Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: yLBi3xZdgZS6uuamhkzgJHDyXliHO1/gVN8hmyR5Dd4=
Subject key identifier: 80:F8:6E:C1:93:A0:30:00:EB:97:6A:56:87:1B:0E:CF:F1:F9:BA:53
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 0194BD8586AA5FB9A5A0BFCBD64220B5A186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
2: IF9ss-sy9yvnm-nHGofeLVRarxk.roa (hash: 2ET7jL1bePjM+quMou/IL9fIy3wVf50O3tX+ei7Qlno=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: CpNEqaHUz/Uur0QxvUzv3ew7L2CEaxK3xxHjBYiIafk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:aa:5f:b9:a5:a0:bf:cb:d6:42:20:b5:a1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=80f86ec193a03000eb976a56871b0ecff1f9ba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:bc:53:37:02:0c:3b:90:55:a1:5c:83:97:
8e:17:12:14:94:3c:41:62:ad:aa:a1:fa:d4:98:4f:
6a:f7:bb:50:83:b7:db:b1:bc:59:91:75:b1:b8:b7:
6d:dd:da:2f:c6:dd:9a:ad:d0:2e:a9:25:f4:2f:8c:
19:d7:d3:f0:f5:59:2c:25:57:6e:2e:f2:74:0b:c2:
20:63:b4:81:f9:8f:05:b4:4f:fc:17:95:a7:81:9d:
75:04:94:91:7f:61:9e:86:0f:d1:d9:ff:16:c7:d6:
32:72:ff:09:e9:ad:3f:47:45:fa:4b:a9:3f:1c:4c:
83:d7:78:9e:f9:6f:f0:50:2b:cb:f2:c1:27:e7:9f:
d4:7f:b0:d7:85:6f:fe:30:ae:45:75:10:5d:92:08:
97:a7:e7:55:cd:58:fc:23:5c:78:bc:f3:f8:fe:43:
f6:e6:37:e1:19:50:1b:33:c3:9f:ac:8d:f3:07:81:
a0:89:8d:8c:5a:96:64:b8:11:75:aa:dc:b2:24:fd:
ba:f1:d0:90:e7:9f:2d:61:05:73:55:50:5c:ea:84:
99:8e:60:be:27:59:22:cd:98:45:46:47:34:f7:88:
a6:73:b7:34:13:13:4a:5c:e0:df:db:2a:f7:1b:0f:
ab:4b:fc:cf:44:a5:51:af:a9:bb:d2:7c:da:73:69:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:6E:C1:93:A0:30:00:EB:97:6A:56:87:1B:0E:CF:F1:F9:BA:53
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2d:6f:bf:7a:33:1f:44:e8:82:8f:aa:bc:b0:73:0c:9c:a8:
c5:c8:3f:64:cf:d6:5f:5c:f5:ba:d3:e7:94:75:7c:1d:2b:c8:
1c:9c:d6:c2:1b:ea:05:bc:86:2d:a1:ed:3a:73:27:3f:90:99:
88:f2:12:c7:4a:5e:f0:f6:2f:27:e8:91:d1:14:34:9f:d8:76:
56:42:31:06:bd:84:c3:e0:68:98:28:58:ac:f2:41:42:e3:bd:
e6:66:d0:da:0c:ab:c1:04:37:b0:c2:0e:b2:75:03:95:3d:c6:
2c:40:68:48:ee:95:40:c8:cb:10:f9:d1:98:7a:eb:17:c9:ff:
d2:f8:8c:0a:a1:2b:7a:c5:33:82:24:ba:aa:f2:73:41:ea:ff:
a4:d1:ef:99:ac:16:bd:79:5c:8e:ce:8c:ec:88:ff:54:d2:ee:
07:db:be:db:87:48:28:a2:3a:dc:94:00:ba:30:fc:6d:f9:67:
b3:2a:a0:a3:18:88:dd:ec:2e:aa:42:2d:86:d3:19:92:30:26:
b9:51:7b:8a:b9:18:7e:ab:bb:6a:d3:42:a3:25:34:5d:5f:5c:
2e:f7:8e:5a:22:59:ae:fa:e0:4c:65:65:42:de:ea:30:d8:a5:
ca:af:05:99:da:f3:2a:54:38:32:be:43:6b:cf:53:82:bb:bc:
ae:17:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:19 2025 by rpki-client