Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: JW8aGmkrbu007Zv56vv1inbs7WQsw1j1vdexrNHMBM8=
Subject key identifier: AD:59:A0:B4:F1:6D:23:80:D9:C0:46:39:66:16:38:7E:12:E4:AF:D9
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 0194BBCE77249169BC9A1923591EF8430B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=)
2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=)
3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: LCb8ujMHV10LkB4spqdnb9hcwW5cxoIU8dPBsdTRZ6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:77:24:91:69:bc:9a:19:23:59:1e:f8:43:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=ad59a0b4f16d2380d9c046396616387e12e4afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:a1:d9:6e:99:e5:c1:c4:39:6d:3b:1b:32:
50:06:34:c5:fd:96:8e:5c:79:42:87:61:76:49:51:
19:73:7d:63:54:8e:49:8d:a3:67:3b:65:7b:59:60:
4b:1f:43:e0:30:10:29:5d:24:6a:22:b4:d8:d9:a2:
63:82:bf:1b:ca:00:63:52:a5:02:57:a5:bf:ef:58:
2e:c2:9c:ee:8f:e2:65:89:9a:8a:b4:1c:d6:73:92:
77:84:58:03:83:db:84:bc:80:1e:2a:4a:41:94:fa:
dd:2a:ae:d4:93:75:a7:87:9c:70:95:11:a9:7e:3e:
49:f7:23:cb:a5:02:e0:c1:35:c1:cd:4b:45:95:04:
3b:34:36:a0:06:dc:ee:18:d6:68:1b:69:5d:f3:e6:
77:84:5e:37:ab:4c:db:d0:b5:27:a9:cc:7a:81:94:
e5:fa:98:39:74:2a:2d:28:9a:80:56:46:18:d6:f2:
de:56:bf:6a:ab:6d:f9:de:49:84:85:16:ea:b4:92:
7c:16:37:1e:e0:e4:17:79:66:85:26:f0:ea:e0:c3:
ee:a2:33:01:2e:d2:32:c4:f6:4f:73:4e:ad:b8:c1:
cd:cc:93:66:9d:0a:ba:82:43:0e:ef:a9:c5:5b:eb:
f0:8e:65:78:94:6f:10:91:b6:f1:93:43:d8:e2:ed:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:A0:B4:F1:6D:23:80:D9:C0:46:39:66:16:38:7E:12:E4:AF:D9
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8a:9a:a8:13:e4:88:f6:b2:ba:57:40:e4:b9:2c:84:9a:a7:
07:8c:44:14:68:92:d7:4b:20:f3:ae:44:f8:c1:23:23:58:b7:
7c:ee:d3:b9:ff:82:7f:68:05:d5:c9:b3:08:7d:2d:4f:da:20:
b8:48:0c:b9:31:85:da:08:b4:1b:ee:d4:b3:f2:64:4e:d2:b3:
53:ff:d8:4f:6e:fe:46:5d:37:02:fb:bd:4a:8c:d8:7a:57:5b:
01:e1:62:ee:f5:9a:c3:b7:8b:8b:2f:ad:80:c7:c5:96:31:84:
bc:3f:2f:8b:80:2f:65:aa:98:40:c6:37:95:e3:6b:fe:d1:ba:
1b:c4:22:f5:ff:1d:01:ba:ed:c8:73:4d:6f:f7:ea:5e:4b:66:
5d:7c:38:b3:ef:a6:02:4f:99:78:51:6b:43:05:5a:52:bd:63:
4f:43:be:78:ef:d6:45:c4:1f:40:7e:17:b8:80:b5:1f:e8:16:
a7:56:10:ec:f3:21:a2:70:5d:f4:2e:b3:a9:1e:c0:d8:95:23:
41:fc:9f:8f:71:21:45:04:d9:7f:61:0e:49:ce:5c:e2:1b:11:
51:61:4d:c8:1f:4c:9b:4b:06:bb:7a:ec:44:ad:68:50:e4:ae:
57:a6:1c:97:b4:a9:45:58:2a:3b:aa:36:29:bf:c6:a8:fb:63:
5d:13:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:47 2025 by rpki-client