Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: HFGkV2CSMwf41smWkUIaqUqPwOBGggT2jyjZmBS6wfo=
Subject key identifier: EF:BD:F0:80:38:46:2F:9C:C7:4B:B2:A9:81:3E:84:C0:5F:B7:8F:8E
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 0194BCAA0137F68463F075662EA5469C08A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 032B
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: zgLMp/DvJr9PfG7KNQXq2qAOnWNeV7dz8aR+vAuyHzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:01:37:f6:84:63:f0:75:66:2e:a5:46:9c:08:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=efbdf08038462f9cc74bb2a9813e84c05fb78f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:35:d6:f7:66:c0:4d:24:ab:ea:81:66:e5:60:
aa:68:35:d7:07:cf:9b:6e:00:f8:e3:c1:cc:f2:e4:
a5:62:98:89:63:3f:ff:13:19:a9:4d:de:1d:98:27:
db:79:28:f6:14:16:54:2d:ef:39:e0:e0:83:d7:1c:
ec:40:53:01:2d:b3:0a:56:df:f9:db:0d:d0:2d:7b:
10:fa:af:16:d1:1d:12:9e:8a:f4:0e:73:07:3c:10:
62:96:c2:b0:38:d6:71:84:b9:ec:93:bf:22:9d:5b:
21:4b:49:ee:6f:fb:13:c7:7a:19:6f:25:8e:d2:cc:
15:04:7c:10:e3:93:82:25:b5:fd:2e:59:7d:a6:ca:
b7:62:66:cc:f2:fd:dc:96:ca:89:6c:c8:ef:0f:69:
d9:d7:69:61:d5:50:20:b6:bb:5b:a4:56:c5:ae:48:
b4:35:74:d7:0a:ea:d6:78:d0:a3:eb:6e:40:10:b8:
62:da:04:1a:fd:a8:c3:95:8b:86:2f:7b:53:e1:61:
6a:8b:84:fd:e6:1e:b3:3d:d0:bd:ea:82:ed:46:99:
f9:f6:42:40:34:69:a2:bc:f6:20:58:f2:d2:13:85:
c1:b5:31:3f:c3:d7:98:8a:7b:c9:67:57:cb:42:be:
60:8f:8d:da:54:dc:11:a6:f7:fd:c7:d9:72:bd:c3:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BD:F0:80:38:46:2F:9C:C7:4B:B2:A9:81:3E:84:C0:5F:B7:8F:8E
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6e:db:db:57:0c:db:32:88:55:d6:88:ae:75:f8:d7:9b:d2:
5d:05:b9:ca:d5:8e:b9:8b:f8:e7:92:af:f6:b9:e7:14:c4:0a:
d4:f8:09:2b:99:c8:a5:9b:a4:1a:28:b9:b1:e9:37:9d:d2:f7:
55:fc:a4:44:a8:d9:71:bb:f7:16:0c:de:40:42:69:32:8d:af:
8e:69:2a:35:ac:7a:99:c8:0b:cb:f6:7e:cf:4a:81:9f:65:29:
c7:ca:d0:e6:fb:b0:b1:41:6d:04:5d:21:9d:22:de:a8:cc:74:
88:be:4d:92:4a:c8:bf:f1:53:74:59:b2:39:53:63:44:89:cb:
68:7f:44:e7:fd:ec:1f:14:f4:2d:36:58:2b:e6:02:5f:00:31:
88:9f:89:6c:81:0b:03:df:5a:c1:66:e4:91:6a:cf:67:32:93:
9a:98:80:9f:7f:dc:4a:27:63:c8:2d:a8:53:cc:27:a5:4f:66:
ee:2a:47:1f:bf:b2:e5:44:00:a2:2b:d3:d5:59:c3:0f:10:cc:
1d:bb:02:a0:0b:fe:86:26:26:45:c2:36:18:ee:84:57:af:6f:
ea:d4:2b:18:2d:66:63:0e:f9:7b:73:b8:13:f9:27:a5:a2:3e:
ce:66:b7:e7:11:14:95:32:7a:df:ef:7b:e4:dd:d2:22:6d:0b:
0c:dd:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:27 2025 by rpki-client