Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: xyas9loij6DNI9rSRvGD9U1jm2Vt+OKaEOWmJ5yMpNM=
Subject key identifier: 97:A9:68:79:56:78:F8:81:C1:D9:73:E4:61:77:79:48:36:A5:45:D8
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 0194BC3C375F04A1C5B83794781C312DEF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 45
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: N2aIqDnVJ66U1xZBaxmauDjobMAA8gUPr6yMw8DRf7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:37:5f:04:a1:c5:b8:37:94:78:1c:31:2d:ef:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=97a968795678f881c1d973e46177794836a545d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:d7:1f:3a:2b:19:bc:c5:47:ce:53:26:a9:
fb:9d:17:9c:35:fb:50:3d:8d:ad:92:3a:53:74:bb:
d0:ff:58:50:a8:aa:bc:10:94:5e:db:b1:50:a0:cb:
9b:47:4c:62:b1:a5:16:62:33:4e:f5:c0:62:50:0e:
d8:b4:91:37:10:99:99:55:c8:0a:a5:dc:e7:41:8d:
09:aa:90:7b:5a:a5:5b:4f:7c:fa:bc:00:f2:f3:76:
34:06:46:85:62:21:3f:68:ed:93:32:92:72:d5:db:
30:73:cc:50:10:7b:60:c9:7c:3b:2a:c5:b2:a1:2a:
d0:a6:db:95:bc:95:8c:4d:f1:a2:a6:ff:74:6e:88:
ea:89:db:ef:6c:cb:39:e6:a8:b6:d5:fb:22:7a:33:
fd:ce:83:8c:a1:05:4e:cf:29:8d:58:fa:e5:e3:ee:
8e:7e:e6:16:e4:f4:97:09:34:b3:5a:e3:d7:bb:31:
53:17:4a:82:04:fd:b9:51:54:24:69:3e:01:df:61:
e8:5b:d0:3e:4f:0d:5b:1f:e3:d3:f9:48:6e:87:63:
38:05:66:a8:55:3c:9a:cf:4d:8c:63:40:79:89:f2:
a9:41:bf:ab:6f:3d:33:b8:2c:8b:f7:61:42:e2:94:
f5:56:72:94:5a:b3:8d:16:e0:e0:df:be:21:a7:73:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:68:79:56:78:F8:81:C1:D9:73:E4:61:77:79:48:36:A5:45:D8
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3f:7a:07:c3:1d:5b:6a:5d:df:9b:ac:97:67:e7:7d:f7:ce:
ac:6b:4f:f3:11:36:6e:c2:de:ed:9a:64:95:6b:92:63:8c:52:
ad:92:82:6e:76:7c:42:b2:b8:05:d0:77:dd:4d:d1:85:65:52:
dc:34:10:0d:44:29:e8:42:0e:93:24:2c:63:61:e9:da:87:3b:
6d:7c:17:0d:1a:8f:45:21:45:18:36:a5:30:fc:bb:00:cf:0a:
43:b1:60:cb:a6:18:24:52:88:66:c9:85:a9:4e:09:e8:d3:62:
2d:f2:b5:4a:95:20:de:26:ec:90:80:d8:fd:4b:49:94:5f:7f:
ff:1c:c4:e4:b5:12:50:34:5e:5b:3b:01:1d:72:9c:e8:e0:3f:
7d:a8:b2:8e:9f:3b:9c:ea:3a:8c:19:0b:5c:25:78:a0:9f:cf:
72:29:22:53:bf:5f:96:0a:81:17:d4:1f:fb:5b:3a:ac:06:e9:
c9:48:e1:a1:81:9e:e7:75:e9:5a:8e:d8:ca:30:79:35:19:19:
b8:8b:51:f9:10:50:bd:b7:53:6b:0e:de:6f:17:e0:bc:b3:b3:
c2:12:01:72:50:8c:1b:5f:b9:35:c1:42:ad:41:04:32:1d:20:
6c:89:c1:e8:62:c0:09:ae:07:bc:42:28:36:17:4a:ea:b4:e3:
3d:9f:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:50 2025 by rpki-client