Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: DVikx6AIGIumm4DVJLnmWZ/7umXKXJx1FCQCp34WzwQ=
Subject key identifier: D3:C4:BE:FF:E5:4F:1D:AC:C1:4D:BB:24:81:5B:A4:11:0F:E3:BB:53
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 0194BCA9B124BC1FB26F74A9D503CFB44BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 0F6A
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: QYgDIwAfZ0vp+Bj1NAo0OVyxgPi5Q9TC/qTZipxMYUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b1:24:bc:1f:b2:6f:74:a9:d5:03:cf:b4:4b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=d3c4beffe54f1dacc14dbb24815ba4110fe3bb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:07:69:8c:f0:ee:4b:21:88:8d:74:b5:31:
5c:58:db:ed:42:f5:66:f7:ea:9b:83:63:d2:e1:41:
2b:82:8b:51:37:55:2f:20:1e:5c:de:bb:1f:d7:4f:
b2:9b:71:1f:1e:59:cf:5a:2a:04:5c:43:40:83:b9:
0a:24:4e:7f:57:b6:d0:64:6e:24:b3:c5:48:23:b8:
2b:fe:2b:b3:cd:40:7b:dd:35:4d:2d:43:ba:69:ef:
97:d9:3d:b2:f0:4d:6b:cf:c1:72:27:90:7e:08:eb:
b7:58:c3:f0:0b:26:06:84:22:84:e1:20:82:10:2f:
01:d5:b8:49:00:23:2b:4b:4e:d6:4a:d5:e0:ab:4a:
8d:61:22:dc:7f:e1:44:f7:2c:4c:1e:61:e3:35:a1:
9a:e5:8d:f9:64:48:15:86:86:db:31:a1:de:4d:aa:
bd:ab:d3:23:c3:15:ac:f6:f0:47:99:70:b6:64:53:
1d:ee:a3:52:46:3d:4b:3c:20:ea:33:19:0a:3a:c7:
58:3b:4e:89:d9:30:e8:a5:06:f2:96:52:e8:14:4a:
3e:a9:34:bc:68:a4:32:12:55:ad:06:92:ff:6e:f1:
14:83:ed:a8:7c:21:dc:c7:99:11:7e:3e:1b:12:b7:
b0:2e:93:44:80:fe:ac:f7:8b:81:df:01:f8:c1:29:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C4:BE:FF:E5:4F:1D:AC:C1:4D:BB:24:81:5B:A4:11:0F:E3:BB:53
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:de:4a:db:1c:07:a3:83:bf:71:7d:5d:31:be:9b:0f:f0:fa:
8f:08:e1:e1:81:01:f5:5f:2b:76:3d:2c:87:5e:42:b9:a3:40:
c9:81:59:ad:1d:3a:94:a6:5a:5d:b7:f5:cf:a3:7a:32:32:26:
07:05:91:25:00:be:79:f7:d7:d7:03:e2:c1:8c:2b:2f:9c:05:
a2:3e:bf:04:23:56:74:e7:16:64:a7:c0:8e:65:fb:d6:d2:49:
0c:4c:ac:39:72:ba:86:56:e0:97:89:9e:17:19:75:34:36:f8:
29:75:ca:c9:35:c4:b9:f9:8c:35:75:58:b1:b3:0e:1d:03:d2:
fd:46:f1:96:67:53:75:be:57:dd:36:ab:05:c5:2a:fe:95:83:
7b:9a:12:55:c6:6f:04:e7:c8:76:63:cc:4b:4e:91:d9:96:b8:
8f:e7:63:46:91:c3:62:e0:e1:80:90:d9:76:7c:ab:64:7a:dc:
a0:66:0f:60:77:54:1f:91:33:7e:1a:2b:9a:e5:33:ac:c1:11:
75:07:e3:53:9f:25:96:e7:0c:8c:ef:fb:20:0c:53:dc:01:68:
d4:bc:01:8d:58:b1:2c:0f:13:79:cb:2a:14:30:f1:37:ab:37:
e3:ac:ac:90:80:2a:ae:c8:48:6e:fa:ed:8d:ec:ad:c7:07:eb:
f5:41:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:56 2025 by rpki-client