Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: SyMIkkJsnkg21BYjNzhieLB24hKTM78Q3eoJmgdxVww=
Subject key identifier: F1:E3:1A:61:1D:5F:5B:1B:04:17:37:24:1E:DE:5C:2F:84:C8:BA:D0
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 0194BC3BCCDEFB6BBFC67F44B4625F3047E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: +Ip3ESf2DpLceOz7/dAKQNCU+FP+hVu6l/xfdvybdOA=)
2: b8cMShMrRsZNeCR-DHToKJSbSFc.roa (hash: Xs+2pmDsikwjys7lR2WnXyOpx7FAM2jx9740akpfIYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cc:de:fb:6b:bf:c6:7f:44:b4:62:5f:30:47:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=f1e31a611d5f5b1b041737241ede5c2f84c8bad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:63:c6:cd:17:21:b6:58:7b:0b:73:6f:49:
46:9b:6f:39:a2:cd:4e:bb:9a:49:b4:f1:ae:bb:80:
68:f0:f5:1d:c5:99:1c:b6:51:2c:f2:e4:c0:96:06:
fd:25:93:5a:75:99:55:85:34:c7:b0:98:b2:8a:61:
b0:f5:10:fe:77:81:c8:dc:ff:75:e9:e5:b9:df:de:
4f:b2:a7:97:fd:ac:41:58:82:4e:5b:66:fd:ff:6c:
f5:fa:f0:d4:c6:b7:97:6b:00:e4:7e:60:ed:01:d8:
0f:18:fb:a6:4c:b1:09:b1:a3:b3:56:f4:f8:3c:26:
9f:89:16:7a:f6:1d:01:3e:f2:56:18:da:ff:d2:49:
9e:19:69:e8:a5:5e:38:76:05:5b:64:59:5f:35:71:
4f:8c:34:e4:b0:b7:4c:ac:9e:2a:5b:47:ac:05:a2:
5a:b5:01:db:a9:44:ad:1c:9e:88:fd:94:4c:17:24:
98:df:ba:7c:4f:5e:13:a6:8b:16:cc:6e:1d:a3:f8:
b5:71:de:de:04:f5:f0:e0:0e:a8:42:c5:b8:53:09:
3f:d0:26:e7:91:66:6a:4b:78:d2:b4:e1:b8:91:22:
e5:c3:ca:d6:bf:9a:7d:d3:5e:54:98:64:41:0f:ad:
d2:d4:c9:b6:f2:0b:1d:0b:9b:5c:2e:a1:2e:27:10:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E3:1A:61:1D:5F:5B:1B:04:17:37:24:1E:DE:5C:2F:84:C8:BA:D0
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:69:a4:8a:17:d6:ec:57:b9:32:f5:15:73:c8:fd:97:c8:1d:
82:eb:3e:19:a7:67:9b:6c:37:8f:de:db:c2:1a:1f:e4:98:81:
d7:b0:fd:78:45:4c:b1:1e:01:8e:30:82:48:45:d5:5f:af:73:
6c:77:d1:29:9e:af:75:e0:d6:54:1e:31:e3:54:79:3a:4e:48:
f4:71:cd:95:d1:3e:4d:32:fa:04:e9:28:3b:15:1d:f9:aa:96:
3a:c7:21:aa:0b:54:67:38:a4:1b:b4:21:50:91:4f:66:a9:a2:
9f:4b:61:cd:e6:86:64:2b:0f:b9:65:20:d9:9a:a5:1e:0f:79:
1f:3d:09:28:15:c9:df:48:f4:dc:99:f5:fd:d4:55:38:c4:8d:
29:6f:27:25:3b:bc:99:05:39:4a:fd:65:0b:3f:e2:27:04:0f:
3b:c5:8b:d5:72:ed:71:75:c7:9e:15:75:81:6b:66:c0:93:c2:
b8:14:a7:b6:6f:ee:02:87:51:5a:be:19:6f:98:69:79:90:3f:
07:d0:2c:58:8d:40:b2:2e:b0:b0:d2:da:ad:17:31:78:e6:c3:
78:8c:0e:91:59:79:d6:f3:2c:7a:4f:1a:b9:c2:e7:d9:60:26:
e2:f7:1f:69:83:12:d3:ac:82:a3:9c:09:84:59:68:e2:ff:b4:
94:3d:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:59 2025 by rpki-client