Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: zyuJ6UjBN5CdRpfupGJK013a01mVoxjP0A+1A9t1Q38=
Subject key identifier: 2F:2E:B8:B0:75:1E:D7:85:FC:35:87:F8:16:DF:0F:31:89:BA:48:44
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 0194BCAA3676C8300E44DAF0D3454ADC1BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 0D57
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: m3veQz4FkFNdHIZs6G6utxCVq44dEGOpDrs8kvwaddg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:36:76:c8:30:0e:44:da:f0:d3:45:4a:dc:1b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=2f2eb8b0751ed785fc3587f816df0f3189ba4844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:62:f3:2a:db:30:97:46:e3:c4:7b:b5:a5:
50:96:c8:a1:b8:32:80:9c:ab:79:1b:b0:39:33:69:
a5:b8:5f:82:77:53:fa:45:c8:66:8b:1a:f2:5b:cc:
60:ce:ed:9c:95:e3:54:81:d4:76:45:99:1a:4b:dd:
ea:9b:ef:17:6f:0d:e4:dc:64:8d:16:4f:10:ad:fb:
c2:a8:3c:8c:50:14:36:0d:12:6d:f7:25:ef:2c:80:
30:fc:c4:70:77:43:86:0e:51:da:fa:f9:db:eb:2e:
a8:69:57:e9:8e:bd:1e:29:55:2d:22:09:18:05:d6:
ce:c1:80:54:42:bf:61:c1:ba:83:1e:1a:0d:a5:2e:
79:b4:17:41:d6:df:7f:bf:84:76:28:85:0f:23:9c:
37:98:06:3c:49:e6:ca:d5:b4:21:ed:97:d7:87:a1:
77:3c:23:d1:2a:dc:80:6b:a3:26:2f:9f:5a:91:3d:
7b:48:0e:22:03:59:1d:92:21:6d:dc:76:43:6f:e0:
78:66:cd:e1:d3:0d:ea:79:1b:60:15:dd:c6:36:83:
52:2c:77:a9:f8:b8:77:16:78:ae:2b:d4:1c:df:91:
0b:6a:d4:9b:b5:05:cc:95:0a:37:1d:94:46:7b:20:
ea:bb:d8:7f:07:82:26:77:18:06:3d:c3:65:ad:f9:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:B8:B0:75:1E:D7:85:FC:35:87:F8:16:DF:0F:31:89:BA:48:44
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c8:71:93:c6:cc:fc:cb:7f:d7:54:84:a6:ee:37:95:77:5e:
f1:2a:61:46:30:c4:ca:80:2d:55:9d:bd:8c:5d:5c:bd:66:d3:
37:61:0b:5d:a1:a4:53:11:3c:72:66:b4:f2:09:3e:e7:38:6d:
56:2f:d7:d5:dc:4b:d5:e5:7a:45:4a:ce:d6:2e:cd:26:b0:58:
15:3b:35:28:91:ba:6d:a9:f9:03:e0:b4:2a:ed:d6:40:37:94:
1d:29:87:5d:6f:d2:31:0b:b7:77:d0:77:72:9f:61:11:5b:83:
bc:de:44:b1:fd:0a:8d:ac:7e:12:04:ac:df:7a:45:e9:75:cd:
43:ac:a8:57:cd:4a:0f:e6:06:03:4c:31:d2:e0:2c:86:af:28:
61:67:15:b0:ab:58:c3:02:6f:c9:33:23:4b:dd:63:4f:83:6a:
e6:62:e2:cd:bf:a4:0b:6c:d9:12:57:a3:48:f7:66:e6:0c:11:
15:fd:db:b0:12:2f:fe:a8:76:d4:27:22:ff:2b:78:d9:1a:c7:
8f:67:a2:19:c2:36:cf:45:5b:8f:60:c3:a1:a6:13:89:de:17:
17:e8:47:34:eb:e8:63:8d:52:cc:59:db:99:b8:e1:a7:76:59:
df:cf:1e:1a:cf:a1:c7:a9:7d:fc:f0:1e:60:d9:3d:bc:d2:0b:
6a:dc:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:28 2025 by rpki-client