:0b:36:0e:d5:4b:ce:c7:8c:
1d:e4:11:66:5a:d2:3c:3b:95:92:fa:47:22:a6:22:34:15:a6:
3e:24:64:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:00 2025 by rpki-client