Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File: XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier: DkzPsreFu8tftWdDSyEmFnQjdPjrIKeW/2uvQxtlqS0=
Subject key identifier: 2C:C3:7D:37:CE:0D:EA:55:2E:18:E0:34:82:D6:FA:53:25:04:7D:2C
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 0194BD4E6A3BF9C60064E8DA0C485B66766C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=)
2: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=)
3: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=)
4: VxT65LZX5OJbZTHZNAIInJvh5YE.roa (hash: FdPAlwlk9S7n3Fuj8UVdtKrTsnGqgq5r13WKEZND4dA=)
5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: GoXNME9yLiJuueDY70qJRZuiAZuk5CDa4io3Jh1tVbo=)
6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6a:3b:f9:c6:00:64:e8:da:0c:48:5b:66:76:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=2cc37d37ce0dea552e18e03482d6fa5325047d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:de:c4:93:12:9d:4c:5a:e0:c1:cc:bd:aa:
8d:e6:dd:3c:78:d1:e6:a4:77:f9:57:f0:13:c7:e7:
65:d8:ec:ac:ad:a0:95:b1:e0:80:6c:9a:ad:1f:eb:
59:f3:57:1f:11:c6:25:ed:be:a8:27:37:ed:2e:89:
24:1e:86:b9:bd:77:c1:0c:68:4c:a2:5d:1a:73:06:
dd:af:df:11:c6:c0:a4:42:ce:f5:88:b6:6a:6f:93:
7f:81:ef:ee:61:25:6f:9c:35:83:77:32:f2:38:84:
0a:a6:e8:32:c1:bb:cc:20:5e:0d:56:1c:96:c2:64:
b2:10:e3:80:84:85:4d:88:62:df:8c:b1:00:df:1c:
f6:5e:5f:9a:b7:fe:0a:38:c6:53:76:4e:67:c5:dc:
00:77:2a:3f:56:9a:f1:92:1a:f0:b9:d3:09:34:ab:
c3:90:af:43:c1:f5:e6:28:c3:67:6b:1e:c3:a0:6f:
2f:54:6a:1f:33:ba:ac:fb:18:1c:e2:fe:01:82:69:
b5:b3:9e:9e:19:9a:85:1e:da:87:12:d9:55:a9:be:
fb:1b:f3:a2:c6:c3:29:7c:eb:2d:17:20:3d:24:4b:
e1:c9:48:49:49:15:da:9a:fe:a8:92:fd:31:10:85:
7f:01:31:43:a7:f2:bd:d9:2f:7e:3e:22:78:e1:4d:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:7D:37:CE:0D:EA:55:2E:18:E0:34:82:D6:FA:53:25:04:7D:2C
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:65:d7:06:07:14:bb:87:04:0d:a9:dd:d8:47:5e:9d:df:4d:
41:fb:c1:f1:f2:74:b0:db:b9:98:2a:66:e7:f8:87:dd:78:f6:
05:10:ca:8d:25:4f:49:b8:93:e9:e4:ec:6d:41:cb:97:b1:6a:
89:b2:99:bc:48:94:2b:9d:29:96:95:32:7c:7f:68:a4:ae:0f:
e7:09:0b:f5:ec:53:2b:6c:b0:7a:be:5d:35:49:1d:b3:6a:96:
aa:ee:0e:b7:68:37:0c:7b:a3:b4:0c:43:fe:15:6b:7c:07:32:
8b:42:9a:bf:6f:56:83:e8:67:09:40:69:4d:62:21:c8:cf:5d:
08:7d:d1:79:fd:b5:af:9c:30:8e:19:50:42:97:46:cc:1f:ea:
4f:82:b0:e8:66:b9:1b:30:27:ff:23:5c:e9:7d:02:78:24:b9:
72:08:62:68:50:3a:22:2a:6a:7e:a3:f8:02:1b:0b:6c:17:2c:
7e:58:b4:2d:f0:ab:49:a5:b3:82:55:0a:4b:d0:fd:8e:22:da:
3c:f0:8a:c9:6d:b1:02:48:1a:e9:e4:b9:06:a0:4b:66:cb:3c:
40:bc:ad:c5:9d:b5:8d:7d:8b:35:11:c2:41:3a:65:13:9a:53:
53:a5:fa:f3:67:e7:43:c4:f1:d6:d1:a5:06:c8:48:dc:77:be:
89:6c:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:09 2025 by rpki-client