Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: 19/kSOXWhIUQ8pt6axY0uL0WbYuZlLDQvcYVFZkNVyE=
Subject key identifier: 7B:34:E1:76:DF:09:5A:62:EE:88:EB:4D:AD:79:A3:43:02:44:15:1E
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 0194BD85836B2F89AC252FBD6585774E3578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 0920
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: OEtcU2DHbehQwPa2zNoLcdpw718TzW7z1+j/T1dCTE0=)
3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:83:6b:2f:89:ac:25:2f:bd:65:85:77:4e:35:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=7b34e176df095a62ee88eb4dad79a3430244151e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:14:b0:3c:5c:60:c8:22:e7:e3:6d:92:f6:
06:9b:ac:78:ad:ea:c9:7c:49:17:29:32:1b:0a:e9:
36:c7:97:07:8c:18:ca:92:06:18:0b:4c:af:e2:10:
4e:04:f8:7f:15:ae:92:b9:4f:b1:c1:aa:36:ef:45:
a7:fc:45:3f:ce:56:33:af:13:13:f5:90:1f:e6:f8:
a1:cc:4a:4f:7a:10:3a:4c:27:3e:b0:bc:11:d9:44:
be:a8:bf:c0:f8:08:f0:db:6d:45:5a:c1:78:95:2a:
d0:a5:56:3c:32:d3:8d:3e:56:55:b8:b4:6f:1a:48:
45:e1:1a:b7:7d:75:dc:54:14:00:92:a4:65:48:e1:
72:d4:16:07:47:b0:b4:aa:ba:de:2e:71:a3:f5:47:
69:c7:9b:1b:09:9e:bf:ac:b3:55:da:5c:8d:5d:47:
6c:61:5f:21:1d:8d:3c:04:c7:d1:47:48:0d:0a:3f:
cc:15:2e:2f:11:0f:4f:77:c6:ee:7f:cc:08:e3:fb:
65:22:f2:2f:a5:13:bb:26:79:b1:86:ab:58:50:9e:
15:5c:d0:b9:59:67:e8:29:54:cc:56:db:78:ad:d7:
29:4e:29:e8:ea:ef:42:79:21:47:c5:89:34:4b:05:
ec:2b:59:13:75:65:77:c3:80:08:f8:43:85:ec:35:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:E1:76:DF:09:5A:62:EE:88:EB:4D:AD:79:A3:43:02:44:15:1E
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ee:2b:b3:5e:14:e8:6d:a5:d9:38:b3:a3:5d:e9:3e:47:da:
75:b5:68:dd:60:72:f1:ea:0b:72:e8:6e:6f:14:38:a2:1b:4c:
d4:11:67:5d:f0:f2:e5:a6:29:7e:26:f1:8c:0d:26:5a:fd:72:
36:74:cb:6c:15:fd:70:24:8f:94:89:0b:ff:06:01:68:e2:f3:
f9:b7:e0:68:62:5d:31:06:4c:4b:79:a2:9a:71:d7:bd:6a:76:
ca:8a:58:8f:76:28:a3:ea:ee:c4:e4:c6:fc:40:32:0d:7d:d0:
08:dc:c7:44:48:72:dd:e8:d7:79:10:f1:8e:23:22:1f:30:aa:
f8:cc:69:06:77:67:5f:7c:e8:dc:63:78:5b:8a:a6:7d:ce:8b:
33:31:e6:bb:f1:8f:ab:13:6d:c3:d5:68:b8:76:de:7e:9e:64:
58:55:8e:93:e5:ff:ce:55:ab:9d:88:9d:af:c6:64:e5:ff:03:
14:9d:ad:77:37:df:6d:76:9a:b4:7b:44:ea:9b:5b:3d:26:28:
a6:03:b1:b2:69:c7:ad:97:5d:8d:d3:94:73:86:d2:b2:92:5b:
6f:73:68:4b:8a:dd:a3:c2:ba:a1:a2:e3:bc:f2:c4:fd:7a:c1:
d2:fc:55:de:84:d3:4b:37:ae:d8:9b:6d:ab:09:c9:4f:f0:c5:
22:00:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:38 2025 by rpki-client