Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: jvK5+okDFooo860oyd9tmX1DZPUx1MWoKgqq8k0VhLg=
Subject key identifier: 0D:AC:E0:53:4C:B8:6F:8A:4B:C9:14:D0:49:EB:DB:B3:06:9D:87:68
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 0194BD85235B0F44F1D2C1B9C1BD9CDFDD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 1213
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: x5oV4dRKcdBl5AXPAOJA3Tod2YYs0ZAVAnjSQkK9lBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:23:5b:0f:44:f1:d2:c1:b9:c1:bd:9c:df:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=0dace0534cb86f8a4bc914d049ebdbb3069d8768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:81:e5:f5:da:09:56:ff:37:d7:16:cc:6f:
53:0f:42:27:29:5b:55:ea:aa:2f:17:13:75:e5:c1:
81:43:58:74:3d:c8:8d:2b:9b:58:2f:31:0f:97:94:
43:95:bd:41:bf:ea:1a:ac:d9:94:19:be:69:71:38:
08:58:78:e5:9f:f9:23:59:d7:b8:7c:d7:34:36:1f:
9b:ff:6c:35:20:b7:ab:a7:ad:37:ae:02:08:9b:2f:
a8:f8:50:83:1c:60:dc:3e:cb:e3:42:73:b4:d9:75:
b9:27:7b:75:0a:89:a6:42:8e:2f:24:07:ce:36:2e:
f2:db:52:67:23:0b:ae:88:f7:ce:5d:1d:8d:33:2b:
f9:e8:67:35:82:3b:50:ab:f3:f2:83:e5:9e:0c:f7:
5f:58:a3:16:a7:9f:22:ad:3d:53:da:64:10:24:cd:
3d:58:45:76:b1:4d:f3:61:4c:6b:6f:f7:0a:08:5c:
0b:c0:56:b1:b6:cb:41:aa:c5:41:b7:e3:8b:68:19:
b7:60:4b:9c:93:a6:2a:e7:0d:3e:87:20:9b:69:37:
7c:20:bb:6d:69:bc:c4:a5:c3:c1:53:62:4f:0d:87:
44:b1:a8:b5:4d:a1:a1:b4:17:76:17:57:43:85:9e:
0d:e3:e6:ae:bc:e6:d1:1b:4c:dd:ae:af:09:da:9a:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:E0:53:4C:B8:6F:8A:4B:C9:14:D0:49:EB:DB:B3:06:9D:87:68
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:53:6d:5b:8a:52:d8:58:72:6c:d3:99:8a:10:50:b5:a1:2d:
ef:2c:93:09:12:9e:4a:ab:81:dc:6e:88:2f:0a:ea:89:28:5d:
f4:9f:f0:71:b3:e3:c2:e5:61:c1:aa:e1:ce:a3:11:69:81:89:
76:d5:53:3b:b8:b3:a7:bd:c9:33:75:36:47:89:cb:27:fe:ff:
a6:9a:65:1c:41:27:0f:34:66:ab:f7:36:a9:49:d2:03:8a:22:
02:4d:a5:14:32:c5:a0:fa:77:44:4d:a5:55:8e:55:71:fb:33:
b4:5a:4b:7d:44:e8:54:1d:58:f9:9f:8e:26:29:0e:75:77:db:
91:08:0b:25:b7:e3:29:25:19:c5:bc:e6:01:c2:24:95:3e:d7:
4c:a3:16:a3:0e:e6:2b:c4:c1:b8:c1:7c:61:e4:fc:37:49:34:
7b:6d:17:c8:1e:63:af:24:3b:12:a9:d0:e0:c9:85:7c:5f:b6:
0e:35:d2:dc:bb:1c:d1:1a:b3:b0:57:12:85:e6:75:68:eb:96:
42:b8:a7:e2:f8:36:81:65:b6:9d:79:7a:ad:71:e6:9e:75:e3:
50:0f:cd:a4:ce:77:64:9b:e9:bd:27:0e:2a:07:b6:f1:0f:8b:
bc:ab:cf:97:ef:c8:0a:11:48:4c:86:2b:c6:0f:e7:fa:99:b3:
32:9f:0b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client