
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: r1Juj6Mcmt2jX702W8Sg7MNjXrRvBYbpHC4JcaclYmE=
Subject key identifier: 78:63:10:AD:35:0D:37:9E:01:79:E5:37:20:42:DB:B2:11:1F:AF:FA
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 0194BD85A48D28AC28DD0E0C3FF91F1B16A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: +xKv1OBX6epC6YOd0HCu3jOZGKgOh5I4KPANxFAwBkA=)
2: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a4:8d:28:ac:28:dd:0e:0c:3f:f9:1f:1b:16:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=786310ad350d379e0179e5372042dbb2111faffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:41:0a:bc:49:80:2a:2b:1a:28:5c:cf:d4:
a7:a1:e5:8a:64:d7:49:bc:71:f8:de:26:97:88:4c:
82:68:32:e3:11:0b:2c:c3:7b:31:35:6c:01:99:b9:
00:f3:c7:ae:49:53:dc:3b:09:d5:55:11:5b:0e:05:
db:5d:46:c6:51:03:fe:d3:f6:90:0f:e5:82:3c:8a:
4b:d3:c3:e8:8a:76:fc:f9:84:a4:6d:b2:ac:31:0e:
5e:a8:07:ea:87:47:94:de:12:f3:21:e4:c3:e6:c8:
40:48:af:1f:ac:74:7b:9d:05:f9:78:f9:b0:c5:93:
91:63:a4:12:74:4f:56:44:15:62:32:96:72:8a:7e:
74:6b:44:8a:93:ae:be:4f:75:2b:43:77:dd:13:11:
a0:d9:17:e3:a3:bf:37:2c:0e:37:a9:bb:19:d3:7f:
72:f8:e4:6d:f7:89:29:a2:e8:7e:a7:f2:cc:18:59:
12:c5:5e:a6:6b:40:76:fc:04:3a:69:b9:33:0c:9a:
65:e3:a1:81:96:61:16:a9:64:7c:dc:53:b1:5f:34:
ae:ba:0b:61:b9:30:a0:fe:8e:75:6f:5b:0b:0c:9f:
f9:90:df:c2:78:41:4c:cf:77:63:76:0a:2a:9b:26:
95:99:b7:77:58:13:88:9c:96:4a:df:01:13:f6:0e:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:10:AD:35:0D:37:9E:01:79:E5:37:20:42:DB:B2:11:1F:AF:FA
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c0:ec:f2:0b:ab:b1:2e:0b:ac:31:2d:94:54:71:ae:2d:4f:
45:d2:5b:7d:48:38:81:84:d2:ca:f2:dc:0f:20:fa:20:b1:0f:
8a:32:e3:fe:bb:ae:d0:5f:47:46:82:3a:d3:ad:e7:5e:13:f1:
69:eb:d6:0c:5a:8e:c9:01:37:09:99:a2:e6:d8:9a:3b:a5:bf:
2d:d9:a6:34:2c:92:19:02:03:45:cc:9d:31:fe:5b:68:2e:2c:
dc:ba:e0:d1:f4:92:64:8e:da:3b:38:e4:3e:e2:16:93:7a:ac:
0a:bc:15:59:2f:e8:37:cf:ba:1f:93:d7:ec:41:2b:7b:6c:72:
69:99:9f:64:cd:d8:41:0f:c0:d6:56:08:b7:eb:1e:e2:f1:77:
1f:5e:b2:41:29:41:c5:cf:9e:43:f7:e9:56:fc:3b:42:54:b4:
36:2d:b1:1d:bb:de:41:57:8b:c6:14:9f:06:fb:e6:19:f6:05:
aa:82:da:8d:45:77:7a:31:85:28:c6:f3:92:b9:09:96:4b:02:
90:25:d9:0c:e5:37:e7:16:2e:0a:d1:93:d0:38:53:f1:be:55:
1a:aa:c4:93:2f:6a:f0:6a:43:01:e4:39:83:0c:ca:f8:06:df:
d1:a6:57:06:b0:eb:64:b7:90:73:01:8e:a0:9e:98:d8:30:96:
f4:42:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:37 2025 by rpki-client