Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: c5ikNX/WP+jHbd6eqLhqgiCyI6Axuq4u38Yh4r1U8kQ=
Subject key identifier: 1E:B8:AE:3E:67:FC:10:BA:83:38:14:40:43:87:67:C6:CE:FA:FE:0D
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 0194BBCE288C92F5FBDBEF6F8B96E7A914EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: TywlI5eOxECRnu1qJ4O1cwe277VFtPuN50Aq6hAIZY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:28:8c:92:f5:fb:db:ef:6f:8b:96:e7:a9:14:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=1eb8ae3e67fc10ba83381440438767c6cefafe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:ed:dd:d0:18:2d:87:14:12:b0:62:b8:08:
17:bf:92:48:0a:83:01:e5:8b:f3:20:ca:3d:f0:6b:
54:1c:f5:d2:2a:58:37:ee:6d:03:ce:9a:74:aa:bc:
c1:6d:a6:12:1a:12:83:77:49:83:1b:66:ca:6d:70:
09:fe:37:6f:eb:b1:27:15:d9:9b:bf:7d:47:95:81:
8c:f0:f9:4e:bb:ee:24:b5:b3:54:3b:50:9e:c3:a9:
f9:61:80:3b:62:f8:04:2c:60:78:7a:45:52:eb:ba:
6f:9a:68:57:f5:ba:0f:0d:50:83:7c:f5:ae:82:ec:
98:a3:2d:95:50:e0:5c:f6:73:cf:e5:86:39:98:28:
42:a0:1f:22:c4:75:7b:d8:54:b6:ad:7e:d4:81:6f:
b4:17:1b:1e:dc:b4:a4:cb:71:6d:21:13:19:7c:14:
8c:f3:f6:bf:19:07:0d:0a:b0:0e:48:79:11:7e:5f:
a2:b9:d7:d1:06:77:25:90:2c:76:e2:ee:d9:14:48:
c8:64:f2:26:0b:87:84:8e:c5:00:df:27:15:17:f9:
c7:4a:71:18:23:4a:68:46:75:92:ee:dc:77:b7:87:
9a:65:fc:eb:0c:3d:f6:aa:67:49:cb:17:c0:e6:98:
c1:21:3c:a1:6e:21:10:15:b3:fe:2a:90:d6:69:af:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:AE:3E:67:FC:10:BA:83:38:14:40:43:87:67:C6:CE:FA:FE:0D
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:82:dc:ac:50:68:fa:90:31:5e:36:f7:77:55:87:83:1f:2f:
a9:5a:bc:1b:22:3c:02:c7:ae:53:27:d7:44:79:e9:4e:eb:af:
90:5d:90:c6:ae:f4:0b:73:01:09:86:1d:64:76:bd:16:64:81:
db:d9:ea:08:4c:71:2d:ab:34:8c:05:d7:8b:38:2f:cf:94:37:
73:22:1e:31:28:68:c1:52:01:c7:ce:1e:2b:98:a9:30:81:ea:
fa:3a:ea:af:52:62:d9:37:ab:76:85:9c:d6:5c:7a:88:11:27:
d4:63:0c:ab:e7:bc:4d:8b:4e:50:89:a6:de:7d:4e:e7:5b:12:
ec:37:2d:c2:eb:69:d9:29:47:f7:35:9d:b9:90:63:9d:f5:0d:
fa:8b:f7:7e:ee:1a:06:84:08:b5:69:80:01:60:5b:de:ae:b4:
9c:5b:c8:21:d6:13:10:bd:8c:c7:53:8d:54:c3:29:97:b4:36:
70:9b:1f:82:d2:9d:dd:d7:0f:bb:ee:14:f0:77:7c:3b:13:cd:
c6:35:90:7e:94:48:1c:28:5b:75:d8:a3:25:ec:e1:d7:91:2e:
b3:6f:13:7d:4a:79:e6:e6:ad:0d:d1:32:4d:49:58:98:76:83:
22:eb:1b:e4:e0:72:a2:7e:72:09:e0:86:53:fa:ce:36:e6:ff:
87:c9:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:18:55 2025 by rpki-client