Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json)
Hash identifier: EQq3BR/tcD6lsDbucRmUMNa38xklDFn4BYVei2CG0/k=
Subject key identifier: 66:8C:C4:02:22:08:5A:B5:23:D5:64:2B:08:C8:DE:DB:BF:00:F0:8D
Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Certificate serial: 0194BD85849F88AA5D806A878BED1B58B148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
Manifest number: 01DB
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: /6uEtNCMTkDHAMWFzbCMK/VNz1+KzVbhMAeLOQDOr5U=)
2: Zalmb79lgnJ8ZqrgJMNHmIB0_a8.roa (hash: qT5QBRK21+1uxjdCx9gW03qYws/IDIrgYu8jrzg9fD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:84:9f:88:aa:5d:80:6a:87:8b:ed:1b:58:b1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=668cc40222085ab523d5642b08c8dedbbf00f08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ed:6c:fb:c6:f5:39:f0:40:01:5c:3c:02:eb:
57:b0:08:89:e9:99:f9:45:82:08:bf:49:dd:cc:87:
65:31:59:62:ac:3d:73:f2:1d:04:47:30:1e:f1:6a:
05:55:e2:0a:7d:11:c6:65:0d:19:18:07:d7:80:73:
bd:3e:a5:04:7f:4d:cf:dc:fb:5a:97:be:93:64:94:
33:29:ab:cb:ad:d7:53:1a:4c:0f:d6:a0:f7:5d:59:
b7:87:ac:b0:95:ac:84:70:59:3f:ec:de:5c:96:6e:
44:27:e5:28:f8:08:bb:f9:0e:f8:12:ee:e7:62:de:
1a:b3:95:d9:d8:0e:a8:e2:5e:42:35:31:38:e7:67:
91:70:9a:ae:65:d8:55:75:d4:ef:db:eb:31:bb:3a:
3c:b8:d0:b2:7c:71:28:1b:ad:2e:82:be:2d:19:3c:
6d:df:68:d1:2b:0a:37:07:b2:4f:30:63:d6:e3:b3:
77:ee:bd:c0:db:91:1b:eb:84:77:f7:f8:ea:0a:0a:
89:81:8b:c3:7e:18:2d:8c:58:e5:29:ee:d7:6d:84:
e3:66:4a:c9:5e:d1:07:6d:83:31:2b:72:f0:15:17:
b2:b8:74:b3:b0:6b:67:d2:5c:b4:ba:b3:f9:21:77:
75:cd:8b:c4:dc:55:d7:a4:5f:3e:52:0c:48:ad:71:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:C4:02:22:08:5A:B5:23:D5:64:2B:08:C8:DE:DB:BF:00:F0:8D
X509v3 Authority Key Identifier:
keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:53:f7:84:ac:eb:2b:f9:fa:34:7e:ca:11:32:7b:35:e9:2b:
64:cf:36:f5:27:64:09:3e:5c:f6:64:da:41:a9:18:25:60:97:
68:27:81:82:80:32:4d:48:f8:f5:cf:d1:84:30:cc:45:b7:09:
ed:43:fa:a8:d0:58:10:c0:6b:cd:d2:04:38:bd:0d:01:86:fe:
47:27:24:4e:da:f3:dc:93:5a:92:c4:9e:d0:87:2f:1f:16:9b:
2e:cf:60:f9:05:c9:df:c7:1b:c0:50:e9:62:01:12:f9:3b:b3:
f2:94:1f:2d:3f:7e:4d:52:1d:93:dd:bc:5a:00:68:f9:7d:58:
ce:ba:87:b7:a5:eb:9f:04:7a:5b:7f:14:93:f6:f4:ed:df:32:
d1:89:1e:18:be:6e:b1:fd:86:f4:4c:a5:fe:a8:44:7b:68:60:
5e:13:b9:db:0b:f0:d0:c3:fd:64:ba:9d:ea:b7:da:e7:21:56:
62:2e:a3:1a:18:05:0b:92:83:b2:47:90:f9:3d:1d:74:39:30:
df:e1:f9:53:0e:79:87:3d:23:7c:ca:6b:ff:a4:e0:5f:25:0a:
da:0c:12:71:5b:09:be:1f:d5:15:09:97:b8:31:e3:f5:58:27:
ae:3f:36:04:bf:b3:78:fa:9e:49:9a:a4:c4:99:e2:84:57:63:
4f:b6:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:09 2025 by rpki-client