Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: 3t5GxfwJt+NXex/HqoRa0dTL/phPSx7Ny1ZeL112OBE=
Subject key identifier: 99:A4:76:D8:45:90:DE:C7:D3:0B:21:D2:E6:7C:10:18:2E:7C:C2:1D
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 0194BBCEA57140D0F5F28D0EE6C09F207496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 03E8
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: MjurembtvVeEftl3x1ofb2bHb8o.roa (hash: LMEfB1EahjyEN1vkkgX4Rq92rZ+ObZyJ1Ue8yFCn1Pk=)
2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: +L4/33pyFW20gQwOwva5X7Q84QrhtNLpDUSzpjvX4oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a5:71:40:d0:f5:f2:8d:0e:e6:c0:9f:20:74:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=99a476d84590dec7d30b21d2e67c10182e7cc21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:8c:96:47:68:bb:b4:cd:1a:d8:57:72:9f:
49:1c:97:bc:15:64:a4:8a:fe:5b:ea:25:82:23:7e:
85:25:20:59:2f:48:7a:53:8e:78:bf:0e:aa:87:8c:
2b:48:f7:b4:de:c4:1f:ef:61:80:af:71:b3:8f:77:
f7:b1:48:0d:6f:5f:d9:15:fd:9b:b6:dd:e7:4b:03:
58:01:13:6c:ad:ae:5e:ef:8c:fa:a6:ad:66:e9:56:
de:0f:0f:10:85:9d:b5:09:37:4c:d7:40:68:97:e1:
a0:c6:29:55:30:f4:10:2f:17:74:bf:be:19:8a:74:
79:0a:07:67:4c:a6:82:ff:58:af:59:c5:c4:73:5f:
fa:e0:6a:4d:b4:2d:f0:48:2a:7a:fa:c4:58:d6:27:
9f:65:be:51:2a:a8:28:1a:13:3c:a0:e6:26:3d:06:
ab:a4:9e:6f:0b:8d:63:0f:b5:b4:ec:5b:94:69:e4:
df:81:03:8e:a4:3a:77:7c:46:2f:0a:06:d1:1a:c8:
32:67:06:2c:0b:92:bc:8d:20:0f:4f:36:47:6e:3d:
61:ab:d7:fe:93:fd:d0:aa:e0:35:fc:8c:f4:26:d2:
de:9b:b0:f5:9a:5d:fe:b2:b6:9c:51:53:24:36:23:
ca:da:d9:a0:1a:33:3f:81:28:fb:ec:cb:17:10:c2:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:76:D8:45:90:DE:C7:D3:0B:21:D2:E6:7C:10:18:2E:7C:C2:1D
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7a:5a:ba:92:99:68:cd:11:33:56:95:fc:a1:7e:b9:66:cb:
37:54:da:c4:b3:e9:a2:3e:95:56:f0:2e:dd:c3:ec:17:97:22:
ad:bb:e9:08:9f:b6:ac:bc:52:34:b4:c7:48:61:a3:4d:b2:5b:
9c:5d:85:f1:e6:89:80:41:fa:fa:78:a6:f2:2d:ed:51:3f:27:
6e:9d:57:dd:6f:56:9b:05:59:0a:61:4c:c6:fb:3e:c4:14:36:
9e:3f:1d:0e:22:2d:52:f1:da:5a:15:76:c2:56:39:91:9b:8d:
73:75:ee:df:5d:88:c5:02:f6:59:43:cf:aa:55:e2:ea:39:d0:
4d:3b:44:55:00:8a:a0:0e:46:bf:8b:bd:c1:3d:f8:e8:e2:08:
ff:48:cf:5c:6a:01:87:5e:60:75:cd:26:b8:fc:3a:6c:da:00:
33:bb:fa:f3:00:68:91:d6:d4:72:b9:eb:54:7a:03:27:d4:eb:
ac:65:0e:21:d5:8a:68:5d:3d:26:f5:3b:94:80:33:e0:68:b4:
45:91:26:88:fe:34:f0:5d:63:21:27:76:33:82:07:ba:f7:91:
fa:d0:5f:84:4d:6d:6d:18:b1:57:83:21:8f:68:29:57:7e:7d:
96:77:c0:c6:53:04:f1:a0:a4:81:40:3e:36:10:3c:ee:06:77:
52:cb:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:36 2025 by rpki-client