Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json)
Hash identifier: C5M8ar/luuyj+pcwqDla6VuKZWaV1SQlGWuZCPqis8o=
Subject key identifier: 20:44:F9:AA:D3:6B:F1:A0:1F:FE:F0:28:08:95:4A:72:03:23:6E:86
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial: 0194BBCEC5F879276432847514AFF873F11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
Manifest number: 31
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=)
2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: Qf4J9UbJa1ozmv34ToQ1FxcDXRu0QQLkLnhOAdXAOcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c5:f8:79:27:64:32:84:75:14:af:f8:73:f1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=2044f9aad36bf1a01ffef02808954a7203236e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:d6:11:8d:2b:01:ef:02:6f:bd:ee:e2:ea:
90:ef:a0:3d:0c:8d:61:a7:7e:f3:b0:12:78:5a:a6:
e6:3e:e5:23:08:f3:a7:56:8b:7e:06:89:ce:2d:59:
57:f7:bb:10:79:63:d1:d0:8b:0f:0e:86:2a:e0:84:
78:1e:1e:3b:57:0b:e1:be:ea:16:03:2e:fa:e4:73:
50:a3:9d:0a:f5:a5:8f:6e:e9:a3:84:71:c4:2e:bf:
6c:3f:b2:52:74:9a:37:c5:d5:86:5b:97:7d:54:19:
56:e5:fe:35:fd:fa:fa:1f:be:a4:89:2c:2d:1d:36:
8b:51:64:2b:dc:ed:be:b3:23:89:2e:13:59:f6:41:
89:9b:0c:7d:e1:9e:ab:ad:c6:5b:ff:af:11:cd:24:
1f:5a:1b:5d:61:23:55:f2:06:b0:cc:1a:3d:15:a1:
39:a9:66:9b:7b:40:8b:04:d1:b3:1f:aa:8c:90:00:
3e:49:68:9b:09:4d:a0:2d:da:c2:69:15:32:1c:55:
e4:23:f5:de:b2:b3:05:e4:91:b4:d2:df:c6:a4:8b:
4a:f1:0d:95:e1:f8:02:0f:86:1b:a8:65:c5:98:3e:
84:0a:4f:bb:2f:fe:e2:e0:3f:85:6f:96:d3:c6:d2:
dc:a5:c1:66:17:4b:27:d8:f8:0c:b8:3d:96:f4:3a:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:44:F9:AA:D3:6B:F1:A0:1F:FE:F0:28:08:95:4A:72:03:23:6E:86
X509v3 Authority Key Identifier:
keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:27:f9:de:88:b2:16:46:46:51:ff:03:34:03:2d:d7:a7:
da:c6:84:cf:b3:70:ec:04:76:e1:5b:43:11:ab:3c:b2:48:89:
e9:19:e7:1d:11:e5:3e:62:7b:2f:29:89:c1:52:ed:b9:30:2f:
f8:9a:f7:9d:fa:12:eb:53:e9:7b:2b:7b:c3:06:58:b8:93:ce:
4b:e5:b3:af:6c:07:58:51:f9:29:ad:aa:45:19:7e:1b:8f:f3:
e3:a1:4a:71:c3:c0:fe:7d:5e:5b:9f:8d:87:ce:92:59:72:53:
5a:bf:0f:c4:b0:03:c6:0d:24:74:58:4b:38:3e:e4:6a:1d:e6:
25:c7:a8:97:b1:81:d8:00:df:e9:5b:59:ab:4f:aa:79:2e:05:
ac:4d:81:e6:47:75:4b:69:de:6d:48:ad:28:64:0d:c4:dd:01:
1f:c8:bd:f0:d9:85:4a:09:d2:07:53:c5:8b:99:18:55:8a:50:
92:e8:61:7c:b2:c3:e0:ea:4e:d0:42:e9:11:51:0c:1a:7e:17:
53:75:31:7a:53:0c:db:62:ea:d9:16:5b:75:76:79:70:c9:86:
18:11:13:e4:25:f1:48:a4:98:65:97:55:90:bd:42:fc:50:2b:
8e:5c:d4:1d:c4:99:ca:89:c4:89:1f:35:5f:bd:2f:9c:f9:53:
7d:b2:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:58 2025 by rpki-client