Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File: XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier: CTjwcfFlAzaWxUOFPG5JO15UIOaEN6T1v76r6n5cmDI=
Subject key identifier: 34:D7:27:94:A3:85:42:4E:80:DB:07:B0:BB:C6:1F:B7:4A:3C:37:63
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 0194BD176A7D071B51F76FC56F58EC3E0DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number: 0DA2
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (hash: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=)
2: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (hash: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=)
3: PDXR81HWxc4LmZz0o4rlzuBkq-k.roa (hash: pGbVknYLItFYYXOLGoW5IyrgdhcVtFImvBhB0wZtkqs=)
4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: bLh5tH2lPfvM08NdSnO42fhTdIp7Cf6yFF3HOPuGXdg=)
5: zWVlVmkEB7rMguHla-ob06L-eJg.roa (hash: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:7d:07:1b:51:f7:6f:c5:6f:58:ec:3e:0d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=34d72794a385424e80db07b0bbc61fb74a3c3763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:1e:ec:53:4c:12:bd:a2:ef:a3:15:36:60:
4e:cd:55:ea:3c:a9:a8:40:ca:89:ad:bc:e9:85:c9:
86:3e:ba:5d:2d:34:d8:17:3d:33:7e:a4:cb:3d:7c:
84:b1:62:5b:60:38:10:e6:6b:ba:26:51:78:0e:31:
ab:aa:29:6b:6f:65:d2:61:1a:47:7f:3e:c9:0b:50:
c1:8b:48:e6:57:c6:34:45:b7:ec:09:0c:1f:d4:34:
49:55:94:86:35:5b:99:b2:90:65:55:9b:3c:64:9c:
8e:df:70:dc:bb:fa:4e:ca:4f:2f:75:44:50:66:f0:
c6:da:2c:47:72:58:34:f8:6b:80:57:bf:32:73:a7:
6e:87:ee:e5:a2:8e:29:67:79:ed:10:1a:ee:14:4a:
65:67:4c:bc:73:4e:4d:f7:22:97:93:00:09:77:6e:
c1:04:3b:24:2b:90:de:3f:ce:b5:1a:29:cd:87:88:
01:e2:cd:73:37:fc:ab:b7:44:59:c2:f2:e1:30:0b:
1a:f0:42:cc:4a:0f:18:c0:bf:93:6f:b8:5f:21:1f:
43:c3:b5:32:a5:a8:48:92:62:b4:3a:73:54:21:8d:
5d:70:fb:a2:1a:49:ff:59:fa:f9:cc:1f:ff:81:b3:
5c:5a:41:97:f0:5a:ae:c5:7f:aa:17:ac:d2:d9:63:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:27:94:A3:85:42:4E:80:DB:07:B0:BB:C6:1F:B7:4A:3C:37:63
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:9a:cc:50:f6:20:df:08:8e:6a:17:eb:08:c8:4e:58:b4:
8f:b6:23:42:3a:94:4c:b2:33:3b:4c:8a:60:15:28:db:0b:86:
51:1f:a0:d9:c2:cb:9d:9a:ae:f8:c5:16:47:e5:b4:24:91:78:
d1:2b:03:e9:c7:7b:b8:5b:1d:53:c6:06:42:2d:f8:6c:50:3c:
43:81:6b:61:69:16:16:93:0d:0e:e1:b7:ba:c5:b9:a3:8e:f4:
66:c8:07:f6:d5:17:10:62:86:02:31:5d:96:62:c9:3b:2a:77:
99:fb:a3:cc:66:78:b9:5b:be:64:06:52:e7:11:b6:79:47:a8:
0f:74:d9:cd:10:02:7b:18:df:4e:d7:83:c5:5b:57:b4:d1:8a:
57:c2:3c:67:26:aa:c0:35:49:5a:e0:88:35:9c:7b:d6:6d:c4:
9c:3e:8d:19:51:47:91:06:1e:c8:d0:47:82:48:7e:e7:d7:49:
73:9b:4c:32:b0:cb:10:18:15:94:4b:b4:3e:05:63:19:94:27:
8a:74:35:f7:5b:37:e7:01:30:7f:40:0b:20:37:ed:41:b0:14:
48:52:30:f8:c6:d0:63:31:65:97:fb:a1:b7:b0:11:da:1e:b8:
74:8f:04:33:bf:71:f7:a7:01:ef:71:05:a3:05:60:03:b0:3a:
94:c9:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:57 2025 by rpki-client