Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: 7rt1CtSQANNGICDDQXyEqa9iPWTSSZtfhU5WX02HH8U=
Subject key identifier: 44:51:C5:69:4F:93:A0:BE:D3:2D:EE:4C:F0:69:48:77:BF:77:42:AC
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 0194BBCE651900CAA6F3188984749C7B108B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 1072
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: gZeTcFsgBzioBc5SewBcDh/aMyuKhtllkDi0hsysqAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:65:19:00:ca:a6:f3:18:89:84:74:9c:7b:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=4451c5694f93a0bed32dee4cf0694877bf7742ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:5b:fa:b2:50:e3:5c:14:43:72:bb:4a:f7:
1f:9c:3f:5b:63:7f:a7:74:a9:e5:29:93:bd:0e:be:
ce:a6:5d:d8:94:2b:d5:01:43:5c:70:35:88:90:5e:
48:58:9f:49:c2:ee:b1:0f:82:1d:37:24:f8:ec:66:
b6:26:3f:42:e3:14:76:c6:48:28:51:ae:38:6e:55:
de:a7:e5:a5:0e:75:29:fd:b5:8f:e9:94:c0:db:57:
a5:e7:1f:9d:f7:e2:f4:76:8d:b9:b3:3a:94:d3:c3:
4e:13:ee:f8:65:80:ad:e0:c0:14:3d:e7:76:3d:21:
24:90:5d:94:94:e3:38:f8:e0:17:85:93:5f:cf:22:
ee:de:44:b4:2c:8d:f0:39:d1:d4:a8:12:2c:c1:00:
65:4c:96:33:f7:a0:6c:d3:82:da:54:db:a3:32:6d:
30:3f:0f:0b:39:45:b6:7f:79:71:ce:25:c1:0a:f4:
00:d1:f3:81:92:41:4d:f0:e0:a6:e2:25:40:d3:55:
8a:b7:9e:ae:3b:12:5d:ff:fe:b9:dd:bb:df:ee:7f:
31:49:cb:4b:6f:0e:63:82:4d:ec:de:f8:b1:3a:fa:
1a:e2:b0:ea:9c:35:d9:03:c0:d9:bc:e6:9c:f6:5a:
88:54:37:33:02:6e:16:bc:12:0c:cf:c4:ea:3b:f2:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:C5:69:4F:93:A0:BE:D3:2D:EE:4C:F0:69:48:77:BF:77:42:AC
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a0:12:43:e7:a3:3d:9e:f2:1c:2d:f7:99:79:cc:e0:25:e0:
de:5d:94:38:68:ca:d7:d6:a4:5a:16:7e:02:23:e4:6e:de:39:
24:7c:94:21:cf:1f:5a:0d:9f:95:af:39:1b:c9:cb:f2:89:7e:
b2:5b:c9:0c:22:d7:ea:63:0f:59:2d:bd:21:9a:b5:e1:f1:ba:
89:18:78:37:b0:72:2e:c6:1f:e5:61:6d:59:3d:8d:e7:ce:0a:
f0:8e:03:2d:40:34:90:c3:97:8f:69:c8:e7:9e:5e:8c:3d:9a:
13:10:4d:a6:68:2f:87:9f:09:2e:e5:d2:99:5b:c7:85:76:8e:
6c:5b:c4:0c:45:d4:33:ad:99:7d:13:aa:a9:b8:c6:8b:fd:63:
bd:2b:ee:42:d2:ae:f2:71:5d:ca:79:9f:e8:cf:54:5f:55:09:
88:a9:eb:36:29:7e:44:e1:21:c6:49:b2:0f:dc:cd:d1:71:3e:
1e:58:37:a5:0d:b3:06:bd:b0:9d:64:6d:b1:c8:fc:a8:68:e0:
9b:3c:73:8f:85:a9:ae:c1:1c:cc:24:91:42:cd:0c:bc:fd:f1:
35:ff:ab:a5:b3:99:d4:0a:df:84:dc:c7:bf:fd:fa:4d:f3:25:
e9:79:d7:02:c5:0b:75:0f:47:96:18:a9:c4:97:a0:9a:66:6a:
c0:d2:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:05 2025 by rpki-client