Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: ysujEBNymck8MpCod9qSZMZEgwd82i38m0v424LH7Yk=
Subject key identifier: F4:8E:62:72:C3:47:A8:B0:6D:DD:A0:22:64:F0:0C:D2:96:80:9F:03
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 0194BD8537C47DF1470DD4C8D2B7072AC86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 0CE8
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: GdEbP2Uh8RIDJJrf6GnyMQ0k/+H4w5TXSqiDCWZO41Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:c4:7d:f1:47:0d:d4:c8:d2:b7:07:2a:c8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=f48e6272c347a8b06ddda02264f00cd296809f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:8b:55:24:00:b8:cb:1d:9e:35:6e:91:30:
58:36:16:8b:08:e8:31:b1:6d:41:db:ad:41:8a:78:
cd:34:15:68:b7:d7:f8:20:cf:72:92:a0:0a:8b:87:
c4:a1:ef:7f:e6:b2:3e:b0:b2:79:e8:17:5f:2b:43:
fb:90:dd:cf:50:d9:d0:6e:83:aa:28:b5:7d:95:65:
aa:19:16:84:14:77:88:fd:fc:cf:88:18:5e:c1:33:
aa:ba:c6:c7:c8:d1:a7:62:ea:cd:c2:57:97:ec:83:
7e:fd:9c:7d:14:2a:ae:6a:91:8a:9c:3b:2a:fd:21:
06:09:43:c7:0c:77:ee:a7:3a:e5:f7:78:51:d0:46:
cd:bd:89:89:cc:2b:45:f2:d2:7a:45:55:ab:25:f4:
0a:65:e5:86:41:ac:0c:40:5b:e6:e0:e0:5e:fe:86:
be:34:ba:7f:28:8f:ec:3b:f4:58:85:ea:0e:eb:a5:
78:47:19:30:88:07:13:b5:a0:dc:1b:6e:94:5c:33:
18:d0:34:4f:10:7c:b8:05:37:a2:28:47:41:40:be:
c6:11:f4:5a:ff:b9:dc:2e:c6:08:ea:e0:26:b2:9e:
15:1c:29:2f:f9:42:fd:7e:a9:7e:13:c9:61:cf:19:
cc:a9:c1:7e:a1:41:7d:e9:bd:a3:bc:43:15:d2:d9:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:62:72:C3:47:A8:B0:6D:DD:A0:22:64:F0:0C:D2:96:80:9F:03
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:10:10:4e:57:25:f9:e6:7e:63:bd:c1:64:c0:48:c0:40:62:
2e:93:4e:e1:e5:4a:80:4f:5a:73:0a:88:bc:34:22:57:80:25:
e8:50:9c:f8:ef:a2:90:fe:75:06:04:68:b8:2b:a4:b2:66:4a:
1f:24:5f:ac:13:7c:99:db:be:b8:d9:b5:31:1c:1d:ad:de:2d:
45:4c:ec:52:08:92:cd:f4:21:37:e8:12:71:4b:8b:ab:c3:30:
d1:a2:63:56:7c:1a:6f:ea:65:25:b3:69:af:8c:50:78:f0:23:
8b:7b:8a:4c:e1:49:a9:d2:e7:9e:2d:54:ca:25:d6:f7:8d:32:
29:ce:f3:b6:2b:e8:9d:a1:1e:36:cc:dc:f9:80:88:3b:fb:f3:
bd:c0:7e:62:ef:a5:ea:dc:8d:fb:e1:44:31:2a:1c:96:5d:79:
62:c2:34:d4:19:50:ee:c5:f1:2d:06:07:16:e1:19:b8:b2:a6:
ef:63:b5:5a:36:d4:18:5e:d9:24:9f:ca:a5:5b:aa:02:fd:f5:
c6:c9:53:88:d6:77:0d:b0:19:05:da:ac:2e:c6:78:76:71:f5:
8a:99:15:41:93:1e:ec:79:15:12:e4:19:f9:c7:9a:51:1f:c8:
88:a9:f8:a5:f9:4e:99:5e:63:f7:c0:3d:ae:d8:0a:cb:63:54:
ae:0b:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:53 2025 by rpki-client