Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier: lo9VWCkMbeduf/keIO2TIO9hwf7qdFpAEjP2kn4XnEc=
Subject key identifier: 09:AC:1F:51:C7:BC:3A:AE:90:D6:ED:96:ED:C8:E7:13:73:DF:34:AC
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 0194BCAA2E33E06710B9FBC73062B22F8A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number: 0A44
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=)
2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=)
3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=)
4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: G1zTPPBxhdXRIRl5eMV4D5AfPRS0OPxpsiw/I/Dhy4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2e:33:e0:67:10:b9:fb:c7:30:62:b2:2f:8a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=09ac1f51c7bc3aae90d6ed96edc8e71373df34ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:a3:11:d5:1a:b6:a7:22:98:22:17:b6:dc:
7a:30:90:5f:b2:0d:93:2c:db:f1:ad:6c:90:a3:dd:
8a:8d:d1:f7:59:32:49:98:38:30:98:6d:0f:41:0f:
b4:75:cf:6c:c3:59:fc:75:d1:5a:33:e5:58:03:1b:
c1:b3:92:5d:02:3b:2f:e7:a2:d3:5f:a8:1a:28:43:
9d:41:92:bc:73:f3:24:f4:db:25:42:6a:14:3d:95:
04:2a:59:83:62:6a:fd:8c:d2:d9:5a:86:68:25:6a:
9b:ea:8c:96:7b:f7:1a:a2:11:bb:0f:c4:ed:bb:99:
82:b9:ce:63:fc:59:c7:c6:f0:f1:86:90:d3:84:70:
5b:ac:ce:15:1a:25:68:af:9b:a8:97:dc:fb:9b:3c:
b3:ee:8e:a5:3b:a6:11:b9:fa:61:d6:37:c1:dd:29:
58:de:8b:d3:f6:1d:58:7e:8c:a8:6e:52:d3:d6:c5:
6c:55:15:3a:e8:12:f1:d9:f2:91:f1:41:ad:d4:e9:
d0:e0:3b:a6:9f:e0:67:e1:f5:cb:eb:26:cb:bd:15:
ed:ad:7f:74:a2:d9:e1:cf:34:c2:fc:4f:bf:7f:e1:
bf:66:47:3f:a1:c5:0d:89:09:e9:6c:3b:5d:96:26:
7e:f3:b4:ae:5d:c6:26:41:70:6a:cf:9b:52:dc:80:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AC:1F:51:C7:BC:3A:AE:90:D6:ED:96:ED:C8:E7:13:73:DF:34:AC
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a2:94:fc:74:a0:12:3a:1b:c1:bf:e5:0e:d0:3a:7b:91:ac:
57:4b:55:c2:de:ab:ae:6f:b0:98:d5:f2:15:b6:75:7a:39:4e:
4b:34:e3:8e:41:08:b2:7c:64:e3:f3:a4:6f:ba:06:1d:63:46:
de:21:d0:90:45:94:2e:0f:30:47:35:ba:32:c0:d5:d1:af:66:
83:1c:62:e6:d2:6e:70:bc:8a:5d:74:b3:b4:d6:a8:fa:85:fb:
5d:42:2d:a0:af:47:a1:6a:61:6b:ee:60:8b:1b:e4:3a:36:17:
6f:f5:e1:ba:e1:9a:ae:91:6e:43:9f:cb:ff:33:95:68:12:30:
41:75:70:74:b2:81:bc:32:3e:e6:be:91:2d:e6:3e:e7:62:62:
be:57:07:5f:bc:9f:25:e9:c5:32:cf:34:5a:95:86:cd:b4:cf:
bb:dd:8e:35:4d:d3:2c:16:d4:5d:6f:78:53:0e:7a:93:43:61:
62:ed:2e:79:48:27:50:ab:9c:4b:a0:da:e6:a0:6f:51:cb:44:
81:ba:b6:57:61:3c:c6:72:2a:44:48:66:0b:49:8a:fa:bd:a2:
6f:63:e6:9b:bf:e9:5b:ba:32:1f:35:27:c0:9b:0e:6f:d5:43:
63:2d:b0:7d:18:28:82:a8:6c:06:a3:66:05:10:1e:31:71:1e:
c0:21:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:35 2025 by rpki-client