Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: mKnVcYvG7OsOOAJrvzVjn6ykDNgNJx09yVYkzHI92Vs=
Subject key identifier: 19:A2:E4:2C:17:94:4C:68:17:79:F7:03:9B:64:01:9D:81:12:F7:45
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 0194BD17CBEF82B467DA5B1C84200D093E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0444
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: s58fVbTearErt9dmYfMWcC8odHDLP7WFKV6SrX1yKN0=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:ef:82:b4:67:da:5b:1c:84:20:0d:09:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=19a2e42c17944c681779f7039b64019d8112f745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:e5:f5:85:26:3a:70:54:20:42:2a:e7:a3:
de:ae:05:a2:c9:9e:80:15:29:9d:75:66:6f:fc:db:
e8:99:c7:9a:29:84:27:c8:59:b6:ad:29:12:bd:d1:
86:1a:c6:a3:87:1e:02:b5:e7:a5:d7:f6:ca:71:0f:
b0:09:70:18:f9:85:64:2c:b0:27:78:07:04:ff:57:
9f:22:e2:c1:e4:2f:bc:3a:ee:9a:d7:be:bd:87:4a:
2e:24:b0:f4:0d:d8:7f:27:46:e4:c5:2d:12:55:35:
0f:a9:da:1c:bb:4a:64:82:18:0e:1f:a3:d5:1c:be:
15:9c:6c:89:65:63:0e:f7:55:59:b3:84:ab:b0:07:
f8:d7:dd:b5:3e:a2:dd:6b:14:49:ae:6a:5f:48:ab:
a1:44:11:7a:fd:7c:df:a0:c4:15:61:f1:e6:90:7f:
5f:c5:ad:bd:29:4f:5f:20:69:2e:e3:52:6b:56:2a:
82:53:f1:d0:ea:46:86:2f:81:ed:50:e8:cc:32:90:
d2:d5:ea:19:e2:dd:2d:81:e5:6f:32:fd:e5:82:0d:
0f:81:35:da:ff:c2:e8:34:70:67:c9:9a:3c:80:0f:
c7:4b:dd:75:f2:55:84:19:83:a8:b0:b4:fc:d7:3c:
01:87:d7:d1:24:dd:5e:a1:2e:23:d2:9a:b8:d3:d7:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A2:E4:2C:17:94:4C:68:17:79:F7:03:9B:64:01:9D:81:12:F7:45
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e2:a7:32:d6:cc:20:eb:6f:09:4b:97:c3:de:91:ba:86:17:
28:06:6d:b9:31:f4:4d:cd:c7:13:47:84:68:22:e0:71:0a:0d:
26:0b:04:65:4e:30:3e:65:cd:49:1d:8c:cc:3e:52:52:49:da:
3c:41:81:b8:bc:ac:c4:80:05:c9:83:0c:8e:a3:d2:18:c5:c7:
ee:06:f5:5c:c2:01:3b:da:55:d0:84:2e:aa:7f:33:46:a7:ec:
63:98:2b:09:8f:9a:c7:5c:14:2e:ca:a0:3d:a4:b7:4d:0f:22:
af:e1:3a:a8:a2:b3:4a:7d:6c:bc:c3:f9:6a:79:71:20:f7:a6:
c6:29:c3:44:1b:04:f2:76:bb:63:01:c5:67:15:c7:9b:10:a4:
6e:b6:d1:36:37:80:e3:05:e1:fc:4a:79:35:ce:45:01:af:d7:
a7:7c:fc:fa:30:3d:e3:81:f8:55:7f:dc:6b:01:ab:59:26:f4:
89:0e:70:9f:eb:75:ea:d1:20:08:90:5c:87:4b:fd:a7:ac:9f:
ad:42:df:dd:dc:38:c3:01:40:97:48:58:8c:8c:ea:57:5c:77:
9a:08:3f:e5:5a:16:f7:4c:b5:28:d5:fc:96:7c:54:35:4b:c1:
e2:4f:73:fa:80:44:41:a0:ba:93:73:80:37:dc:61:b8:00:d5:
86:1d:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:11 2025 by rpki-client