Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
File: xJkOwgER9C-2LzmoHHOSqSGVW_I.mft (raw, json)
Hash identifier: U0Uu8QMCZ6TWB10Ksjw11/QXYBI6ffBrGo43HOA2tXA=
Subject key identifier: EA:30:25:B9:9A:D9:30:64:96:CC:ED:F5:BC:71:40:3A:3F:9F:74:1F
Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Certificate serial: 0194BC3BCAF56ADD6F13362BC178254BE740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
Manifest number: 8B
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: S6SgkEKXXupg9NGyg85ew2MKuNo.roa (hash: Ccy6wkPiSmvGfzLUcrIC/arlCjWDtB/tLTVQ150opBk=)
2: xJkOwgER9C-2LzmoHHOSqSGVW_I.crl (hash: RoN4s8l/w8be8bCQ00MVUZelPr2PS/NMgxp29XWlKrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ca:f5:6a:dd:6f:13:36:2b:c1:78:25:4b:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=ea3025b99ad9306496ccedf5bc71403a3f9f741f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:9f:4d:c3:3c:0f:52:09:b3:2f:67:18:72:
d7:05:ce:8b:40:ba:de:90:cf:7b:d8:cf:1b:d3:7c:
ea:0d:09:f9:d8:d4:52:b6:f4:eb:c1:a5:d7:e1:0c:
a6:c8:6e:8d:28:db:e0:da:09:21:6b:81:93:66:18:
da:51:62:cd:98:17:d2:27:b1:ee:f6:db:46:9e:98:
1c:5d:f1:dc:1f:7f:75:c1:9d:c8:1d:94:7f:45:cc:
f8:15:e0:58:33:2e:d9:cd:5f:a6:b8:fa:ae:39:8b:
76:a4:b7:69:d3:9e:23:ae:5c:16:9f:e8:5c:10:0a:
75:f2:93:17:00:99:a9:9c:20:44:5c:7a:6a:91:db:
0a:a4:20:3e:e9:d4:35:28:47:ff:1a:fb:3f:07:a6:
ea:93:44:40:56:f3:d7:bc:16:59:32:a7:be:1c:79:
48:10:8a:63:74:13:db:bc:f7:03:85:47:7c:76:b9:
27:6d:ce:11:61:b2:14:24:15:9e:0b:d1:bc:4e:20:
e0:9e:6c:dd:a2:b5:24:10:fa:ee:65:e9:10:e9:7a:
0e:b7:2a:61:71:6d:7d:a0:ff:53:90:c1:3d:18:62:
b9:1a:9f:ef:8c:ac:56:eb:15:0b:18:1f:e6:a1:57:
c6:63:af:eb:42:fe:3c:93:54:59:61:0d:ad:59:8d:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:25:B9:9A:D9:30:64:96:CC:ED:F5:BC:71:40:3A:3F:9F:74:1F
X509v3 Authority Key Identifier:
keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a1:fe:c2:55:7f:d3:86:55:0d:65:12:17:32:e3:d4:19:ad:
80:7b:8b:e2:c3:25:7f:f8:5b:1b:f2:54:9e:27:81:72:0c:76:
7b:30:13:8d:9f:90:7c:af:af:44:73:02:db:ac:44:59:08:e5:
bb:e6:9f:1e:21:9b:60:db:95:1e:cf:62:e7:12:51:87:48:1c:
a0:a8:2a:6e:db:3e:e8:f2:f2:6d:ad:03:f4:fa:7f:3d:43:18:
5b:8f:b3:4a:e5:f3:24:46:7c:2d:55:90:69:c0:22:5d:70:48:
b3:fc:35:d3:72:16:47:c6:11:1d:3d:c2:51:9c:6e:01:af:12:
5e:11:42:10:0b:c1:ab:0f:75:d2:6b:ad:66:68:d1:8c:45:b3:
59:2f:85:2d:93:a2:e1:58:e4:33:2b:82:9b:68:cd:9d:06:2d:
73:94:5d:6c:b7:e4:99:24:05:d5:a5:7b:a6:93:b3:10:c1:79:
8f:04:8d:50:b7:c7:d8:04:e1:ff:dc:00:c2:d0:a1:4f:5e:1b:
c3:02:e4:c3:ad:31:61:8c:f6:f6:b2:9e:50:e5:85:66:16:88:
89:69:b7:3a:73:b5:96:98:ae:11:39:66:cd:45:ed:16:d1:aa:
c9:57:54:12:52:04:b9:2e:12:d4:45:05:b3:15:1f:31:86:dd:
d9:3b:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:11 2025 by rpki-client