Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: dBUYfnzDwX9HXAv3MKOZZFmvrUocyFGAZnkOeDHOkSw=
Subject key identifier: 29:A3:57:36:57:43:D9:BF:62:42:D7:6D:EA:19:F5:C8:81:8A:F6:52
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 0194BBCE93337F40985577881B715CEA9929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: wOseQL6dM6QmkRQaiILjI6np8C4YlSMfJf/vzRWtiQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:93:33:7f:40:98:55:77:88:1b:71:5c:ea:99:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=29a357365743d9bf6242d76dea19f5c8818af652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2c:d5:43:82:e0:4e:f4:80:2e:38:a3:b3:d1:
62:4d:48:2a:7c:8c:2d:c6:36:ef:3c:13:a5:53:e7:
c7:b8:8f:c2:9b:73:80:86:ba:83:7f:30:f8:e1:97:
d1:bf:6a:cb:a9:20:88:02:57:11:f0:58:99:bc:bb:
3c:fe:75:fb:f0:c1:9c:ec:db:64:cb:c4:f1:78:52:
7f:4d:6f:50:81:2c:4f:64:62:ae:39:50:e2:a2:d2:
2a:94:27:dd:ea:d6:47:e5:96:e3:8c:2f:78:bf:70:
84:16:2b:36:1d:4c:e9:a4:b4:8d:2c:fa:0d:fd:e1:
1d:b3:bc:27:52:fb:50:07:b6:c5:42:07:27:a0:f5:
ff:27:fc:fa:d6:1d:90:53:c2:b0:43:f2:97:72:ac:
81:7c:b0:58:10:70:f5:58:75:83:73:b3:75:f7:03:
c9:40:26:c3:49:5e:f5:da:22:a7:de:19:61:9e:73:
0d:af:85:d5:88:d5:2e:8d:84:a1:7d:69:ed:06:66:
91:fd:e2:b0:8a:ac:c8:82:2c:dc:c8:4d:af:04:0a:
9e:3a:32:48:ca:85:d2:a3:69:5f:0e:d7:43:41:df:
b3:be:f5:f4:49:ff:a7:dc:90:a9:0b:e9:af:a6:aa:
67:19:c9:1e:18:1d:bf:a6:bd:53:9f:af:d3:3b:57:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:57:36:57:43:D9:BF:62:42:D7:6D:EA:19:F5:C8:81:8A:F6:52
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:18:9e:a0:e9:21:e5:8e:85:90:77:ce:e9:c0:d8:a8:6e:cb:
b4:e6:20:da:f3:25:d6:38:2e:8a:6a:8b:be:0d:cb:66:c7:a4:
f0:50:85:15:27:26:97:fc:dd:bf:55:6a:fb:a7:43:f2:21:8b:
48:e8:76:de:b5:3a:f1:2c:98:9f:43:67:27:c4:cb:36:33:93:
3c:d9:dd:d4:cd:18:94:ab:25:2f:29:c0:23:6c:28:1a:45:a3:
d7:ad:a3:80:eb:75:54:7c:9b:5b:79:7d:49:9e:02:cd:fd:4f:
df:66:7d:92:fe:1f:26:3a:98:b9:59:3c:8a:71:2d:d2:c4:a8:
49:48:93:76:20:b4:7d:ae:5e:b0:6c:f8:a7:5e:6b:b8:56:17:
0d:97:eb:30:e1:d1:59:d7:02:15:48:ff:26:71:02:08:3e:0f:
08:59:ce:b9:2c:e9:27:60:2b:98:b2:70:25:ad:94:b8:1e:d9:
03:dc:05:0d:81:a7:08:b9:38:ce:1a:e0:cd:7e:04:33:4d:61:
d5:ab:29:7a:b3:9c:53:96:f9:9a:26:fb:e3:cb:ce:76:b8:ac:
f8:13:59:70:22:44:51:a6:6d:fa:96:e2:0f:bc:e1:c2:64:20:
61:86:47:bc:4d:46:ab:b0:ff:76:a4:65:9e:a4:96:de:98:37:
a4:60:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:23 2025 by rpki-client