Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: E2bT6qAkjoI+Nf5RiXKvtffG878s2w/UOCk3ywYTNLY=
Subject key identifier: 08:56:3A:72:B1:D1:65:98:55:4E:88:12:49:AA:16:79:A0:3B:F7:68
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0194BC7303D0832CBB8BD87D746CAA702AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 06F4
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: x4pjRk8bci3GoGnZjQtMbIBemIXi3DpdY2gRG4goYV8=)
2: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:03:d0:83:2c:bb:8b:d8:7d:74:6c:aa:70:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=08563a72b1d16598554e881249aa1679a03bf768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:d2:c2:9e:7a:aa:05:be:3e:4c:5c:65:69:
5e:4c:9e:59:22:84:f8:65:22:10:33:0e:a3:99:4c:
3c:c9:ef:5c:53:ca:65:67:25:e3:04:3e:97:91:dc:
81:48:c7:82:d7:b4:94:6d:7d:fb:33:b2:41:c6:ac:
2f:cb:e9:e1:38:b9:7a:72:e2:df:cf:c0:18:e2:a3:
30:9d:bb:5c:1c:62:90:26:bf:58:3f:7c:d9:b7:84:
f3:43:16:71:98:e0:e7:9b:54:8e:ca:9b:50:f6:8a:
1b:a0:02:4b:89:9f:bc:ad:b3:66:63:c1:55:19:86:
af:ca:9f:ce:5c:74:29:59:52:30:db:6f:f9:e8:6b:
09:cc:3e:c5:ed:ba:72:06:6b:f3:e6:f0:9c:a4:af:
19:c3:f4:c4:c1:25:3f:60:8f:44:38:4b:0e:35:e4:
17:f9:78:59:d0:71:67:d7:90:e1:d7:6e:5f:5e:46:
24:01:dd:e6:38:16:49:b0:2b:47:bc:9c:fb:bf:7e:
6c:e8:02:99:ef:19:91:7a:71:d3:05:62:a2:5c:a9:
26:09:36:1e:66:ee:84:0b:d5:e9:21:48:8e:86:6b:
60:0a:2d:ab:b7:57:ef:97:b1:a7:8c:51:c9:d9:40:
c0:17:42:1b:04:13:d7:66:d5:ac:d7:ee:16:e1:00:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:3A:72:B1:D1:65:98:55:4E:88:12:49:AA:16:79:A0:3B:F7:68
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b4:d6:d3:4f:3b:64:70:92:57:da:a9:23:15:58:99:d2:9b:
ad:0b:d9:70:40:29:86:d9:1f:43:9c:9a:a3:e6:98:13:e1:06:
24:8a:e7:6b:58:02:38:f2:21:94:2d:38:f6:70:b5:70:d4:4a:
a7:4c:f9:93:4a:09:0e:57:d9:6a:3f:65:97:57:cd:4c:64:76:
80:25:88:9c:2c:5d:a2:0a:75:1b:10:fc:d9:2b:42:a2:80:3d:
52:94:cb:e4:e1:03:7d:8c:dc:b5:50:18:8f:1f:a9:ae:69:c2:
3f:5b:af:97:0e:26:be:2e:f5:fd:01:d4:0b:6b:ff:fd:51:aa:
e4:3d:c5:d7:30:e6:a0:5d:35:61:36:d9:b6:5d:4f:d5:64:c9:
be:77:d0:2b:5d:f8:b2:64:93:2a:18:3e:60:34:10:96:f8:28:
ca:4b:9e:59:be:43:2e:d0:50:e4:2e:bb:1a:46:6b:24:29:e7:
3c:05:4c:eb:b3:01:ff:d9:39:75:91:78:66:3e:0d:36:d8:37:
39:e0:14:c3:3f:2d:64:7f:0c:3c:a5:0d:db:e1:00:1f:56:25:
87:14:58:ae:e9:d7:3f:64:1a:cd:d2:d2:51:57:29:68:73:84:
28:f0:b7:2c:e7:4e:80:36:3a:85:c6:63:01:2c:3c:66:8a:3d:
e4:6f:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:38 2025 by rpki-client