Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json)
Hash identifier: HlyhD4On7kZFPFvtsebIyYUb80tVGERFRPtlUAdZVNw=
Subject key identifier: 43:4A:3C:A9:15:F5:8E:13:42:48:DA:94:CD:FA:63:52:0A:EE:F9:DA
Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Certificate serial: 0194BCA9C8E3EB5493426DA85C1DC18D4CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
Manifest number: 01F1
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=)
2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: RfXbzRnN9s19deXNDIvHElIK+DwS8uLg7PWnzAsd/Ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:e3:eb:54:93:42:6d:a8:5c:1d:c1:8d:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=434a3ca915f58e134248da94cdfa63520aeef9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:e3:39:40:fe:3a:9f:ab:11:57:7f:d7:dd:
77:37:9e:5b:dc:44:1e:0d:e5:a0:03:c1:ab:b8:e4:
7d:fa:80:71:b7:8a:ef:a1:f8:b7:83:59:50:80:61:
bb:28:1e:c7:bb:de:b9:6e:ef:5e:4d:de:fb:50:dc:
8f:76:03:5f:fd:55:f5:3f:c0:b3:48:a1:66:a5:fc:
96:d3:8e:fd:5d:ac:9f:11:1c:ea:32:40:9f:03:1a:
f1:8a:9d:a3:98:01:84:a7:82:9d:31:57:40:d8:59:
8b:68:0a:4e:3b:18:01:5f:ad:3a:1a:d1:41:2d:21:
33:e0:e9:b9:34:fa:e0:27:e6:8c:75:8f:e8:55:c8:
71:e8:bb:64:cc:94:46:3b:05:ad:00:3b:29:68:f6:
0b:a0:31:73:ef:0a:89:d6:0d:60:d8:c3:56:e2:ce:
8f:f6:34:4f:a6:7b:e8:19:b2:37:42:1b:a2:55:fe:
46:ec:da:30:3c:27:41:fe:ed:50:8f:cf:3b:61:cd:
67:33:b3:15:e7:56:42:39:73:92:fe:ce:8a:43:9b:
f3:40:f3:4b:20:13:3f:43:cf:7c:a2:53:77:f5:88:
dd:af:e0:45:51:31:b1:9b:62:1f:43:0c:d0:e1:b9:
01:05:7d:9d:55:a8:e4:b3:11:80:aa:91:11:0d:46:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4A:3C:A9:15:F5:8E:13:42:48:DA:94:CD:FA:63:52:0A:EE:F9:DA
X509v3 Authority Key Identifier:
keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b4:51:ff:ba:5a:45:a4:a3:46:d7:24:65:de:73:b5:2a:95:
0c:96:51:9a:3c:e7:8d:64:ba:e1:e8:d0:30:6a:59:05:95:7d:
88:26:af:0b:aa:25:43:86:cf:08:57:44:aa:6f:17:84:8b:df:
5f:b3:d9:bf:40:27:ba:cb:dc:c1:20:d5:70:97:cd:e7:58:58:
6a:61:cf:50:a6:be:ad:1a:54:41:4c:7b:c3:fc:52:82:12:82:
84:0a:70:a1:9d:9f:26:14:48:69:ec:41:b0:33:cd:0e:ab:df:
47:47:c6:02:46:1d:48:4a:77:ea:48:f7:7f:c3:6b:96:b8:27:
d7:a9:56:90:9f:14:9c:f4:bb:26:a7:05:8c:81:b6:8f:38:4e:
46:f4:34:5f:48:16:b6:af:d4:cd:70:2b:7f:63:6e:95:af:f7:
c5:44:72:35:20:5c:72:ea:af:14:1d:94:ca:2b:7c:8d:58:2c:
3c:f0:1b:ca:73:6b:a4:25:d0:df:c1:97:7b:ff:f0:4d:d9:ee:
52:cb:d2:4d:bc:6a:8f:e4:f6:50:b9:cf:6b:62:e3:71:bd:9c:
a8:dd:e5:f0:57:ec:f7:63:3c:65:13:01:fe:b4:32:ff:73:f4:
40:a1:47:62:76:39:66:c1:32:7d:82:92:df:48:52:9a:68:92:
eb:a5:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:40 2025 by rpki-client