Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: Jllz4BDp5DZtd9xETSDwHPI1mk9gp0O8Vdk2eB2OUTc=
Subject key identifier: ED:DC:30:47:F8:F0:E5:0B:AA:6D:D3:10:AE:8C:99:B7:43:13:6C:76
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 0194BCE09BD73F5652D71EF739845DE9C25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 09DC
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: 4xjVWM2eO/pKinmAfC7udULrWN7Ppi2Inf0tQbHwUD0=)
2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:d7:3f:56:52:d7:1e:f7:39:84:5d:e9:c2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=eddc3047f8f0e50baa6dd310ae8c99b743136c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:3f:a1:7d:46:9b:9a:39:d0:86:10:26:2a:
f3:ce:4f:f7:c4:fd:2e:32:70:6a:c8:29:be:b3:f8:
2a:de:0e:db:7e:6b:54:06:3f:45:33:8c:3d:69:22:
ed:bc:4f:a6:57:5e:a7:2f:37:cb:05:0b:c0:59:c0:
a7:06:a5:16:73:3a:60:a0:bc:40:3d:06:0f:88:74:
c1:41:79:bb:e9:4d:18:25:13:a5:e3:ed:d1:cb:7b:
df:47:4e:6d:c9:95:b3:a1:08:38:12:4d:97:e1:b1:
d1:7e:ae:ac:9e:29:e3:df:50:7c:1e:09:d1:f6:77:
77:61:ea:39:e3:3b:cd:cf:f9:26:ef:f6:56:b1:ff:
c0:bd:06:56:78:a0:41:df:47:68:05:0f:ec:5b:16:
8b:eb:f6:32:c7:e6:9a:01:e9:80:20:22:13:73:1d:
88:ad:07:18:00:24:57:81:7f:11:0b:c9:ad:aa:63:
83:4d:c7:8d:c1:74:75:90:e0:bd:27:56:49:67:eb:
d0:5b:08:5d:6e:9a:5e:b5:06:8f:ce:28:6f:c2:87:
6e:94:e6:1d:18:bc:26:45:6a:c5:cb:23:d6:d9:aa:
80:d5:a5:f5:72:77:69:92:53:94:23:c3:d2:c2:ff:
bc:57:b6:db:81:4d:0d:1b:12:ec:e3:2c:8d:3a:79:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:30:47:F8:F0:E5:0B:AA:6D:D3:10:AE:8C:99:B7:43:13:6C:76
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:03:ac:01:0c:82:21:72:0e:5e:88:7a:b2:b8:b5:dc:f6:f4:
f1:e5:eb:a7:45:3d:31:c1:dc:59:55:b4:0d:dc:b5:1e:fd:53:
d4:c7:5d:e1:4a:dc:e6:ee:ad:e1:ec:b8:db:18:4d:80:4b:a7:
2c:f5:ce:1b:1b:ed:3d:1f:60:0e:ba:2e:9f:c5:be:46:51:2f:
42:2c:2c:58:56:4f:3d:94:f0:00:e5:9c:65:56:a1:cc:2f:20:
30:f6:07:2e:7b:42:c9:f1:10:a1:10:6d:ea:bb:82:06:c2:e6:
ae:10:1c:fa:14:9e:b1:0c:7e:9f:90:42:dc:38:22:c7:93:f8:
f2:26:d5:7b:76:8c:4f:86:2b:26:ca:9e:9d:eb:17:e3:d9:28:
9c:23:8d:37:1d:c5:39:2c:28:82:d1:26:3b:99:2e:ba:d7:ae:
b5:8a:94:10:5d:45:68:ca:13:ad:3f:85:29:68:31:6a:bc:be:
53:2a:76:a3:61:33:b6:0f:a7:be:1a:b4:5e:71:d0:81:1c:5c:
ea:20:3e:3c:bc:e2:c9:2c:e4:b9:c5:8c:2b:3f:f7:a0:88:2b:
1e:04:18:e7:2f:7f:fe:c9:06:f0:1f:0f:4e:9e:f4:2f:5e:c2:
03:6f:14:05:a6:fb:f6:2f:3b:fc:68:23:44:38:cf:86:bb:2d:
3a:32:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:46 2025 by rpki-client