Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: RkY8wG9UtlAC1HLh5zq2DROpJ+LU3pa9xjpaOVBN0R8=
Subject key identifier: 07:A9:E3:FF:9D:1C:FD:47:73:02:91:03:65:CD:9E:6B:E5:E0:53:C6
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 0194BCA9C7C642323A9F66F6F747D25D4CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: /sQILf9NmmkF0M9s74ol4wtvM5ZIHyXJojfsh6bBxjU=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c7:c6:42:32:3a:9f:66:f6:f7:47:d2:5d:4c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=07a9e3ff9d1cfd477302910365cd9e6be5e053c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:a6:f9:ea:2f:73:bb:88:28:22:b9:6d:e3:
32:fb:5e:e3:1f:85:b6:ab:41:dc:c9:7f:81:d9:81:
7e:03:ad:8c:84:d0:49:96:72:57:96:85:1e:0e:19:
df:52:8f:b2:58:c4:44:bc:02:4f:24:f2:71:02:77:
54:b8:37:8f:d1:5a:1c:77:bc:72:1d:30:f9:e4:6c:
8c:e1:60:31:66:1e:f3:3f:fb:1b:ab:f1:46:b5:1a:
60:9f:0c:f2:50:e2:e9:a3:03:5e:ff:ef:60:5b:1d:
ed:72:e6:6e:af:d2:b5:f5:af:06:bf:51:a1:31:a2:
e7:68:c4:2a:73:5f:0f:ce:e7:ee:c8:c8:aa:66:1f:
79:79:db:7e:82:f2:49:bf:31:91:2b:4c:78:b5:eb:
3a:69:d9:ce:a4:a1:d0:f2:30:f6:b5:cb:d4:19:51:
49:f4:70:49:37:3b:67:b1:25:94:e6:8a:ec:91:cb:
51:b6:b6:48:3c:08:b5:87:04:7d:6f:80:f5:d8:08:
4b:a5:dc:0e:5c:91:80:0a:19:13:d1:40:bd:29:52:
4f:4f:b8:a8:6e:06:ea:03:83:6b:10:5c:b4:a5:bc:
02:5b:ad:12:14:50:6a:9b:b8:fc:2d:8b:52:54:ec:
1f:87:7e:b5:57:85:9d:1f:20:4d:68:9b:48:b3:0b:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:E3:FF:9D:1C:FD:47:73:02:91:03:65:CD:9E:6B:E5:E0:53:C6
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c2:dd:6d:6e:3a:bd:62:e1:0e:ba:77:9b:a1:37:75:60:28:
b9:6c:4e:04:bc:0e:06:07:88:3c:a7:b8:3c:ee:a9:a3:e9:7a:
ba:a2:d8:51:9f:3a:87:6d:b2:3c:bc:0d:cf:6d:a2:da:93:02:
8a:40:8e:a5:10:a4:77:0c:bf:68:67:b2:bd:aa:a4:44:2c:2d:
dd:3b:1b:ee:6f:47:7a:5e:e5:5b:ac:1a:5c:97:d1:d4:ba:20:
86:79:c8:68:4b:03:a4:44:cc:df:74:8a:9b:66:5b:9f:f6:f6:
b1:ee:e1:aa:db:1d:32:92:54:1e:59:2f:3e:b5:5d:59:11:2d:
5d:a4:25:f0:32:ca:9f:6f:e7:54:07:bf:a5:f9:96:59:63:f5:
de:13:74:cc:27:49:9a:15:96:e9:db:3f:29:cb:04:8a:70:07:
13:de:26:a2:b4:de:29:c8:95:3c:f6:4a:74:5a:80:56:7c:61:
b6:10:e8:76:c1:f4:84:a4:68:77:74:f6:2a:c4:46:dd:33:ad:
99:8c:15:19:5b:21:eb:c7:48:4c:ce:97:93:9e:42:d2:0f:cc:
41:2d:3b:e6:2c:c5:57:5c:72:d9:44:32:c5:79:8a:61:7d:b3:
4b:bc:57:55:3c:af:5b:54:a1:ce:3e:bc:8e:ae:94:a1:88:c9:
38:e2:69:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:58 2025 by rpki-client