Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: ZFkRy0BgbPcPu0l8pl0iR+rnHxzLrrsV78u6lYLyS90=
Subject key identifier: 30:A4:44:87:D5:52:E7:A5:70:29:C7:57:86:6F:49:F4:3E:EB:B2:BE
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 0194BBCED0ECA0592A24E32DAD0165D1D0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: 6f7OeCr8uSz2aeIQU1fXub9ImB3sYDLCxcCmVb24zso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d0:ec:a0:59:2a:24:e3:2d:ad:01:65:d1:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=30a44487d552e7a57029c757866f49f43eebb2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:3c:2c:b4:27:1e:0c:ba:e9:a6:25:51:72:
3f:05:87:fb:67:0b:b8:0a:6e:2f:ee:70:db:00:21:
33:68:1e:1d:57:2f:57:80:37:90:cf:b3:91:75:58:
b6:77:f0:95:60:29:2b:60:66:c0:b5:67:9d:54:09:
e7:d4:f9:79:80:a9:31:e6:5a:e6:9e:cb:d8:aa:39:
fa:d0:75:d0:1e:50:21:29:3b:a0:c1:ef:46:c5:94:
3f:36:cf:08:e4:25:f7:8f:83:d8:31:f4:9a:b4:f8:
21:3d:02:21:b7:c7:8c:6e:1a:2b:31:48:5a:dd:7d:
64:94:a9:56:7e:b5:05:1e:3d:2b:6e:53:99:97:16:
d3:a2:d7:9f:63:bf:36:b6:db:67:bc:db:c1:93:a0:
ca:03:80:64:e7:d6:c7:bd:1b:e5:24:bd:b5:56:5d:
ec:74:4e:f2:17:f0:ff:8c:3e:cd:73:84:ba:79:91:
de:81:1b:88:95:a2:f6:b0:ac:71:a0:8d:c2:01:55:
82:59:d7:a2:07:34:62:8e:5d:06:c5:ad:ed:9d:cb:
84:2d:28:9f:a5:ee:d9:c5:9d:df:6f:15:f7:eb:36:
40:07:27:c3:73:16:4f:ce:40:ac:4d:0a:4f:96:6e:
f4:92:32:38:09:b0:0d:68:01:5f:9a:66:1d:38:a9:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:44:87:D5:52:E7:A5:70:29:C7:57:86:6F:49:F4:3E:EB:B2:BE
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1e:ca:8d:af:eb:a9:f4:6f:31:54:3c:35:27:c3:01:36:8d:
a8:34:52:2b:e5:e1:c5:9f:3c:b6:32:75:b1:0e:13:a0:11:a8:
71:0e:c6:8d:3f:a9:d1:8a:f4:4e:30:93:5b:fe:6f:31:dd:35:
b8:1a:69:d0:71:8d:71:ee:5f:7c:e3:61:84:0f:8c:4e:eb:77:
c5:85:7a:d2:27:0f:e4:66:4f:19:cd:9e:3d:a3:c7:5f:21:0a:
a0:40:1d:27:60:87:85:0d:ae:0a:72:d8:43:2a:8e:f7:05:36:
04:e1:d4:e3:d3:d9:ca:d8:67:1c:9d:38:47:bf:08:26:4a:ac:
29:57:1a:be:fa:7e:dd:c7:0b:cf:53:7f:58:55:0f:d5:3e:35:
39:9c:ed:d0:74:95:f7:10:e3:69:0b:53:8c:96:fa:f9:c1:16:
92:40:c6:5a:e2:42:cb:17:f9:09:9f:16:81:24:c4:1c:ce:6f:
73:00:df:00:7e:c2:0c:2b:54:40:1b:8b:13:e8:36:cb:5d:eb:
88:ae:23:7d:db:0f:b1:3e:89:ad:cd:42:c0:66:ce:93:85:75:
78:78:6e:55:33:b4:11:31:4e:e3:f6:4f:4b:29:ca:64:60:b5:
68:3f:17:49:89:79:7b:b7:b8:18:11:54:74:f4:8e:41:3f:a6:
cc:ac:4c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:53 2025 by rpki-client