Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier: GoZwpnwsOKeC80fg6RXWCkbq6QLGPGaHfZRIJbeA2ss=
Subject key identifier: F8:2A:18:FE:34:C3:27:F3:C5:62:12:C9:9A:DA:54:01:09:E5:EA:FE
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 0194BCAA37105F1919481CBDD4ED84F481F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number: 1026
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: oQAUGkddA8fJdGHjyMO+X+bUpbMhki8t0Q/oU2OKnmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:37:10:5f:19:19:48:1c:bd:d4:ed:84:f4:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=f82a18fe34c327f3c56212c99ada540109e5eafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:67:0f:44:f6:ad:0d:34:36:8e:bb:93:f0:
0a:0a:52:ae:36:9c:6a:d1:7c:28:fe:07:57:35:16:
cf:7b:48:ce:51:34:e4:d7:80:3b:28:66:18:d8:49:
ad:f4:01:89:04:82:28:58:5b:f4:ba:1a:b2:f5:a6:
b6:14:f7:36:75:7f:ac:69:8b:85:a9:2c:45:16:75:
33:df:e9:6a:a0:ed:a4:b6:fe:4a:a1:5d:a2:23:fa:
4b:2f:23:5a:1a:74:d9:20:1b:40:ef:30:35:fa:8f:
af:c6:99:7a:9d:6c:83:6b:f6:02:50:3a:ee:e8:b4:
cd:81:30:f1:20:b3:47:ae:05:32:63:d7:24:99:6d:
0f:55:59:8c:a6:aa:4e:1c:78:23:1d:b0:ad:b5:14:
8a:90:9f:d6:f1:49:52:ef:83:4c:4e:e2:7c:9b:01:
e8:2d:0b:a3:7c:08:15:fa:85:03:c3:d8:74:fa:97:
97:4b:2c:32:c8:27:8f:68:7c:86:79:1d:d7:0a:35:
97:b8:36:4c:46:4a:4f:52:e6:a3:ea:0e:ba:66:6f:
ee:39:11:3e:27:0b:c4:b0:cc:ac:d7:57:bb:4e:e1:
24:02:d0:28:58:ee:87:2c:f2:9d:9d:15:85:a4:80:
72:ee:2e:45:ea:65:7b:9f:ae:72:c6:af:2c:26:9a:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:18:FE:34:C3:27:F3:C5:62:12:C9:9A:DA:54:01:09:E5:EA:FE
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c6:74:2d:eb:12:60:19:fb:7d:c0:59:17:99:ca:82:85:50:
de:03:f1:18:15:aa:60:3b:74:1b:15:ce:c9:57:9b:d0:2b:cc:
3b:0e:f6:ee:c0:8c:aa:95:f6:1a:83:49:42:4d:49:f6:5d:14:
fb:0a:7e:5c:36:43:36:79:1f:6c:55:a7:a5:96:fc:bb:64:8d:
48:ce:a1:78:39:21:f1:5e:08:d0:4d:e5:a4:10:73:f4:55:3b:
05:2e:dc:0f:1a:88:da:4e:e6:02:b1:8b:8b:e7:6f:3d:9a:1c:
e7:77:e2:ed:5b:dd:90:35:a4:03:dc:6e:52:76:57:d0:32:8b:
ab:b0:4b:b1:9b:dc:46:35:41:32:24:48:c4:44:16:e1:7b:87:
89:72:16:7f:86:47:7c:d0:21:04:08:89:c8:cf:17:2e:df:71:
67:a6:4a:34:f6:e4:be:6a:da:9d:93:9a:c2:fc:80:68:ba:07:
79:8a:87:90:b8:2e:75:07:02:a5:f8:7b:9e:80:8b:9b:d7:7e:
5d:c6:22:84:dc:60:86:38:ee:37:b6:ff:1d:e7:04:5a:56:d2:
07:50:bf:83:4f:3b:3f:bd:1b:98:3b:1c:da:88:9a:29:23:9a:
17:e0:c1:88:8e:48:8f:a3:54:e2:8c:12:43:eb:e5:b5:21:d1:
7a:2a:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:48 2025 by rpki-client