Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft
File: XHkaG6CbnU01jvBare1_DoXogbY.mft (raw, json)
Hash identifier: EXJ4iiRzQxDM0Ax+yxl7JnXgy9LHhTCVtyhmR15voiI=
Subject key identifier: F8:40:6E:92:20:E6:8F:D0:E6:2B:1A:E1:45:26:A9:15:CA:8D:9A:C2
Authority key identifier: 5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6
Certificate issuer: /CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6
Certificate serial: 0194BD4EBAA126A2DB983CB8EADBB3AAB56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft
Manifest number: 0967
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: XHkaG6CbnU01jvBare1_DoXogbY.crl (hash: ven6sciGSe+VzkdqGIHlZh8DyNJxy4xrlI+jgyKyp9M=)
2: _GYD1AJUDNposAkJpRDfG9xq6dk.roa (hash: afY5Qh0XccEeUiEofkFyRBQd+JnAG3mTgUzmW0se7YQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ba:a1:26:a2:db:98:3c:b8:ea:db:b3:aa:b5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=f8406e9220e68fd0e62b1ae14526a915ca8d9ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ed:f0:15:44:dd:e7:b7:09:93:34:7b:7d:8d:
97:27:8d:93:20:b8:71:cd:99:46:8e:96:98:37:15:
9a:44:de:d7:b9:97:3e:86:80:2f:46:99:f5:25:94:
d6:24:04:94:ad:64:63:73:25:68:c8:f5:ad:07:81:
24:7b:2c:17:79:75:11:31:32:21:6f:a4:ff:2d:49:
c9:ee:8f:91:68:13:e2:b6:f5:0e:cc:7f:08:da:42:
54:26:aa:d6:cb:4d:42:ed:5b:5e:6f:70:69:d7:7c:
b3:ae:6e:84:d9:1f:bd:a7:e8:98:33:2c:59:61:12:
f6:dc:25:e1:2e:b3:22:4b:d6:3a:fa:f0:56:7f:7c:
f5:d9:86:cb:0a:3e:6a:6d:1b:e9:de:f8:5d:90:4f:
6a:30:8b:0f:75:fe:07:19:47:51:c6:2d:1a:1a:c6:
c1:77:83:3a:31:f8:6e:0d:bd:d6:43:d5:59:2e:1a:
ca:01:ed:e3:0f:5b:e6:55:81:ec:c7:5f:8b:d1:d0:
ca:71:04:07:09:21:28:e2:bf:80:54:08:f6:cb:34:
bd:c3:31:12:43:3f:bf:69:59:f0:c8:97:db:fd:fa:
7f:5f:a3:50:77:f7:b2:ad:52:2b:06:92:a2:58:7a:
aa:ff:20:52:eb:4f:70:aa:42:9b:1b:c5:8d:99:ad:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:6E:92:20:E6:8F:D0:E6:2B:1A:E1:45:26:A9:15:CA:8D:9A:C2
X509v3 Authority Key Identifier:
keyid:5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cf:87:06:80:b2:5a:b3:c0:bf:f0:f5:eb:5f:3a:c5:e4:bc:
c7:80:72:19:f8:f7:32:48:c5:8d:cf:29:4e:24:63:f7:fb:a3:
8e:3b:d2:60:35:42:38:9d:38:8e:3d:d9:f0:3f:4f:43:6a:46:
46:da:c2:2a:9b:db:1f:26:3b:fe:84:f8:66:82:04:7f:6f:47:
3c:5d:4a:83:7d:19:c2:2c:b4:c6:de:ea:ac:77:5f:11:77:39:
f5:50:30:84:6c:22:93:3f:c5:3d:81:65:f7:58:5f:8a:93:25:
de:e4:5d:a8:b5:68:0c:7d:b7:3b:d4:07:4e:60:86:13:e2:c2:
42:2b:cb:ce:08:2d:28:66:eb:64:cd:15:04:90:03:d4:71:a3:
fc:c6:86:0a:a5:4f:49:76:6b:99:b3:94:41:e5:a3:0d:2d:7e:
32:a0:1f:5b:f4:3d:2d:4f:fd:da:14:60:7e:67:fd:a1:14:67:
92:cb:37:c2:63:15:1b:d9:d5:20:e6:35:90:71:d6:ce:ee:8c:
b3:68:9d:6d:24:e8:91:71:2c:80:06:99:64:d8:f3:98:cf:62:
1f:55:10:66:91:4d:b1:af:ad:e3:1c:b7:8b:eb:53:7e:0d:d4:
64:2d:72:22:ab:60:ab:26:26:c3:41:67:f4:b6:05:95:73:4b:
13:e0:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:09 2025 by rpki-client