Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: JiJneeHoP6jax4rZ1MaOTfFz+ltXRzkXCAlVaKTQiPI=
Subject key identifier: 05:6E:04:62:F5:C2:F2:FB:D4:28:98:F1:7F:A7:DC:C0:BA:61:B6:70
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 0194BBCF01EB3253C6CFD3F2889AFE073200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: Q9TMcay5Zi54Wa1gzacUjLkhs/AgqxorHOSVMhFikfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:eb:32:53:c6:cf:d3:f2:88:9a:fe:07:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=056e0462f5c2f2fbd42898f17fa7dcc0ba61b670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:09:36:ac:63:79:56:c5:a8:33:39:a3:2f:
dd:b0:31:b0:19:5d:1a:27:3a:0c:79:7b:b8:b4:7c:
61:62:39:2c:ec:5d:77:f3:8a:26:60:94:de:92:b0:
2d:2f:41:f0:aa:88:80:39:eb:05:32:89:59:56:75:
6d:0e:72:6a:1d:35:e3:10:aa:32:f5:7e:03:a0:ab:
e4:58:50:13:d4:45:d7:f4:95:67:9d:de:cb:f9:d3:
2a:5b:e4:f6:c5:b6:21:37:04:b5:67:fb:3a:83:5a:
37:89:b5:eb:40:1a:5c:8d:2e:e3:5c:13:50:40:c7:
d5:2e:eb:be:a3:8f:e7:ec:3e:c3:59:d4:04:a2:88:
a6:63:59:d8:3f:b5:9c:65:78:88:3d:4e:d8:87:e4:
f5:7a:68:cd:f3:ea:3a:bb:17:c8:26:84:07:09:28:
fa:36:6e:a3:03:98:83:74:b6:20:1a:75:cc:d2:6c:
b0:1d:12:97:05:91:05:80:fa:3e:0a:73:c4:64:8b:
23:b0:b1:d1:e2:14:7b:2c:b5:d8:d8:7b:eb:94:59:
ce:be:dd:1c:f2:cb:ad:83:c0:15:f9:91:0f:88:a1:
04:08:f0:54:de:07:96:5f:b2:c2:da:aa:a9:7b:cb:
f9:38:be:a5:86:08:06:22:30:94:63:ff:f6:3b:4e:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:04:62:F5:C2:F2:FB:D4:28:98:F1:7F:A7:DC:C0:BA:61:B6:70
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:5b:cf:fd:a7:91:c6:54:8c:65:43:8d:b3:52:a4:59:2b:
c1:a2:de:8f:fd:1f:a8:83:5d:53:0f:66:94:0a:f6:ee:2c:54:
e4:d8:87:b0:7b:3d:10:91:3f:0f:8a:de:e5:c4:35:e9:fa:78:
83:f0:6e:5c:6d:f4:31:3e:28:8c:b8:f9:b7:a2:c4:bb:d0:4d:
49:41:25:d6:97:19:ef:20:bc:c6:e6:f6:9b:66:2c:5d:f3:96:
36:14:9e:80:6e:8e:2e:66:c0:45:12:7c:e7:56:68:3c:14:13:
fd:39:1e:f9:64:75:8e:19:b9:2d:75:4a:eb:69:a6:06:fb:1f:
f7:ac:13:88:d8:43:92:dd:35:e6:3c:47:65:85:ae:0b:68:05:
36:3c:c6:63:73:4f:3a:26:3b:f8:e5:80:7a:ea:5d:17:3f:a5:
f6:21:1c:e0:16:5e:fb:8a:6e:a4:26:6e:39:6a:0f:f7:d2:b9:
e3:ae:fa:16:f9:36:17:06:ec:f7:a7:69:a0:c3:c5:fc:8f:14:
5d:8c:3b:8b:6d:0e:e2:77:c0:66:65:a4:23:6d:3f:27:59:94:
d2:1a:c2:d6:76:4f:63:5b:07:5a:91:35:ad:d3:07:d3:88:48:
70:a4:f2:66:b6:aa:0f:81:06:41:0c:d9:30:6c:ce:33:dc:78:
43:7f:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:36 2025 by rpki-client