Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: TbE/ErR3l0WsX3ilCSEy/tY+XAMzh8tnY5o7iIByuP0=
Subject key identifier: 85:83:B6:25:32:81:9B:3F:65:95:BB:9A:F1:BC:A7:9E:49:40:E7:9E
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 0194BC3C9E096AC91A82E8E8B567A2BDF720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: /fVL06mRfS4J4YqukPnKdyAk/woBPgG+A9RBndzCyS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9e:09:6a:c9:1a:82:e8:e8:b5:67:a2:bd:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=8583b62532819b3f6595bb9af1bca79e4940e79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:cf:2e:39:10:a0:e5:39:7f:8a:f5:0b:05:
52:33:3f:89:49:2b:57:f6:a8:15:fb:d2:6a:8f:5b:
e9:3f:ea:69:9e:85:4f:8d:37:3e:57:50:f3:0d:9c:
c5:d4:44:10:0f:33:07:a8:db:68:0f:b0:8d:fe:03:
03:d1:42:44:cb:a9:34:12:02:93:fe:03:49:cf:8e:
d2:27:ef:13:b8:e7:b7:48:1e:35:b3:40:21:78:84:
be:dd:b8:e9:10:b3:41:53:6c:07:58:d3:ad:f2:1d:
57:26:c4:1c:a2:d3:ed:ab:d7:ca:e9:81:be:03:0a:
d4:e9:7d:04:a1:0d:5e:1c:3d:4e:09:00:e1:b0:87:
cd:be:84:21:33:76:d5:2a:30:9e:cf:21:dc:02:fd:
da:50:19:a7:fe:7f:fb:fc:d7:1c:d1:0e:a1:8e:5f:
2e:90:0a:cb:1d:03:31:2f:52:b6:f8:e1:71:5f:fc:
dc:f8:c5:50:ad:23:f4:f8:cd:cc:d7:51:55:22:9a:
b9:bb:e6:99:b9:4b:af:79:80:48:2a:4c:eb:0d:ba:
70:29:eb:13:89:70:de:25:f0:2a:a5:98:bc:9a:c2:
94:39:e5:4b:70:9f:98:8b:6d:8f:fe:b3:7e:c3:89:
df:1c:b4:78:d1:bd:49:08:42:39:91:88:4e:25:a6:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:B6:25:32:81:9B:3F:65:95:BB:9A:F1:BC:A7:9E:49:40:E7:9E
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:15:2c:81:99:4c:f0:b8:4a:0e:38:31:1c:3f:1a:51:3f:85:
37:13:d5:26:24:c3:67:bf:4b:50:07:3c:cf:ef:90:e8:1c:96:
f3:47:47:81:09:56:82:51:77:dc:8f:7c:cd:fc:2c:bc:de:54:
c5:ae:f1:05:f5:0c:5a:09:49:12:a7:d7:80:c2:a3:a5:ff:07:
7a:09:11:70:38:16:57:31:11:1f:3c:ff:f5:a0:53:32:5b:82:
2f:ed:4a:11:cc:4e:26:7d:89:9c:78:33:2d:4f:77:eb:88:7e:
c4:79:17:46:ae:25:a2:13:62:dc:bf:ad:25:45:02:68:14:8b:
b3:b4:d1:3d:77:11:a0:1b:cf:56:33:e6:70:5f:53:5e:0c:76:
b8:a3:d3:15:b9:31:44:9d:79:df:38:04:c9:b5:3f:0f:3c:e3:
26:6c:e1:f8:b0:25:98:f9:4a:3b:63:4b:a0:e3:d4:da:72:5e:
c8:92:67:45:db:76:ad:48:8c:1b:18:82:b7:3b:a0:08:30:b0:
a1:9f:16:f8:0d:60:fd:13:49:3e:59:2a:b9:b8:48:89:a8:65:
52:5d:6c:c7:34:18:f3:86:d6:f0:ec:a0:fa:26:7d:82:ec:e3:
99:7b:33:28:7e:b5:12:ea:5d:72:61:c2:17:e4:fb:95:44:ae:
04:2e:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:41 2025 by rpki-client