Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: qSwKnftcWTASFKuoJOdi26TH7Mp9ujIBp8TUN03G2eg=
Subject key identifier: E0:18:23:53:48:3B:90:D9:AE:07:86:92:95:36:A5:FA:91:0A:3F:B3
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 0194BCE0765D9DF8AA64CC91E45051559D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: LszCarTJPdhDAMvDRUDBmtzO7YZJkAU6aL++3FY4DVw=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:76:5d:9d:f8:aa:64:cc:91:e4:50:51:55:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=e0182353483b90d9ae0786929536a5fa910a3fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:75:92:a1:6f:7b:de:4b:f1:f3:ac:85:92:
fb:17:48:21:fa:d8:09:0a:65:e3:d9:6b:85:c0:33:
f0:85:fa:93:17:c7:a3:b1:d2:dd:f2:af:45:61:37:
70:53:66:05:0c:17:a1:9f:cd:d6:ba:11:fc:01:be:
8d:ea:a2:a0:f2:83:24:d2:17:31:85:fa:47:dd:4d:
d5:0c:eb:93:6b:4e:09:b6:c1:cd:82:d2:5a:74:5d:
e4:cf:7b:fb:2c:81:c0:79:8f:66:78:07:ca:84:a1:
f5:26:f2:98:74:a4:af:f4:8e:6f:b2:ac:a1:08:9d:
6d:9b:96:25:61:04:35:17:5f:0a:07:3c:49:ec:c7:
81:7b:02:60:3d:bc:fb:19:b9:4f:fe:e8:33:97:49:
4a:e4:bf:fd:04:6f:03:f4:f1:72:7a:02:5a:54:a9:
3c:d2:bc:9b:d4:a4:1c:b9:45:a3:41:10:38:b6:86:
97:0a:9c:02:ca:e6:33:d1:c5:c6:39:a1:f7:66:75:
5b:7d:ca:e8:81:d4:4f:69:d3:d3:5c:f5:2f:5b:0f:
67:70:c1:75:33:02:f7:d0:12:ea:74:c4:db:97:61:
fd:c4:56:14:f4:9b:46:6a:4f:f4:0d:48:c9:62:90:
71:b5:e3:16:b7:a4:2c:d0:ad:04:c8:e6:37:af:8b:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:23:53:48:3B:90:D9:AE:07:86:92:95:36:A5:FA:91:0A:3F:B3
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2c:83:51:2f:06:ca:40:94:2e:1e:bb:6a:b0:7b:41:1a:07:
0b:ed:05:90:ad:92:47:10:08:a9:03:8c:c0:11:11:7e:38:23:
62:b7:9b:57:c2:9a:a0:65:46:c4:1f:7d:3f:8f:b2:4a:62:38:
d4:f6:5b:eb:de:da:5f:cb:30:d8:eb:e9:8c:44:69:54:2b:38:
76:42:00:d1:35:9b:68:9f:2d:f9:05:b9:08:e8:48:d7:a9:ef:
cf:35:7a:37:ab:ae:5c:ac:66:8d:0f:10:b4:4b:e6:f8:71:33:
15:fc:2d:b7:14:9e:df:ce:5c:f1:84:0a:c8:b3:39:4a:46:c5:
a3:f3:ff:7c:97:b8:18:4b:21:e5:b5:3e:53:16:7a:f9:5c:fb:
85:cd:bb:dc:46:cd:fb:96:08:70:0b:04:6a:79:12:4a:be:08:
21:03:68:f3:76:28:45:dc:73:cf:96:77:b5:37:b9:b4:19:b7:
71:52:6d:11:16:44:e0:33:aa:74:17:ff:ea:10:0d:29:2d:4e:
01:39:66:5f:43:51:0d:9d:03:97:52:84:38:01:2c:6b:1a:08:
38:ea:1d:e0:d5:88:07:1a:fb:d0:83:d5:d4:ca:6f:ad:d2:b3:
1a:31:f0:41:a4:1c:09:5a:f9:6a:f6:cc:ce:1c:65:e3:ab:5f:
f4:84:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:23:23 2025 by rpki-client