Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: D668lFrZHv6RQGZutPHA7jurP5pxNxe75Sqxm0bUI9I=
Subject key identifier: E4:9A:32:E1:85:72:C2:15:75:64:73:A0:1B:17:2B:01:66:1C:B7:42
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 0194BBCEEE3EC27C376F8ECAC693BC171A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 08E3
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: V+jDuydiBTxyPvgIHHWf6JrpOr4UJigrN+sm7CVrVSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:3e:c2:7c:37:6f:8e:ca:c6:93:bc:17:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=e49a32e18572c215756473a01b172b01661cb742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:81:bb:2e:93:b9:44:77:ec:03:a9:ae:6e:
6e:72:64:dd:af:53:46:9a:e1:ae:97:d2:3b:91:1a:
d3:38:28:67:82:84:4b:96:a9:47:a6:95:a2:cc:cf:
84:30:32:54:e1:53:d0:a8:b5:c3:c0:a0:d2:30:7b:
f5:a4:cd:1a:3e:00:6d:84:33:b4:92:10:7c:ca:be:
c8:0b:f0:d1:8d:31:cf:2a:75:42:66:a5:7c:eb:fb:
63:5c:83:7a:df:99:f2:73:5f:95:b0:1c:3f:33:6d:
2d:ef:1d:53:8d:71:af:2d:3a:cd:39:bd:4c:a3:cd:
5b:51:c9:76:94:37:bd:81:1a:84:8a:ee:bd:4b:5d:
0d:27:5f:19:d4:f6:e6:b3:13:e1:71:53:90:fe:b9:
11:72:05:dc:83:dd:6b:a0:43:6f:6d:ef:2d:f6:aa:
53:30:f6:e5:56:59:27:b5:2a:5b:41:ad:a3:9d:ac:
96:65:0e:71:8f:d8:a9:3b:7e:68:5c:fc:a2:78:5e:
e7:63:a8:24:2d:8b:7c:90:e7:6a:63:02:fd:b3:4e:
68:15:ec:21:67:3f:97:a4:21:3e:ed:2d:e4:82:06:
43:f0:62:3e:79:4d:bb:c4:65:63:63:c4:3d:67:ad:
75:ec:9e:b0:ce:30:00:5b:93:92:90:8b:f4:94:d6:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:32:E1:85:72:C2:15:75:64:73:A0:1B:17:2B:01:66:1C:B7:42
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:20:b5:06:02:91:3d:0f:75:7d:c5:f9:8f:cd:43:cb:7c:
10:03:a7:b7:6e:a4:8c:72:b9:40:98:ae:e4:e4:bc:88:8b:97:
30:47:be:6a:2a:f2:87:44:ce:04:8b:5d:6c:34:40:70:38:da:
c0:81:eb:d2:1a:64:bc:06:a8:ac:b5:95:98:2c:9f:55:14:39:
86:ed:fc:bf:66:1c:54:78:eb:d9:1c:34:82:de:07:b5:ab:17:
34:4a:bc:c4:ad:b9:5d:46:6d:91:39:dc:68:89:e6:8d:3d:e8:
51:13:c7:9d:c0:74:14:2e:db:d6:a0:96:a8:24:4b:fb:ea:ef:
ce:61:41:ab:af:cc:ae:fc:7d:39:60:80:37:2b:e7:1a:5f:15:
29:01:a8:4c:40:33:ef:34:8e:ea:dd:5e:ff:41:4c:37:5b:f8:
33:a3:4e:f3:7a:63:7b:5f:98:a0:37:51:06:04:14:f5:83:e4:
45:4b:9d:24:4e:09:b6:db:82:c2:f4:9a:cf:d6:4d:26:d4:b3:
39:fa:bc:ab:1f:17:92:ba:bb:c2:25:1a:50:d5:54:34:6d:f8:
91:67:f6:79:fa:00:09:e6:91:15:96:0c:1b:93:24:06:f6:f5:
21:fa:dc:0a:c4:c0:c8:9e:7b:99:5d:5b:53:a9:b9:39:d0:a8:
2d:6a:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:19 2025 by rpki-client