Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: Lklzib2wVJvFpTIA1hCKwR8b73IFU2rp7dJQFkYKtw4=
Subject key identifier: 4F:8C:07:BF:B3:95:1E:96:C3:70:0B:06:99:87:E4:99:9C:F0:92:B7
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 0194BD4E8076DB57DB0306F4D070E47F25E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0C04
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: qqUEX74dK22WOFbTM3HP5uhG9SOawMncKzSpeppM+CQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:80:76:db:57:db:03:06:f4:d0:70:e4:7f:25:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=4f8c07bfb3951e96c3700b069987e4999cf092b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:15:7b:93:b3:c9:fb:91:37:b3:04:6d:30:
e0:0a:26:fc:91:91:59:0b:b4:9f:08:6e:dc:2c:4c:
d5:fd:48:de:48:3c:ec:87:62:3a:09:2d:96:44:3b:
80:04:a2:82:8e:7f:80:b4:db:63:de:a7:9d:8d:b2:
6f:25:22:34:c7:c2:35:6c:9c:c6:1b:af:d3:47:4c:
da:c9:04:ad:e1:c0:4c:98:a3:54:9b:30:d1:0a:24:
86:a8:13:e8:52:08:15:da:4d:89:fc:5a:31:e6:24:
db:c7:04:57:3c:a9:99:c4:21:45:78:ef:bd:ba:98:
1b:7a:c5:2a:79:6e:0b:d9:fc:0f:66:d7:fc:12:ae:
e0:7d:b3:5b:be:1d:f1:e3:96:10:91:53:0e:7d:42:
0b:c9:21:1a:e8:d1:a5:c5:14:50:42:a6:65:a9:37:
95:76:5a:d8:a4:76:7c:b1:31:b3:56:5d:fb:7c:3c:
e2:2f:81:bf:dc:e4:36:40:1a:97:ce:da:58:20:23:
e4:91:f6:16:00:03:5a:62:2d:db:6a:db:3b:84:3a:
c5:11:31:5c:af:70:83:1a:40:8b:b1:d3:f5:3a:4b:
3c:42:ea:67:70:8f:5d:a0:18:e7:13:74:1c:c0:fa:
6b:d9:2b:35:84:73:36:07:cf:cc:b5:72:b9:06:80:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:07:BF:B3:95:1E:96:C3:70:0B:06:99:87:E4:99:9C:F0:92:B7
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b3:76:3d:f6:7f:e6:65:b0:c1:b7:19:8e:68:f0:f3:30:f3:
e3:6d:11:39:f2:ad:e9:f0:aa:68:09:e8:50:4f:65:e2:27:0d:
3b:e5:b8:61:39:90:64:99:6a:d4:07:42:ed:47:e2:4b:db:8d:
0b:30:3a:41:ad:34:e5:58:77:65:7d:dc:e9:46:4e:b7:c9:84:
c2:7c:5e:08:68:4d:bd:7b:04:64:95:6c:f8:b7:67:c5:6a:99:
01:ee:6f:1b:dd:e0:1d:96:4f:14:34:05:f8:9a:48:fc:46:37:
cf:25:d6:fe:f7:5b:86:51:62:3a:0f:d5:c5:23:9a:b3:b8:31:
2d:ac:bb:7f:e4:9a:4b:bc:87:3d:3a:43:4e:a4:0a:5d:58:d1:
73:a8:c9:f9:dd:d5:18:95:b9:83:8e:07:f1:4c:a2:29:b9:f9:
b6:03:50:5c:d0:04:0a:38:a2:5b:e6:7a:7d:8f:c1:a2:fa:39:
5c:46:d0:e5:ed:72:e9:a6:13:c2:18:0d:68:74:78:04:3b:25:
0c:a7:f5:03:56:8c:dc:bf:71:d2:58:a7:ec:fa:af:56:65:7c:
e8:cf:58:a6:bb:e7:76:c2:23:65:89:1c:38:f3:b4:f1:97:cb:
ea:16:42:44:34:69:6b:18:03:25:04:ce:fb:56:36:c5:86:be:
f2:72:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:08 2025 by rpki-client