Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: DE18QPniG+oZXSd6arJjFskyLQRapKQPxILE/E0HC+0=
Subject key identifier: 57:0D:0C:8B:8A:B3:E0:4D:B9:DE:AF:D3:DF:A3:71:6F:5F:95:09:81
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 0194BCA99A321AAC57FCB5A9803EFC7669D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: PkoyYqJEXPQBpf4r6zlvDyfqklfMrHAdCRobqIKvkoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9a:32:1a:ac:57:fc:b5:a9:80:3e:fc:76:69:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=570d0c8b8ab3e04db9deafd3dfa3716f5f950981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:66:8b:6c:65:79:ba:e3:2b:86:8d:18:a3:
53:ac:e8:78:79:a1:55:a8:53:9d:49:88:a2:ee:b4:
22:bb:5d:7f:f3:e9:a2:d1:75:9a:1f:c4:2a:d8:0c:
bb:8c:5f:dd:eb:9b:5b:c1:a0:4f:0d:60:2a:72:83:
72:6b:5f:1a:f9:43:61:dc:c0:14:72:2f:de:0a:d4:
70:0b:e3:aa:2b:bc:98:d4:c2:01:c8:51:09:b5:5a:
3a:be:17:cf:3a:33:8a:67:51:49:99:f0:34:99:27:
dd:2e:14:54:08:3b:91:4c:c4:87:46:cf:f1:b9:41:
6b:c2:f1:55:24:be:d9:82:96:76:71:0b:83:a3:bd:
76:f8:f5:2f:2a:84:b1:7e:89:ef:fe:67:5c:62:bb:
b0:54:cb:8c:46:6d:db:32:a1:db:a7:3f:7f:e6:94:
d7:1a:7f:8b:6a:24:2e:3c:d5:a0:f8:b3:7c:50:36:
75:4c:50:98:78:62:bb:6b:43:d9:57:7c:35:85:5a:
d9:a7:7f:90:ff:79:a1:7b:ca:87:9b:3a:06:61:56:
c3:c8:a0:0d:4d:b8:46:5d:15:19:1f:7a:80:b7:fa:
21:87:d7:05:a5:6e:ee:b1:d3:e6:63:0d:63:02:48:
66:0e:c6:2d:84:6e:82:09:8f:79:4a:d8:8c:1a:f4:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0D:0C:8B:8A:B3:E0:4D:B9:DE:AF:D3:DF:A3:71:6F:5F:95:09:81
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a0:4d:2f:83:83:13:eb:8d:b0:d3:94:71:27:bd:43:f5:37:
ac:16:51:fc:cc:55:7b:56:3c:c0:fe:26:93:b9:df:27:b7:76:
e6:df:97:23:b0:f6:b3:ba:51:ec:78:bf:bf:e8:12:ed:b8:42:
4e:ed:23:a9:ca:c6:95:48:9c:1f:4a:4a:52:73:45:18:f6:f0:
b2:dd:a2:b2:fb:70:35:59:97:ad:eb:70:a1:ab:a4:00:ea:28:
ae:98:13:21:15:d5:aa:33:71:40:a7:2c:15:b3:49:5b:66:42:
29:e3:c9:21:5d:96:d8:83:21:19:2f:d4:b0:d7:e6:68:6b:79:
4c:15:4b:3e:8b:6a:6a:f6:7c:64:77:d2:d2:71:b4:ad:bd:7d:
87:d1:b1:ce:97:9b:6f:19:d7:be:0a:fb:fc:57:52:b8:20:5b:
e7:16:0c:47:57:4e:ba:31:15:f3:4f:5a:32:9c:d5:b2:39:ee:
41:b3:9f:5d:c0:e2:72:b9:72:b7:ca:6e:16:c5:0c:0b:90:e8:
8c:b9:6e:18:d7:a2:c6:1b:07:57:ee:57:88:19:2e:fe:e1:5f:
4b:26:3c:46:fb:cd:7b:b9:2e:ea:bf:43:5a:67:e9:9e:27:42:
08:ff:b7:50:da:42:5f:00:30:4b:b3:cb:87:e7:07:3e:91:a0:
f1:b3:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:21 2025 by rpki-client