Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File: xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier: s3qZgd9TRnC0y9phUx5eRXj7wcnwH19XANZehWWJnvo=
Subject key identifier: 88:95:81:F0:0F:53:31:6B:04:6E:42:57:7C:BC:CC:A7:62:07:DB:19
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer: /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial: 0194BC04C0C7D2555B67E4BF1EF00793935F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number: 118D
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: nB0wD2NbLIcgL4wuuaNReH2xdaw.roa (hash: PmwRmIsMv3KSkKaHz3D8VpJ1Kt0x35JTg65eBK0T3+k=)
2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: He/0SwvptVIc4SiDDAYBKoxxXrcrSCpxLmi4dPTsAeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c0:c7:d2:55:5b:67:e4:bf:1e:f0:07:93:93:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=889581f00f53316b046e42577cbccca76207db19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:39:24:96:7a:df:e2:8e:31:af:f8:f0:04:
1e:30:cd:07:bb:ef:27:8c:51:9c:f1:15:9a:aa:7b:
d0:99:f2:77:52:19:90:09:88:b6:fc:52:3d:23:db:
cd:1e:7e:d7:55:07:72:1d:6b:2e:db:10:8a:98:32:
b2:6a:b7:92:28:4f:c2:16:e4:74:39:70:91:15:4d:
da:5a:07:7e:78:d5:ed:18:24:c5:1c:d2:b3:15:5a:
b4:88:e0:3d:f8:5d:66:9d:f8:74:d1:29:e7:81:23:
45:db:97:44:34:7a:c6:89:af:16:fc:81:94:90:91:
be:b3:c4:bd:d3:e3:c4:f0:c7:9b:b0:d2:b4:02:86:
7d:e6:41:ce:9c:45:c3:39:38:cb:bf:01:3a:ed:a1:
a3:d8:51:9e:ef:fa:ac:4a:8c:56:6f:20:b5:3c:d1:
10:4e:2e:93:95:3e:a4:fc:48:e4:c8:a7:84:da:87:
71:45:e2:a4:63:bc:cf:a1:06:b0:3a:26:78:10:0f:
9c:92:49:1b:f4:9b:1c:b4:fb:5a:77:86:ae:81:65:
3a:97:25:31:70:6b:0d:20:a9:0c:3d:f0:91:7e:9d:
d6:e9:3a:80:00:a1:57:23:71:34:b8:31:0a:30:7b:
ef:65:58:27:5d:eb:17:1a:73:0f:32:1d:cb:d0:66:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:81:F0:0F:53:31:6B:04:6E:42:57:7C:BC:CC:A7:62:07:DB:19
X509v3 Authority Key Identifier:
keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:1b:73:7f:df:88:9f:9b:96:5b:c7:92:67:09:eb:88:be:
35:5b:25:7d:6d:93:60:54:92:ff:dc:d5:4c:c4:02:77:21:e0:
34:9e:88:30:b5:34:49:41:da:d7:67:9b:9c:0b:5b:69:44:f5:
e7:ef:53:4a:6e:39:19:48:fa:6b:20:7d:ae:a6:ac:ae:df:2d:
66:c8:54:ae:63:e9:35:f5:4b:77:31:ee:b0:2e:76:fb:02:2f:
9a:2d:ac:64:c9:ed:f4:2a:b7:1c:e9:aa:bb:48:e3:ee:85:79:
5a:ab:5e:d9:5f:e9:11:b2:c0:0f:1b:ee:a1:7e:4a:5a:85:35:
5c:a5:c3:39:87:86:5f:d9:18:59:18:3b:f0:58:86:36:5d:71:
25:0a:7a:7c:56:bb:ad:89:da:03:e1:9d:b5:89:93:4e:2a:ca:
76:1f:58:2f:32:b4:51:82:88:0a:86:ca:01:d2:61:c6:2a:4f:
9c:63:18:11:27:3c:c2:a8:90:26:05:01:4f:a7:41:d5:13:28:
dd:e0:09:9d:5e:f9:23:f3:ad:9c:17:67:18:a7:f5:86:f3:e8:
bb:0d:06:3c:ad:81:3b:71:6a:ae:36:32:94:89:7b:9e:71:59:
3e:7d:1f:3f:c5:e9:05:2d:0e:db:6a:bf:e6:c1:29:a4:9e:0f:
a6:10:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:04 2025 by rpki-client