Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
File: XpgU1DFdMK28jeMGAFVq6cPPns4.mft (raw, json)
Hash identifier: GXjAH7pDi3g/5E7z1I9aqbIWPYxW9v7m8jkFOHD8zG8=
Subject key identifier: F0:79:37:26:39:37:D5:0A:E3:68:CF:AD:E4:27:43:79:C1:85:33:E5
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Certificate issuer: /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial: 0194BC3C9D3F38F13E72F684F994B9F1BA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: XpgU1DFdMK28jeMGAFVq6cPPns4.crl (hash: HK2CWqLnF+uW1KsvlCL2bgx/hYaE7JKm3jv5jpL3yGk=)
2: srWs4lSgEcXww8bmZ8Qduqdxgdw.roa (hash: Fa3vdYsDt8LbAe4PXMPi2JDBOubqWHhdVQas9y66mmI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9d:3f:38:f1:3e:72:f6:84:f9:94:b9:f1:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=f07937263937d50ae368cfade4274379c18533e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:32:7a:d0:19:d1:d2:b0:a9:85:8a:52:86:
a8:f8:fc:30:cd:58:3b:d7:0f:ea:19:49:e0:bc:45:
d0:bc:70:cc:1b:d5:f1:00:5a:eb:3e:03:cc:e0:cd:
37:40:eb:33:91:ef:a2:c2:f2:40:ba:ef:c3:9c:77:
07:8a:16:30:94:5f:be:a2:d3:ee:46:f1:b5:e9:d7:
0d:ac:9f:2d:6d:6a:81:d8:ef:a5:67:7d:1d:59:07:
77:25:d3:bc:b7:1e:ec:7c:c2:db:01:c7:0f:cb:ed:
b9:b6:a3:ec:95:53:14:3e:cf:1e:ed:9e:ae:e3:a8:
15:36:d6:e7:78:56:79:02:6e:e6:2b:24:27:e2:a5:
71:1d:ee:89:e8:5c:ac:57:70:74:95:00:33:72:ad:
91:c0:79:81:ec:f7:65:10:62:cc:0d:4c:58:e9:84:
b6:db:18:4b:57:fd:1a:56:d0:c2:49:21:5f:74:19:
57:d6:32:58:5c:8a:bf:34:0e:65:29:cf:84:e3:36:
f1:58:86:38:85:a0:c8:33:97:ee:d1:82:dc:93:bd:
e4:75:6e:e9:fb:10:ef:a7:67:09:ab:d9:2f:ef:79:
3e:4a:23:01:13:58:13:61:8b:f0:9a:b8:17:77:b1:
1d:62:0e:81:2b:01:85:9c:cc:d2:cd:8b:0f:79:29:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:37:26:39:37:D5:0A:E3:68:CF:AD:E4:27:43:79:C1:85:33:E5
X509v3 Authority Key Identifier:
keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6d:83:74:14:9b:5a:ed:3b:22:0e:6d:2f:5b:87:9f:9c:42:
3a:48:d3:bd:34:1e:5c:a9:67:88:5b:e1:6a:a3:76:6b:37:32:
a4:d8:48:51:02:af:90:47:17:09:ce:87:73:cd:b8:eb:02:0f:
bb:95:1f:17:e4:83:9b:08:31:6c:87:95:63:9f:df:44:cc:4e:
15:7a:a2:30:35:f1:12:61:65:28:cc:f5:49:c5:b7:3a:3d:ce:
e1:b5:60:fa:3e:45:03:66:f4:b5:84:59:5d:04:8a:c5:f8:06:
5c:3f:45:c4:fd:ec:b5:a5:9d:c8:e9:59:99:cd:85:76:c8:ce:
50:76:6a:7f:81:3f:59:9b:f8:1c:62:08:be:97:c7:67:2d:10:
58:ae:37:83:4f:1d:1d:69:83:03:43:98:b9:b7:02:f9:84:d5:
f1:76:35:11:89:ac:85:1c:e3:64:f5:7d:f9:08:16:f2:2e:3b:
51:c8:9a:a6:dc:07:dc:fa:54:35:56:e1:5a:7e:65:5f:4a:25:
40:99:27:16:e2:0d:f6:28:20:44:0b:9a:30:21:c2:18:16:6a:
20:95:28:82:c8:9a:c8:d4:b3:9a:f8:54:9e:c5:15:87:0d:35:
ae:00:20:bb:6a:e6:cc:8e:26:70:18:1e:6e:74:f3:c7:05:e2:
1b:ad:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:40 2025 by rpki-client