Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: upiVdJbzKZkRbO8KS6UwXtGQTdlrXu22zCogfhjI1x0=
Subject key identifier: 42:0B:44:D4:17:48:39:18:75:A1:CB:D2:A5:57:26:29:1B:43:E6:FA
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 0194BBCE102BC9B743F635867764A508FF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: kFAWzJxAiMhkm4NOvHOiD5PY66g.roa (hash: QJZEuzHLkJsVvRtJ8dcL8i0clH/1NRZmPUpPgEFazCw=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: YTaJRsPdtPOqZkgwPZc8hgGexfkUUoxUuiTsCTepYOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:10:2b:c9:b7:43:f6:35:86:77:64:a5:08:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=420b44d41748391875a1cbd2a55726291b43e6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:35:9c:e3:85:5c:00:38:16:1b:17:de:53:
b3:49:8d:c9:7a:c1:95:0d:de:84:a3:31:13:90:20:
d9:3d:2e:b1:18:c8:b9:54:c7:3e:33:00:7b:45:2e:
8c:25:f4:14:a0:76:5b:1f:bb:c1:bb:b6:ac:57:f3:
81:86:60:c6:07:74:59:d4:ea:82:c7:0b:8c:85:f9:
9e:28:e1:33:da:92:8b:11:9a:08:d0:3e:9a:6c:51:
8f:14:97:76:13:fd:1e:0c:dc:52:91:66:46:86:7e:
48:3c:3b:36:14:37:ca:cc:f9:c5:ff:cf:5e:72:ae:
05:01:f1:23:92:7a:84:ed:b3:a5:f3:d8:c0:86:50:
e8:97:8d:b3:a5:79:25:ee:cd:21:f6:89:15:d5:87:
3f:36:1f:a7:6f:d4:4c:88:91:5c:42:ba:37:35:db:
1f:22:dd:12:f4:4f:6c:e2:bc:d8:33:4d:12:12:54:
db:1a:66:a5:1c:ab:cf:37:21:0b:22:c5:fc:f2:c0:
24:85:4d:55:0c:13:24:15:28:86:92:b4:b6:f9:4d:
26:ae:d1:8d:1e:35:41:84:34:95:17:f0:4d:60:9d:
d0:64:97:15:fa:18:de:a2:14:67:79:1d:20:6a:04:
2c:a5:d2:f9:b2:99:0f:59:01:0c:a7:36:74:68:05:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:44:D4:17:48:39:18:75:A1:CB:D2:A5:57:26:29:1B:43:E6:FA
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:51:89:a8:d9:ab:da:a2:c7:6a:26:66:be:46:1d:bf:dc:97:
67:dd:c5:5b:ce:54:79:87:90:26:db:04:25:78:82:0a:da:fc:
55:02:9a:e7:e7:90:db:14:87:ba:61:f3:5a:05:e7:ed:ae:b1:
1f:a1:a7:6e:72:5f:40:bc:1d:a8:d4:dd:0b:f8:ba:d1:73:0f:
f2:be:1b:d8:12:09:c7:42:67:d1:eb:a6:75:69:29:75:b1:32:
46:86:2c:65:bd:cc:dc:d1:be:63:2d:50:69:2c:f2:b5:61:b4:
1f:57:7f:00:d5:d6:8e:0b:8a:7d:38:e6:38:b4:62:30:79:56:
36:82:a6:ef:d8:51:41:58:05:61:2d:58:2b:37:1a:65:47:73:
75:78:cc:1a:d9:0f:74:3e:1a:ad:48:89:b9:32:e7:46:fa:79:
76:b9:f9:61:ad:21:e7:e4:26:f9:a2:8e:59:65:f1:40:0c:de:
25:e7:cb:11:d3:a3:20:1e:04:ad:87:fc:08:9d:7f:df:05:43:
d2:b4:0f:a9:44:8e:c2:bb:0a:ca:bd:c1:66:f5:fe:17:25:c5:
7a:a0:05:c1:d4:d2:46:08:fd:5a:97:79:3f:4a:88:5e:8d:c5:
3e:db:78:d4:21:45:92:d7:0a:45:ce:fa:d1:04:ad:08:b5:c7:
d7:fa:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:31 2025 by rpki-client