Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: DvBKoukiLq6rXSH6J3w9OBd3JVUqtBpePRyI4DbiGJA=
Subject key identifier: 08:A0:CD:85:2F:AB:BE:DF:34:62:CA:26:97:0A:2E:24:B1:81:0D:8B
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 0194BC04D8739A84B2B6530CDA981DD4C400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: A3+FGHPKljnkasbiTHPqveH7b36dSdvWi2ENEW9Nz10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d8:73:9a:84:b2:b6:53:0c:da:98:1d:d4:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=08a0cd852fabbedf3462ca26970a2e24b1810d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:3a:f2:9f:4e:c6:5c:d3:79:08:e1:0b:bc:
6f:13:92:bd:c0:d2:a4:c0:ae:fe:58:23:2a:60:7f:
ef:1a:6f:dd:57:90:66:a3:23:b8:ad:2e:a5:ba:ea:
d5:3a:57:21:9c:03:f7:26:a9:4f:e5:46:18:78:03:
54:75:7f:30:67:56:7e:08:6c:3e:1c:00:68:20:a0:
3c:78:3a:99:f8:83:70:06:34:68:75:72:e0:5b:dd:
0f:4b:04:c1:92:6c:ac:65:86:87:43:97:f9:42:08:
cb:68:85:c8:13:aa:66:1f:2d:bd:11:d7:ce:ca:d6:
6d:a5:52:61:6e:9a:30:27:87:29:22:f7:b8:fe:46:
1f:a9:3c:9e:9c:fc:3a:d3:bd:92:2a:ac:ef:5d:57:
00:98:19:e6:82:fc:c4:8c:b6:1a:7a:56:bd:8b:ed:
5d:40:db:43:67:c5:86:6e:c8:7c:86:29:4a:ad:e2:
7c:13:3c:df:a2:43:d2:96:c1:6f:b4:70:20:dd:a9:
48:85:09:23:bc:c5:ca:96:a2:74:8c:a6:eb:e9:c2:
27:bc:0f:d9:ec:9b:60:be:2c:7e:03:0e:c6:b1:2f:
bf:c7:04:a2:7d:20:ae:02:b9:d7:ab:ba:e8:76:60:
11:10:66:03:e5:b6:95:31:ce:c8:a3:59:fb:1d:11:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A0:CD:85:2F:AB:BE:DF:34:62:CA:26:97:0A:2E:24:B1:81:0D:8B
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:96:99:93:82:36:4f:b4:cc:69:6c:73:f7:47:75:03:94:5b:
0c:77:0f:45:e5:9b:3d:2c:5b:9f:c9:47:97:10:df:bf:39:29:
cf:89:ed:f1:2b:c0:ea:79:99:c6:87:4b:a9:3a:35:f3:92:d1:
df:8a:d0:cd:e3:ff:f7:ba:29:bf:56:57:ee:0f:83:0d:c1:11:
62:a9:e7:1b:55:33:57:b4:df:22:20:aa:9e:fa:fa:c6:53:a4:
a2:91:f7:97:87:42:95:63:d5:40:7a:7f:09:99:63:de:7b:68:
ee:84:3e:25:9d:2e:ce:9e:06:ef:10:09:76:f6:45:d7:e7:70:
34:16:20:4a:c3:9f:bd:78:40:8d:86:56:ef:e4:8e:98:6d:c1:
e6:5f:62:cc:7f:4b:03:34:01:e7:8f:be:05:38:e9:d6:a7:eb:
64:8e:50:50:6e:6e:b9:08:1b:22:b7:f8:fe:ba:c1:d9:68:1c:
51:a5:a9:78:bb:41:3d:6a:c6:9a:5c:6b:0c:18:6c:64:ca:db:
d3:5f:57:a0:99:fb:ed:eb:ce:b5:c8:23:45:8c:ed:e7:e3:be:
cb:8e:9b:40:09:b1:b8:c6:2d:85:66:22:2e:73:ce:80:ac:da:
6f:0e:5e:0d:68:1d:09:a9:06:c8:96:5b:9a:bd:5c:c0:cf:42:
a5:ab:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:56 2025 by rpki-client