Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: fVVIVFTlCO01ZIAhdii7YUykvG3xPurZxrtSyfyDmIQ=
Subject key identifier: F8:03:F1:EA:7D:29:0F:8D:08:37:A1:57:FA:F7:67:A9:31:12:DF:4B
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 0194BD4E7007F15AC2D720FCA7707B3BCC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 02DF
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (hash: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: cykr1hLU52ucoydnPVQFDoEQAxSa2D04W39ubD0MGBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:07:f1:5a:c2:d7:20:fc:a7:70:7b:3b:cc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=f803f1ea7d290f8d0837a157faf767a93112df4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:12:29:c4:e4:02:52:bf:c0:d5:3b:99:2d:
6a:4a:66:02:9a:13:58:73:db:03:58:42:12:c9:5d:
33:9f:6f:f6:37:0b:e3:6b:8b:c7:e2:30:50:f3:2a:
a9:90:23:a5:68:3e:c9:a5:29:36:8c:96:5c:f2:25:
90:42:e3:f1:59:b9:25:d0:b8:fa:c9:7b:e1:58:30:
b5:1e:7c:d7:96:d9:58:b1:59:83:3f:d9:d7:1a:f1:
00:49:f5:cb:25:42:6d:4a:db:29:74:72:21:06:2a:
64:f6:25:e9:2d:e4:8c:ad:64:3c:78:84:5e:1f:9f:
cd:b1:d1:db:e9:b0:ce:82:7a:bb:b8:d6:26:51:92:
21:96:ad:7b:72:af:3d:6f:67:db:be:21:b6:e4:2c:
cc:b2:12:82:f4:35:91:62:b0:76:d1:8d:3b:df:b5:
bf:78:7e:1b:14:b7:22:75:1a:4d:6f:c9:d5:ff:08:
8b:6e:a2:9a:0e:2a:8b:4d:1d:08:75:6d:97:a2:e7:
6c:42:b8:12:aa:2e:4f:54:16:43:15:ef:66:26:6b:
f4:e0:2b:8a:24:00:24:4c:f4:74:f7:fa:54:0c:d5:
ca:8e:65:4b:a6:ea:ca:a6:8b:b7:31:fb:91:c7:55:
4b:1b:f1:ad:d0:ba:10:22:69:6e:20:4a:76:bc:50:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:03:F1:EA:7D:29:0F:8D:08:37:A1:57:FA:F7:67:A9:31:12:DF:4B
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:18:68:88:2a:72:fb:2a:53:15:5e:f4:5f:5e:8c:b4:a7:
e4:e9:26:8c:4f:64:9d:b1:2e:23:6a:c2:1a:43:db:28:cf:37:
03:73:ce:4f:c4:bc:13:02:ee:74:9f:71:52:84:58:c8:05:53:
81:0b:a6:32:55:57:11:cb:6e:de:66:b9:c1:02:dc:a9:2c:2b:
45:4a:52:a1:c3:60:e0:36:2d:8f:09:f5:cb:2c:56:4c:f3:6c:
f3:e5:c6:2d:9e:f3:3a:13:d2:75:c8:4a:49:93:ff:a9:2d:35:
8f:a1:a5:89:f8:c5:60:4f:f3:ca:59:8e:12:57:6d:62:57:39:
0d:00:d2:15:8a:a5:47:05:2c:6d:5c:ef:4a:d2:7b:a5:cb:a3:
99:df:2b:ff:86:b6:5a:22:8d:56:89:70:73:c0:86:1b:2c:e1:
17:f8:8e:cf:19:19:12:d8:33:42:2b:64:a4:4f:28:22:a7:03:
89:f7:aa:0f:d4:0d:18:38:44:75:a1:01:98:c9:d0:b2:43:85:
be:e9:cb:4e:1d:cb:e4:6f:45:d0:be:dc:45:13:69:b6:cf:22:
26:dc:4e:02:5f:af:e5:7c:ab:9e:36:09:27:4c:0f:e1:36:ef:
fb:4c:40:83:9c:b4:04:ec:ed:9d:6b:ec:70:2b:90:69:10:5c:
d6:0e:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:56 2025 by rpki-client