Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: QNbtjN31gq+ImAZtwPTD/vc5u3aN2EYdBzYXD3qGGSI=
Subject key identifier: 03:39:A3:FD:77:01:63:E0:3B:0A:64:81:CA:F1:85:6A:84:32:D6:86
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 0194BC3C003B7EE54133EDF32A7AB8B48734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: YnY2uJfeJJDnn4Qm9tVtOKDgtRnNxD7NttcG1puhB+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:00:3b:7e:e5:41:33:ed:f3:2a:7a:b8:b4:87:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=0339a3fd770163e03b0a6481caf1856a8432d686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b1:5c:79:55:c1:33:ee:e0:4b:02:54:a3:93:
23:39:7d:77:ec:1f:1b:e5:9d:82:bd:cb:25:b3:bb:
ce:fe:60:ad:77:64:04:85:1e:aa:1d:9b:a5:9e:ed:
59:66:41:2b:2a:9b:94:0b:a0:75:ed:a0:f6:37:b1:
ac:45:c1:23:27:72:09:4c:1c:73:3b:06:1f:29:3a:
52:e2:c7:95:1e:ea:46:44:24:3b:2a:d2:dd:8d:3e:
55:2b:a5:07:2b:e3:98:dc:26:92:4b:1b:93:6e:0f:
f3:a0:db:34:ca:bd:d8:50:81:3c:0e:0f:db:95:7a:
3c:8b:de:e3:72:0e:1a:db:bc:5a:8b:0e:12:80:d9:
97:39:15:1d:09:3c:f1:6c:b6:2a:6c:3b:eb:a0:0d:
47:e7:5a:8d:f0:d5:04:a5:3c:f3:cb:e0:65:b7:b6:
ef:ca:80:dd:2b:66:cf:e3:96:ec:c9:54:b8:c0:16:
9c:e8:a2:86:a4:d5:db:5a:ec:d6:8e:51:a8:e1:e8:
23:cc:b4:1f:6f:b0:5f:97:e0:fc:b7:09:cd:c8:97:
6a:8c:d7:15:1e:88:df:90:18:93:be:70:15:13:b8:
37:63:3c:aa:b1:0f:3f:8e:87:e3:76:bd:bb:47:07:
f6:ae:5d:ae:f9:b9:ea:ad:00:d6:f9:ba:85:94:70:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:39:A3:FD:77:01:63:E0:3B:0A:64:81:CA:F1:85:6A:84:32:D6:86
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2d:70:c4:08:b5:16:db:00:7b:81:14:e1:ed:74:e5:be:19:
aa:46:33:85:e3:6c:e1:3e:96:e9:98:00:61:b7:ff:72:39:7b:
a2:2c:b6:22:0a:32:0d:1d:8c:55:4a:b9:49:ec:27:9e:b4:cf:
e8:85:ac:fd:6b:e3:93:ac:ce:6a:6f:1e:6d:ab:7f:cf:92:89:
82:c0:5e:db:9c:cf:fb:cf:95:f5:e7:fa:d8:a7:9e:62:27:45:
85:c5:90:b1:df:82:b5:78:f7:66:5d:3d:32:81:c6:53:d9:b1:
73:40:73:d9:7a:34:44:c8:ab:c8:c6:9b:b7:19:75:62:32:f9:
44:96:1c:ce:58:7c:cf:c5:e2:67:3d:ce:ee:db:1b:91:19:f6:
57:e1:5b:cc:39:d8:d2:34:e3:0b:06:da:ad:0a:65:54:bc:d8:
50:d1:0b:44:a9:bc:5f:31:a0:5e:75:88:61:a8:10:04:dd:30:
0b:4b:cb:d0:c5:7a:48:4c:3e:36:5e:51:8a:bf:0c:e2:90:c3:
e2:5f:ec:3a:07:15:94:b1:6c:27:d9:de:7e:2d:3e:7c:a0:90:
bc:1d:51:b7:5b:03:f6:7d:e1:09:22:67:eb:3f:6b:f5:c2:64:
0a:39:d3:64:71:4b:3c:53:84:88:74:36:1e:b3:81:d6:62:1e:
6b:e5:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:20 2025 by rpki-client