Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier: O0qfT+FjbADLYm80vPFrUd3KRyqcdYDUl8JNnoJZjfg=
Subject key identifier: C0:F7:6C:EE:56:74:DE:99:0A:B5:F8:25:C2:3A:F5:DB:85:CA:22:A0
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 0194BC733D55F1EBC8E9675A213BE4F84474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number: 06F9
Signing time: Fri 31 Jan 2025 13:00:56 +0000
Manifest this update: Fri 31 Jan 2025 13:00:56 +0000
Manifest next update: Sat 01 Feb 2025 13:00:56 +0000
Files and hashes: 1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=)
2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: PksDPxQ0F5Hez9/A+021xuClfBFhDzXpxxbvTW8w+DE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:3d:55:f1:eb:c8:e9:67:5a:21:3b:e4:f8:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Jan 31 13:00:56 2025 GMT
Not After : Feb 1 13:00:56 2025 GMT
Subject: CN=c0f76cee5674de990ab5f825c23af5db85ca22a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:1c:6e:44:77:d2:6f:9c:62:89:e8:e5:4d:
f3:29:5a:42:ba:c5:74:3a:76:59:7b:52:07:e3:55:
1f:e1:03:ab:b3:55:1a:7c:a5:4b:30:46:49:29:d1:
a5:25:81:5a:73:ed:ac:87:c9:d8:e0:72:c9:ef:43:
f3:32:12:46:0a:69:d1:11:57:a7:1d:ff:24:66:51:
ea:7a:a1:47:c7:eb:69:7b:4b:50:6b:12:50:e0:68:
68:f4:f0:ac:2c:4e:61:db:8f:f1:e4:85:1f:b7:79:
60:2f:69:11:4c:e5:56:f8:cf:c6:89:42:b7:73:56:
ff:07:60:fe:28:7b:08:32:97:69:5f:9d:5f:4a:a6:
0f:83:b7:e4:42:a8:3d:eb:32:22:36:9f:31:54:80:
0f:43:8c:76:fd:46:0a:78:44:79:a0:a8:d8:e4:39:
8b:6b:7e:21:38:f5:b2:bb:49:79:b1:a5:ab:5b:ea:
25:bf:a8:35:da:3a:eb:b5:43:b7:99:b8:f4:05:4e:
95:a1:7e:5a:81:03:8d:37:92:14:b3:a9:ed:c8:f6:
02:94:f6:15:1d:d4:79:7c:af:7a:5a:6e:78:3e:a9:
aa:81:06:d6:9c:0b:ed:0c:54:56:f7:39:1c:e9:6d:
84:cc:eb:33:10:b4:ba:33:d8:2a:77:15:df:f2:a0:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:6C:EE:56:74:DE:99:0A:B5:F8:25:C2:3A:F5:DB:85:CA:22:A0
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:05:0b:22:f3:6b:53:c9:20:e6:bf:1a:1a:88:40:fa:73:69:
cc:c7:e2:e2:50:c7:fd:47:9d:1b:17:a5:01:6b:0d:3a:cd:89:
ad:72:d0:10:df:4c:cc:c7:97:28:c8:99:75:12:bc:89:30:be:
0a:64:93:82:df:0e:47:fd:e3:36:3d:0c:b7:47:68:a3:57:ff:
ff:d2:45:c8:ac:59:9b:b3:31:cc:c5:25:0c:55:e7:11:79:3a:
28:2d:c3:c3:4c:c8:5f:4e:73:9c:ae:31:36:93:e1:1d:d2:8a:
17:b4:94:04:a1:3a:81:e0:45:80:1a:75:ec:43:68:a1:6f:5a:
8e:03:ee:0c:cc:25:d1:b0:56:50:f8:80:17:63:93:ef:4c:29:
3c:1a:8e:c6:de:87:70:4d:51:3f:68:ae:13:da:7a:ab:87:75:
dc:1e:83:9d:0f:f9:ff:92:28:a7:2f:4b:89:84:01:c7:ec:52:
26:de:e6:75:bf:45:24:7a:1c:76:10:d9:21:63:97:df:69:ea:
21:f8:2b:c6:f4:cc:84:33:78:c9:c2:31:3b:f9:8e:4b:29:de:
69:7a:3f:ce:96:93:20:c1:ef:3f:e1:84:42:28:a3:c6:cc:07:
e2:b1:0d:5d:fe:2c:e2:10:93:a5:29:a8:c5:d5:46:11:11:2d:
6e:60:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:37 2025 by rpki-client