Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
File: xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json)
Hash identifier: lj7RBzCGYqb1C8BtuspMHF4VglOfVO6dT6h3Or7plNk=
Subject key identifier: 92:FE:AF:92:B1:D3:89:CB:B2:5A:C8:17:14:FB:91:D7:57:B9:47:B8
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Certificate issuer: /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial: 0194BC72A7754B1EFA0B61044806B322DC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
Manifest number: 12B4
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: 1-p8tFLtNjdsD9js8JfdcaeXLbes.roa (hash: SGKnAN0Wd2NDfYevBBpaQsdqn+ofJ6GFHE9Wy8o0+BA=)
2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: NlBpkiwoFXElZKhGTrO74R0TW4JxUS17WFEvId40c7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:75:4b:1e:fa:0b:61:04:48:06:b3:22:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=92feaf92b1d389cbb25ac81714fb91d757b947b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:5f:81:76:c6:b0:6d:bf:83:48:60:ba:b1:
2b:cb:23:ec:1f:e8:a7:fd:65:58:4d:c6:0c:1b:0f:
9c:55:93:26:9b:a7:5d:66:f9:c4:a7:fa:29:81:2f:
4a:ab:63:09:66:7f:bc:bd:31:36:25:16:ea:66:ac:
4a:a0:86:dd:cc:26:65:90:ef:c4:e0:1d:72:61:15:
9f:ca:c1:16:36:ff:21:fc:f5:eb:af:47:bb:42:07:
1c:b0:50:fd:95:46:d7:3a:05:a3:52:d8:0b:7e:18:
83:21:d8:3d:76:03:aa:7d:c9:de:f1:f4:41:7f:fd:
8e:d5:b9:de:0a:48:65:94:ab:79:11:a8:c7:ec:b6:
6e:ce:29:27:9b:87:a3:2d:b7:c7:75:3e:85:41:bf:
36:17:b1:a0:a9:9d:8c:fb:e7:0d:e5:a0:3e:c0:4b:
cf:e8:1d:18:c3:a3:05:81:23:9d:9a:9c:c4:69:a2:
ff:ba:98:fa:19:95:18:03:c6:d4:c1:8a:4d:05:cd:
ee:34:b1:0c:0f:2a:50:9c:48:96:d6:cd:5e:5e:f0:
70:1d:fc:70:10:69:5f:29:87:4d:8d:85:44:53:5d:
c8:27:41:8c:40:b1:fc:da:8b:b4:de:6a:a1:64:c1:
48:9d:29:dd:33:c5:bd:62:c4:15:28:a1:94:d7:d8:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FE:AF:92:B1:D3:89:CB:B2:5A:C8:17:14:FB:91:D7:57:B9:47:B8
X509v3 Authority Key Identifier:
keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e4:d9:91:28:e7:e9:5f:be:e2:8a:df:00:78:87:16:1e:7c:
91:56:5c:84:ae:a2:d2:6c:88:43:71:97:40:1b:ce:d8:9c:15:
a1:e1:9a:69:11:18:b3:80:cb:52:56:b6:23:5d:60:61:0a:a7:
8b:aa:14:31:d4:8d:e7:d2:e5:93:e8:85:60:c4:8e:46:25:ce:
b7:f3:50:4e:ed:10:30:a1:ea:ff:ad:f9:a1:07:e0:b7:3c:10:
d5:08:ee:2c:5a:23:9d:41:dd:9d:28:c3:31:cf:1d:37:e5:0e:
a2:26:3d:8c:98:cf:e6:8f:00:3e:17:df:b8:cc:9d:71:29:0d:
1c:0a:b8:f9:8e:a9:14:2e:4b:a9:b1:97:f5:57:3b:df:6d:ea:
66:77:dc:94:8b:7b:f2:d4:cc:ba:0e:e2:ae:86:be:48:1a:7a:
7e:66:7a:66:6e:3a:9b:29:6e:b2:f9:f5:66:cb:d5:4b:65:d9:
a6:db:eb:1f:8f:c2:b0:dd:24:ce:62:4e:5d:6e:a9:f8:a4:d1:
e2:78:d0:9d:3f:53:02:64:ae:5a:70:e2:2c:8b:19:90:fc:11:
fa:31:c0:7a:07:06:a4:61:14:68:69:b5:47:be:68:00:83:ee:
33:3f:e8:a6:54:4a:54:e4:a6:21:28:5b:f4:85:0e:03:25:4d:
40:05:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:44 2025 by rpki-client