Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: dmUU674pP7663PTZ8Dif0lsjDseAQfhOFzkUOx8BCac=
Subject key identifier: A2:C5:C3:65:34:7E:1B:13:70:0E:60:4E:DC:1A:4E:E1:33:2A:A1:0D
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 0194BD176E1E0B9681B8084B1EFE20390A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 0417
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: B66sUqNV0kXTTuDAn+/9Lzviop8RzU9cZ/DGov/IZZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:1e:0b:96:81:b8:08:4b:1e:fe:20:39:0a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=a2c5c365347e1b13700e604edc1a4ee1332aa10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:88:e5:88:bd:af:dd:3f:f2:4e:ae:5b:33:8b:
97:bc:3d:f2:cd:99:46:13:96:c9:a7:89:4e:2d:b6:
53:47:c9:2a:e6:c1:90:1d:cb:6a:75:d3:31:71:ff:
ae:e6:e9:89:cb:e5:2d:91:e7:aa:96:67:31:c7:c6:
91:bc:2b:22:f2:06:c4:29:db:e5:a7:29:82:a8:d5:
13:ef:30:0f:d9:ea:5e:ba:fc:c1:03:9f:06:f5:3e:
45:51:f1:b6:94:e3:04:7a:56:96:64:15:71:1f:70:
22:7c:80:83:fd:d2:ee:90:99:4c:a3:9e:2c:08:3d:
fa:00:a4:cb:00:0b:1a:79:62:97:6f:6c:91:1e:fe:
09:5d:70:56:ac:02:71:99:81:a3:ac:4d:87:79:4e:
44:65:d9:e6:31:3b:7b:1c:54:c1:36:ee:26:b6:c2:
7e:90:93:90:5c:30:66:b0:92:92:be:db:2a:45:0b:
1a:a4:46:21:1f:a3:bc:26:1b:f2:35:95:9a:f6:c1:
98:2c:c7:8f:f0:09:64:c2:70:80:ff:d7:bb:9e:48:
f7:33:6e:b7:59:31:f6:48:d5:64:b7:42:c6:8e:20:
a3:c3:ee:bd:41:ff:6e:5d:d9:1c:fd:68:ce:9e:85:
73:37:14:6e:32:e5:9f:15:48:8c:f3:22:c9:82:32:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:C3:65:34:7E:1B:13:70:0E:60:4E:DC:1A:4E:E1:33:2A:A1:0D
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4b:19:f1:fa:69:ac:2d:bf:04:85:eb:6a:54:c9:5e:60:d6:
ee:1e:a3:aa:81:e4:da:93:5d:3b:fd:c7:72:58:61:7a:b0:e3:
3a:c9:c6:6f:36:fe:6c:18:7a:f7:7a:fd:c1:3f:30:36:c0:a5:
25:ec:7e:ae:63:b1:3c:ec:45:fc:a5:d4:8f:c1:ec:e5:ff:61:
be:05:71:d1:9d:aa:0e:f2:4f:59:c4:09:b1:7f:57:78:31:a7:
47:4a:6e:d4:7a:cd:9e:e2:6e:dc:51:b0:eb:31:b6:ea:bf:8f:
dd:57:99:5b:fa:1a:cf:88:8f:f7:15:db:bf:a9:b5:86:96:01:
9c:dd:83:47:ca:e5:c1:32:ce:79:6f:20:22:60:72:e4:a1:7d:
35:7c:c7:d8:80:c3:62:44:a2:e5:a2:86:d6:48:86:fd:09:af:
3f:0e:ba:dd:ca:e8:a9:d7:42:e2:4a:b0:87:6a:67:62:aa:dc:
c0:86:9c:c8:65:88:44:03:d2:34:ed:ff:6d:02:6e:27:9a:b1:
a3:ec:c2:ce:2e:8e:a6:72:a2:d3:a7:7b:a7:2a:cf:f4:92:fd:
be:4f:8b:44:62:6c:fc:eb:fa:88:b5:01:b8:a9:04:13:95:76:
9b:5e:db:4a:be:24:96:d7:2a:ef:8e:16:fc:eb:5c:d9:0f:4e:
e1:b0:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:52 2025 by rpki-client