Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: hyuB2WUpm3Y2Y/cApy6Saux6Qmy2z1c6Nu0346uw4vY=
Subject key identifier: 85:9B:81:90:38:F9:F2:45:7B:B9:34:53:0D:3F:70:30:3F:DC:0B:60
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 0194BD17D70B2B60A57FC00344B8B31E4129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: vl15h6bSawu987-Q_9jiY_8d_bU.roa (hash: Ky1qbRFkXL3xxI3+FV1tNHYzBN6SggIg4pNwGCFKnF8=)
2: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: YuxtCYDDGASmTkAS+dN1rtsyU8fbiwVpHvBBxoQL6BE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d7:0b:2b:60:a5:7f:c0:03:44:b8:b3:1e:41:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=859b819038f9f2457bb934530d3f70303fdc0b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:7a:1c:1e:05:df:a1:f3:86:85:b1:95:f8:
9e:99:27:52:08:17:04:d7:cc:c3:d6:e5:7f:03:f9:
d6:a0:f9:83:f0:d8:07:66:dd:e5:34:36:0b:ec:fd:
39:e2:e4:b5:b4:d2:fc:a8:1b:2c:87:61:3f:dc:c3:
36:91:c2:44:11:d6:fc:fd:25:30:a1:23:c6:c5:c7:
2c:92:10:35:99:53:0e:10:f6:46:b2:df:43:4f:c9:
43:23:d7:44:2f:d5:5a:08:dd:ba:d7:06:67:04:5e:
5f:e1:59:f8:09:d5:1b:f8:23:9d:b6:5a:b7:5e:8a:
b9:dc:57:92:ea:a8:d9:ae:a7:b5:00:2b:33:83:6b:
2c:30:d2:d8:cc:e5:a9:be:dc:b6:85:7b:43:a7:cf:
28:18:44:37:5b:dc:02:0b:62:6e:c8:ff:2f:8d:41:
2e:80:ca:ba:a8:bf:9b:b3:9f:df:a0:57:80:2e:53:
01:50:5c:ee:ac:83:82:e8:d5:54:e7:a6:4e:34:a9:
45:46:00:83:55:44:6b:86:5f:0c:1a:05:3e:e9:50:
b2:a4:b4:8b:a4:06:7b:d9:16:f4:6c:2e:f2:df:4e:
8c:31:ae:76:fd:97:2c:ff:21:47:26:52:bd:b6:e8:
dd:c4:fa:e0:3a:31:eb:a0:27:19:25:48:25:14:7e:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9B:81:90:38:F9:F2:45:7B:B9:34:53:0D:3F:70:30:3F:DC:0B:60
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d2:6f:d1:48:53:92:59:5d:b9:e2:03:38:5a:b2:60:74:cd:
e8:52:60:a7:74:7f:18:a2:18:e1:db:8b:49:f4:5c:6d:5e:b2:
c3:48:d2:de:24:ec:dd:b6:02:73:eb:ac:35:db:8c:e2:14:2d:
1e:cb:44:f3:06:67:95:d8:bd:1f:83:28:36:1f:06:48:4b:84:
b1:fb:71:75:6c:e7:5a:16:4c:a2:2a:3e:2e:cf:c9:30:eb:ab:
0f:c4:bc:ca:86:79:81:dc:4c:3b:c7:ea:73:c0:d5:bb:06:a7:
3a:29:e6:66:10:04:0b:4c:de:12:91:46:00:94:bb:ea:7e:88:
a2:7a:29:96:c9:b9:ce:79:09:2d:5f:79:f0:e9:16:11:07:2c:
5b:24:c2:58:e5:2c:4d:2b:31:66:ca:4e:d6:12:46:90:f0:6d:
82:55:a3:c1:c7:97:b9:15:34:5d:a3:e9:1e:4b:9e:8b:1a:63:
2e:f9:4c:38:f7:48:f4:f8:a9:c2:f2:ed:a9:20:75:d9:58:da:
61:ad:aa:1f:cd:03:3b:b3:e3:20:58:c3:3d:20:88:38:be:3e:
ec:24:76:42:cd:c2:9d:f1:53:e1:e8:40:e0:3e:bf:2d:74:38:
59:53:93:fe:38:0b:a9:5b:9e:cf:9b:39:bf:2e:a3:9f:cc:59:
07:79:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:28:28 2025 by rpki-client