Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: yWTLZGZhCr6XVZzdDz6zoKoArb85x2VbTMTgqE+zTY0=
Subject key identifier: 88:51:BD:CA:6C:C8:EC:F6:99:06:DE:9A:96:89:C0:30:F3:AD:84:A2
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 0194BD85891C33E7BE06EBFA999C86A5D7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: dL6NU49k6HbeSIU7QVDGoeBlKvM.roa (hash: D8I1MGPzQuGFKjsxT8JBT5WNbzUdy6FOkd6uHqQy/oo=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: hIYE+KgrzruLWIti+TaOcJTRjujj0TLlJxskabIItKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:1c:33:e7:be:06:eb:fa:99:9c:86:a5:d7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=8851bdca6cc8ecf69906de9a9689c030f3ad84a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:bc:f0:9c:c2:ac:90:ad:aa:59:45:cc:90:
45:d2:40:6c:a6:2c:5f:5c:7d:42:f9:65:a3:16:32:
31:0e:f2:1e:07:31:fa:88:7e:a0:a5:d0:eb:05:0f:
3b:31:11:1f:a7:f3:08:ce:be:19:5d:c9:d0:49:93:
52:c0:e2:c6:fb:a9:ce:1f:cd:a7:ce:a8:37:91:0d:
7f:2e:86:b9:e0:89:38:9a:11:5b:c2:15:d0:a0:8d:
99:c0:96:70:92:71:31:bc:17:0b:9f:81:df:77:49:
44:39:76:8b:be:de:97:ad:94:91:93:e1:e8:c5:4c:
9e:b0:bf:10:7c:1c:c8:4e:cc:ee:7e:ed:27:e2:d6:
f1:88:44:67:34:11:8c:28:12:e0:09:c8:6d:35:5c:
65:63:90:94:a4:28:2e:b8:0d:4e:9b:26:49:38:1b:
74:b6:05:e6:9e:36:8a:2d:d1:8a:90:6b:a3:2f:14:
65:5d:06:11:6a:03:4c:30:7e:22:f5:0d:07:f9:bf:
bf:fd:93:df:9e:8b:78:d4:08:32:5e:cd:f2:28:04:
91:11:63:58:5f:2e:8c:18:eb:c6:20:1c:82:a9:e3:
dd:90:13:8f:8d:b8:c6:5a:c2:be:28:cf:36:8a:ef:
18:3f:d1:af:67:f0:11:64:3a:43:93:27:a4:9a:7a:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:BD:CA:6C:C8:EC:F6:99:06:DE:9A:96:89:C0:30:F3:AD:84:A2
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4e:cb:4d:55:66:1c:ae:3c:f5:8f:a6:a3:f2:95:0a:67:f8:
b3:d7:f9:04:4a:03:88:c9:b7:0c:75:69:3e:83:cb:20:0a:0f:
58:13:44:72:86:8c:f6:33:e1:2e:3f:c0:3d:88:39:4c:0c:4b:
8d:c2:b0:93:90:1b:55:77:63:a6:e1:4c:0e:a2:4b:17:88:f0:
88:21:ec:78:67:fb:c3:0d:71:91:5d:83:5e:ec:42:22:db:e7:
f8:b3:76:8f:0e:64:62:2e:25:cd:c6:95:ba:b8:59:30:a6:b7:
20:99:26:02:3d:80:af:54:4d:06:a1:30:98:03:87:5e:9d:14:
cb:af:c8:85:c1:0c:11:b0:fc:52:a2:8a:67:2c:31:a3:c0:54:
27:f8:72:1a:4f:57:0f:4e:87:72:ab:76:41:61:ed:dc:f8:d1:
73:be:04:16:51:f0:92:14:52:cb:1c:5e:2d:ff:1b:4e:99:7c:
a9:0a:04:10:5a:1f:cb:da:8d:12:10:b5:6a:87:39:bb:f5:82:
3f:e2:f3:61:d2:98:6a:3f:64:d3:93:ce:59:07:27:7b:ae:c0:
c1:c1:7b:ca:bd:66:50:4c:b2:1b:e9:f2:55:1d:e8:b8:4f:e8:
d8:65:b9:d5:c6:6a:46:cc:84:77:b5:2e:da:92:a7:12:3b:8c:
4c:b1:a4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:30 2025 by rpki-client