Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: bBY4N4+bzHDmy+5+yNqagyMh9wpVCmutAKb/sqge5HE=
Subject key identifier: 29:A5:87:3D:BF:32:CC:A0:A6:DA:9E:6E:5F:49:33:FD:BD:23:37:88
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 0194BD17ABCB8D8FB546E2C574B21877A11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 139B
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: dDA9U5nlH7LyV/yPI7b5Od3ThHRrbJSy9LXS97uYYec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:cb:8d:8f:b5:46:e2:c5:74:b2:18:77:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=29a5873dbf32cca0a6da9e6e5f4933fdbd233788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:69:40:15:56:ba:ba:20:d7:cd:20:a0:f0:
a3:c6:7e:d7:64:82:a7:58:a3:bf:c7:6b:97:96:7f:
07:e5:49:d0:b2:9a:0d:ff:d9:8a:ea:22:1c:af:b0:
ba:23:00:9f:4a:ac:b2:d3:1b:50:02:24:b7:fc:e4:
10:05:d2:85:cb:17:9d:ac:89:9a:ea:1b:27:4b:eb:
0f:fa:b1:79:09:85:92:16:00:cd:96:76:6e:50:cb:
f7:a2:b0:a5:b4:3c:19:d8:47:17:fc:98:9b:13:09:
5e:fd:b6:28:30:45:38:77:80:7b:de:57:a9:6c:44:
d1:5a:42:32:2c:88:1c:ba:55:b8:89:13:ff:72:9b:
81:58:89:e5:70:b6:9f:bd:87:ce:c3:52:39:42:59:
e9:1f:bb:fd:4d:8c:6b:d5:ab:a3:10:89:47:62:97:
a4:a8:ae:d2:2f:fa:9f:05:df:65:a9:6c:8c:29:80:
3c:ba:0f:37:16:9a:02:c8:1a:9e:e4:f7:66:b0:97:
be:33:26:bc:67:1c:43:06:a2:ba:c7:e0:46:da:4e:
5f:e5:89:87:68:13:e2:c6:2e:b6:0c:a7:a2:3b:d0:
2b:8c:d4:3f:e9:be:ae:ce:fc:04:5a:33:fc:f4:0a:
31:a4:47:fe:e9:a4:6a:ab:3e:41:b5:74:18:9f:c6:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A5:87:3D:BF:32:CC:A0:A6:DA:9E:6E:5F:49:33:FD:BD:23:37:88
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b5:bc:77:af:40:fe:5b:00:02:a3:8c:eb:8e:6c:dd:5a:4d:
f7:23:79:69:c2:7a:e0:e7:da:32:e1:d2:9e:c8:fd:43:59:07:
bf:5f:82:b8:e6:9d:60:5b:5a:9c:17:37:5f:91:85:66:e2:66:
56:1a:00:40:8a:63:39:20:be:30:22:59:1d:40:f3:d8:9a:56:
ae:8d:f3:ab:28:bb:d1:95:8f:98:f3:b6:d4:af:42:ef:72:ae:
bb:7a:ac:63:a2:46:4a:7a:ce:02:84:66:2b:4d:be:d9:c4:23:
8d:65:7e:c3:05:d2:1e:9e:56:d2:10:e9:d3:fe:b3:0a:1e:79:
8e:9d:ed:a1:e2:18:37:ba:eb:93:0e:cd:82:40:41:32:6e:db:
05:ba:e2:31:85:60:aa:85:11:2c:49:a3:a4:1b:3a:61:a9:01:
ae:5d:6b:15:5e:a7:e7:c8:f6:a7:f0:a4:b4:fd:7f:c9:e3:ff:
bb:49:35:0b:5a:41:f1:c2:ed:5e:74:d7:3f:de:93:fa:cc:93:
7e:39:84:6c:72:a8:58:92:fb:2d:42:4b:de:79:51:34:e1:f4:
22:fb:e9:bd:c6:c5:c0:c6:41:da:ab:c3:19:29:53:2b:37:cb:
15:2a:54:a3:01:0f:9b:94:d5:3c:3e:77:85:fe:ba:c5:84:99:
7f:dd:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:01 2025 by rpki-client