Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: u/AtLWlTFbdNj7A38/TRaXbTyq7eTdfcH+weg1ZVaEc=
Subject key identifier: 5E:6E:EF:A7:E8:43:E7:24:1E:E5:F0:29:EB:A8:1C:9D:54:F0:7D:03
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 0194BD4EA9E05E676C402B0B81F0D59D877F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: 1uOBttAKuNcC6KtxfnzCyVVJynWgADJJimIRNLJhdk8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a9:e0:5e:67:6c:40:2b:0b:81:f0:d5:9d:87:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=5e6eefa7e843e7241ee5f029eba81c9d54f07d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:5e:59:10:fc:51:51:3e:6b:03:09:14:70:
46:56:a0:3c:0f:01:61:06:09:b5:9b:48:60:1e:fd:
99:b1:e8:c9:25:0e:60:61:b5:13:46:37:32:33:f5:
9d:37:02:cc:9d:dd:2b:39:21:8d:3a:96:9f:8e:23:
93:48:5b:f5:e5:5c:75:00:5f:ad:ed:b6:fd:e8:32:
c4:01:bf:d5:91:45:a1:6e:b8:db:4f:f6:2b:0f:3e:
ba:ab:82:4a:7e:cb:6a:2d:5f:aa:bc:9a:c8:06:49:
43:bd:b5:a5:8a:73:ea:e4:ae:1c:f2:1f:83:0b:3b:
08:2d:79:cc:64:b6:ab:fd:85:b9:dc:64:e3:12:31:
06:7d:18:ac:24:eb:6f:eb:a3:1c:7a:81:b2:6e:e7:
07:b0:98:8b:41:a4:fb:7e:41:60:4e:57:9d:62:13:
7d:2f:23:e6:13:03:8c:ad:31:f7:91:03:fc:10:15:
d0:41:81:d2:49:02:9e:12:e9:51:30:9a:0e:7c:31:
9f:4b:fd:6d:ae:48:e2:79:ae:46:76:26:c2:40:e5:
31:2b:f8:ae:1d:4b:d0:bd:0e:e6:92:60:ad:3b:35:
8f:cc:ae:68:95:0f:91:b2:63:84:5d:d0:dd:b1:bb:
6a:15:bf:65:b6:53:b9:bb:b0:8c:66:76:5b:92:06:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6E:EF:A7:E8:43:E7:24:1E:E5:F0:29:EB:A8:1C:9D:54:F0:7D:03
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b8:a6:6e:4e:f8:85:58:a4:a3:c5:3d:1b:3a:d6:04:63:87:
92:08:b0:2b:d2:07:3c:d5:56:5d:23:3e:9a:5b:63:82:bc:61:
68:a7:66:14:dc:8f:8e:4a:e6:ee:57:37:19:bb:e4:45:fe:f5:
e2:3c:c7:93:75:11:52:4c:aa:07:d4:35:f5:c8:7f:76:bf:93:
85:a3:30:12:4d:59:ef:f7:4b:a0:35:18:86:66:51:7a:5d:c5:
7d:a2:3d:c3:33:67:30:b8:1c:dd:82:6d:d3:6d:8c:79:32:56:
7f:d6:e1:c9:1d:77:52:a3:b0:72:32:42:b1:f1:c4:69:6d:0e:
0a:04:d9:30:a5:72:1c:aa:1c:fb:af:e3:cb:7f:24:e8:44:0a:
ee:f8:aa:24:80:2a:03:24:01:4e:74:25:be:eb:f2:04:c7:e9:
5f:bc:4e:d4:c6:18:86:9f:30:8b:c0:9b:31:3e:26:78:ba:30:
12:13:86:14:35:61:4f:49:38:4b:3a:45:99:f7:03:12:c8:0a:
e2:92:06:ef:79:fa:8d:b7:10:d5:b1:e3:fb:eb:1b:73:6d:50:
53:e5:51:3f:ea:54:97:9a:23:f2:cf:fe:25:4b:31:e8:5c:db:
b1:ea:95:d4:31:2b:19:6a:b3:dc:e4:b8:64:f3:57:dd:ee:ea:
b0:75:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client