Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
File: xGn-PYgsk-OOi2ooajF33Bfpmsc.mft (raw, json)
Hash identifier: aNfvnUrPsgu3dyVAxtmZ5NRfk31MJdOI92n8bXyNzrQ=
Subject key identifier: 13:49:60:98:CA:D8:80:F3:E6:5C:9B:FF:A9:BB:03:39:36:56:B7:F4
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 0194BC3C51C71BC9CE14C362524C15D4607B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa (hash: pUBA00I+CQC2RPjmIddeqkkbXGoBJUyoSnMxqvr2Gas=)
2: VWhDL_pbFyyRh5F_p1365369fw8.roa (hash: h0UGnV1yT7TAR4sgEMb7SSbuBaNRRDcOsgJUpZU75gM=)
3: eStVA852783cSRla3cS6Sa73nTo.roa (hash: hjwJSk0hM/n7mjZhOiCDKrp/IiuwE5tJF1ttaMrAUdQ=)
4: mz6tpSTyWG1tpsywf2xFprKsdgk.roa (hash: TcXisvKqSL089bUIJMzgiUZfK9JnlvU+0pDp8FZCWe4=)
5: xGn-PYgsk-OOi2ooajF33Bfpmsc.crl (hash: 7IYcBC5hoVgWSjj7VC4HSHqjskuBeMstyDUq/smIXew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:c7:1b:c9:ce:14:c3:62:52:4c:15:d4:60:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=13496098cad880f3e65c9bffa9bb03393656b7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:82:6a:45:5c:ee:a9:42:19:94:bc:d5:35:
1b:bf:dc:23:37:18:a3:a4:be:a5:cb:67:cb:8f:71:
97:42:e3:e9:10:a2:19:6f:f9:ac:90:9c:7a:e3:df:
51:7e:fa:b9:cc:0d:d0:2c:b2:f4:17:f4:2e:33:39:
47:06:73:66:9f:5e:88:f3:5c:61:54:c6:ae:4d:fd:
1a:af:47:3c:3a:f3:af:b4:a9:16:9c:15:b5:0e:a7:
0e:a9:f9:e5:0d:db:e7:a3:35:a1:09:3a:ba:44:6a:
f4:18:74:73:18:33:43:3b:d8:4f:53:3b:01:b2:6c:
e4:0c:b1:b3:0c:91:ec:0e:31:f8:b9:d4:0f:44:73:
f4:0c:e9:fe:92:c7:ce:72:f7:66:1d:d4:f9:85:28:
79:03:0c:d1:d3:46:7c:a3:c7:a3:62:90:3f:a2:bf:
fe:82:65:26:3e:69:bd:dc:aa:47:9c:0c:e3:52:08:
d2:a8:be:7d:60:d7:d4:26:0d:d1:03:c7:1b:3f:33:
ad:52:58:60:88:ec:4e:ac:47:16:27:94:73:9c:4e:
87:24:74:42:b4:83:f6:8b:ad:bb:0c:5b:c4:6f:6a:
4a:7b:d1:ce:ef:13:bb:3c:f0:08:08:df:ce:78:79:
b0:a6:88:76:82:ed:cd:7d:65:6c:d0:6e:62:35:00:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:60:98:CA:D8:80:F3:E6:5C:9B:FF:A9:BB:03:39:36:56:B7:F4
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cb:3e:56:c5:4e:ed:b4:ea:8c:1f:69:94:d1:c4:1d:a5:5e:
69:3b:28:a8:32:80:e4:5d:bb:0c:3b:de:22:27:a3:1c:ba:42:
0f:be:aa:5b:b6:76:70:d6:3c:79:e9:30:6f:52:43:e8:b4:6b:
94:d9:2b:3b:87:9f:73:6a:12:b2:c6:76:1b:53:94:ce:46:f9:
01:34:f1:c5:a3:d3:24:0f:14:55:b1:0d:d8:56:4e:b3:42:76:
8f:31:76:cf:91:81:9a:9c:36:95:7d:24:2c:3c:dd:71:7a:21:
c5:12:62:df:9a:d5:c3:93:51:8f:ea:2b:fd:a1:17:47:03:8d:
40:0a:d1:cb:cb:5b:c4:e8:dd:44:d5:4b:9f:3c:9e:b2:b0:f6:
85:80:ab:83:b1:e5:c0:81:5c:ed:62:5c:53:05:ec:cb:f1:d0:
7f:46:51:cc:fb:40:ef:dc:7e:38:78:4f:c8:91:64:a1:b5:25:
7d:38:97:16:f8:d9:76:c2:a9:47:dd:79:5a:ce:ba:5c:67:11:
3a:9a:7c:9c:2d:bb:17:51:0f:91:59:79:8a:ff:11:2c:45:ab:
cb:96:d0:13:66:03:79:84:6c:f9:cb:7e:fe:56:11:b5:75:d6:
fe:b1:91:0b:22:5f:db:49:a6:5a:1a:47:92:1d:a0:ac:05:17:
a1:16:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:26:59 2025 by rpki-client