Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: aR2Fc8h2fw6MZNNckeCowc3i/JJPbzxWZLqBYNv3m7U=
Subject key identifier: F2:B3:52:74:C7:09:62:B0:A0:E1:E5:1B:50:3C:BA:AC:3C:5D:A5:BE
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 0194BD4EC4F78D196B490D43282A33E120DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 0E8C
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: NnX3b2mZcy7P3gVAMeUaipanYPIR6aN+3N9/Tk9v5Nk=)
2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=)
3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=)
4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c4:f7:8d:19:6b:49:0d:43:28:2a:33:e1:20:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=f2b35274c70962b0a0e1e51b503cbaac3c5da5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:c8:1e:71:88:eb:6a:1c:36:a9:75:86:4a:
03:20:21:55:a5:4a:dc:37:e2:59:7a:98:38:89:69:
1c:9a:c7:e0:77:d3:f1:a3:66:07:5c:c8:fe:11:26:
45:6c:8b:38:e4:6e:9f:8f:1b:c1:91:0b:37:46:0f:
6a:b0:30:1d:02:e7:a0:7e:ce:f5:90:49:de:58:59:
1a:f4:e1:c3:9b:57:54:5b:3e:02:b4:18:61:0e:f2:
15:b8:98:74:ac:e9:75:93:12:4c:f9:9e:8b:f8:17:
81:d4:bf:bc:11:c1:ec:c9:16:38:2b:5f:e7:c7:df:
f7:95:3e:79:9b:0b:8d:8b:aa:e9:84:8d:f7:bc:a1:
1f:14:63:6b:19:1a:23:24:f8:10:00:51:c0:40:b5:
21:45:b2:6b:5c:e4:6a:8d:eb:24:94:26:80:50:27:
08:dc:37:3f:f7:c4:59:03:28:ec:23:48:b9:03:c2:
7e:57:21:e8:b4:8f:e3:7a:b5:ee:f4:0f:8b:dd:13:
13:ad:88:5d:87:33:a8:57:12:bd:cf:4d:b1:4a:6c:
21:50:37:3e:49:1a:f9:80:1c:cf:22:b8:48:bd:1f:
86:b2:85:2e:6e:b8:a4:31:ae:68:2c:c1:36:4d:22:
22:21:bc:a2:73:cf:df:8c:69:88:e0:02:bb:5d:0d:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:52:74:C7:09:62:B0:A0:E1:E5:1B:50:3C:BA:AC:3C:5D:A5:BE
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1d:f3:d7:bf:7e:17:22:5f:69:7c:91:1f:79:c1:4d:73:0e:
20:7e:4a:8b:13:fa:6e:92:29:16:8b:1a:c0:75:64:a1:18:02:
27:91:dc:f1:b0:c2:d5:b6:cb:18:07:8b:fd:73:6e:98:6a:aa:
0b:14:3a:a1:22:74:47:a9:a4:1d:09:4d:07:c4:9b:d0:a3:82:
45:77:c6:81:74:48:7d:0b:83:96:80:66:d6:07:24:d6:a3:42:
29:4d:fb:38:9e:5a:4e:db:d8:88:73:f3:ed:2b:3b:29:bc:d8:
bb:8f:cb:11:1f:3a:ad:9f:d9:5a:c0:ae:fc:26:b9:3f:db:e8:
dd:22:8b:13:06:79:cb:b5:83:ab:43:74:6f:36:ec:43:78:00:
ba:08:1a:b7:02:14:3c:13:68:3f:c7:9f:20:47:2c:4f:b2:d5:
26:d3:90:43:45:6e:80:90:90:df:d0:bc:f3:79:9b:ea:cf:0a:
4b:3e:e4:3f:ee:10:66:e4:48:7c:ae:b5:8e:42:95:ad:c8:2c:
22:24:a8:32:66:4a:3d:62:09:79:6a:ec:1f:b9:d9:db:7f:c9:
11:74:35:cb:f4:15:0d:c7:af:58:5d:72:ef:d3:ec:21:53:b0:
d1:9f:02:ed:ad:88:50:4b:cd:92:fe:18:e6:64:2a:a2:b5:d1:
72:41:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:10 2025 by rpki-client