Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
File: xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json)
Hash identifier: XouumWzt1dzI4Z89aTbvCQavAzTJl+qtVqP/ZZE6274=
Subject key identifier: 61:6D:A3:10:12:3A:00:0E:B7:6F:16:26:B6:3C:AF:FD:E9:75:8D:80
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial: 0194BC3C4179AC57028900672E00D8C8513B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: jvr-TtmshyO-21Athyko7-oCA0g.roa (hash: YbFNgrbQ4nYeYFpzPZPmunVsALPP8JY0whWvWBRLdqk=)
2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: GVXD+PncDepBfzdMpCMCrCKWqIXi6sKjJolROyHQHQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:79:ac:57:02:89:00:67:2e:00:d8:c8:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c98430885628971307c59b5cf241682102378
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=616da310123a000eb76f1626b63caffde9758d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:1d:e9:d0:fb:86:9c:d7:99:5f:51:e0:d6:
09:8c:f4:d5:23:5c:19:a0:bc:45:6c:b5:80:f5:31:
96:8c:62:54:48:a7:bb:9c:f6:4c:09:0e:82:44:f6:
90:20:ce:4a:c6:dc:e4:30:58:df:53:f4:ee:e6:02:
a8:44:9f:bd:51:b8:1e:05:70:e6:40:d8:5e:28:36:
a9:9f:1b:a1:11:cf:d0:03:a0:0b:5d:7f:6c:d1:f4:
87:69:2d:68:06:ee:d7:7e:79:f3:4b:62:f8:3e:9f:
37:20:54:37:d8:88:5b:32:36:38:9a:de:0a:48:01:
5b:76:19:b9:44:5e:c9:56:ea:d8:a7:55:aa:e3:6b:
e8:3b:a8:7f:ad:7d:19:97:96:7c:ed:17:2b:b1:ba:
f3:d4:55:01:64:65:45:aa:a0:53:b7:f5:7a:23:17:
26:68:08:f4:51:ae:67:4b:cd:90:88:a7:64:e7:f9:
7f:e9:20:59:fa:1c:75:47:e6:f1:89:97:26:6d:29:
dd:1d:46:86:b8:21:77:cd:c1:35:d5:79:26:09:07:
71:ae:b9:dc:2e:ba:80:8f:57:e4:93:9d:7d:9f:07:
5c:df:5d:f4:5f:9c:ae:6f:1d:89:1c:34:83:69:32:
a3:94:f9:28:11:88:02:0d:ee:10:62:4b:63:f5:28:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6D:A3:10:12:3A:00:0E:B7:6F:16:26:B6:3C:AF:FD:E9:75:8D:80
X509v3 Authority Key Identifier:
keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e0:b7:94:07:6d:7c:b2:ae:a8:49:de:48:f2:49:19:7e:a5:
fa:69:78:2f:17:7d:6e:b0:d1:02:11:15:b1:06:f9:84:55:f3:
e5:22:16:ad:49:fb:7a:d9:a7:da:86:33:57:6b:95:49:67:f6:
03:41:01:94:3a:45:cb:90:02:63:33:6b:f5:47:c9:be:47:4f:
78:03:ec:5a:41:4d:89:19:ca:46:6a:49:1d:12:25:f3:2d:9f:
ea:d4:b0:80:2e:15:e9:38:cb:04:a6:29:02:98:79:75:e7:2f:
9c:9b:e8:41:7e:b7:93:65:37:3d:bd:f9:19:69:2a:ed:c5:d8:
59:ce:45:d6:37:ad:58:08:72:e9:eb:b8:d2:8d:17:1d:ef:d1:
b8:94:dc:bb:2f:4c:f0:8d:8b:7b:d2:91:e2:b1:0d:a2:fd:31:
c1:ca:dd:91:0e:02:1b:0c:4b:66:c0:85:be:56:a6:4e:ae:17:
40:1d:18:89:48:1a:94:81:8e:c8:7c:85:c0:1f:7c:85:c9:22:
2e:d1:d7:07:5d:0e:01:3f:1d:1f:b8:12:2d:1d:40:8a:4b:6a:
83:1e:92:e9:37:dc:57:5b:f3:1f:02:17:d8:62:77:c0:ab:3c:
5d:4e:0c:14:e3:83:39:d9:95:1a:e6:3e:1d:a3:86:75:4a:a6:
97:2d:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:35 2025 by rpki-client