Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: nY8biTdLmZ/n18wSKHoG++2g/nJ94spTBupBg2sg3MI=
Subject key identifier: 9E:5B:0F:6D:B9:14:2C:F6:FC:9E:21:DE:B4:AD:E9:DB:63:62:8F:14
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 0194BBCE636A8F065980D842F6285C671271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 124E
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa (hash: 5Mcf4NqGw75Ujcm8ujMV0dwvrhU39vCuPFd4mY9vPEw=)
2: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: ncfELbo2Qy9NrZleyQfl5TlRUx1zyrNPEBXSZSHTy90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:63:6a:8f:06:59:80:d8:42:f6:28:5c:67:12:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=9e5b0f6db9142cf6fc9e21deb4ade9db63628f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:f1:10:ab:5f:05:d0:42:94:a2:47:90:12:
68:4b:9b:37:b2:7b:3e:6c:01:3e:cc:40:6c:ad:f7:
b3:12:11:87:8f:4f:86:3f:99:cb:c0:eb:b4:16:15:
3e:c3:24:54:5f:a7:90:0e:ff:01:07:af:ab:26:8f:
9c:ec:81:7d:18:2c:e2:88:32:dd:ca:cd:ed:6e:98:
c8:8f:fb:9d:aa:da:ae:04:f7:42:de:8c:e1:99:94:
93:90:7c:e3:10:2e:2c:3e:7c:2d:ac:ca:3b:aa:23:
34:bd:05:b6:97:29:dd:b3:5a:3f:8b:a2:6b:43:aa:
a0:8c:7d:21:a9:07:63:0c:b5:70:4a:8e:a6:16:26:
15:d7:de:11:79:5a:b7:b8:fe:9c:5c:a9:18:96:97:
7b:1f:e9:88:29:3f:ed:c8:35:9b:b7:44:36:a3:1b:
3b:bc:6d:a7:0f:ca:43:c2:54:cf:fa:8f:96:69:19:
28:c4:47:d4:cf:ea:75:86:f1:5f:63:85:5c:5f:32:
be:7f:63:ed:24:9e:e2:80:af:71:f9:1e:06:f7:0f:
a7:98:29:a9:2f:6e:2c:62:5b:c3:dc:e1:e1:88:e5:
88:18:30:e5:16:87:ec:3f:f6:33:fe:3f:af:cc:1e:
cf:11:79:23:a3:85:06:c5:ea:9d:f9:17:1b:0f:5e:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5B:0F:6D:B9:14:2C:F6:FC:9E:21:DE:B4:AD:E9:DB:63:62:8F:14
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:30:1d:f4:b1:e2:a7:df:96:0b:3a:ba:48:4b:72:89:c9:92:
c2:a1:cc:7f:3d:17:a5:09:b3:28:b8:43:ca:05:4a:69:79:0f:
1f:4d:f9:7b:00:4c:8a:5b:99:b4:f3:b5:13:fb:74:c3:9a:82:
71:4c:d1:17:d0:d4:83:8a:93:87:a6:0e:23:c7:f5:37:55:30:
1a:de:d5:ce:1a:96:07:b2:70:ec:41:c4:c2:a5:83:b6:47:e0:
a2:ec:7a:38:91:75:53:90:5b:3c:93:07:46:57:5b:a4:30:02:
e5:31:de:31:19:3a:c0:60:06:6f:8b:ec:e1:81:ed:f4:30:6a:
41:94:de:32:d2:51:2c:0a:29:d7:c5:7f:59:c7:9c:af:ff:d8:
85:49:ba:58:6d:68:e2:d1:7f:50:39:fe:16:82:98:13:50:e9:
e0:92:c0:a9:38:d1:23:3c:1e:15:af:5e:3c:58:a0:80:5c:e7:
82:39:02:76:5b:4a:6a:0e:3f:6b:45:ed:a0:b5:a4:a8:77:aa:
6a:64:fb:86:01:fa:29:85:5a:9f:0d:24:70:14:f5:41:14:f4:
cf:f9:7f:ef:15:92:b3:ea:4a:d7:e3:0a:ca:df:8b:3a:bb:78:
0c:36:6b:7e:65:cd:b7:1a:e9:b5:de:2e:26:1b:cf:3a:7c:fc:
58:c6:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:01 2025 by rpki-client