Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: qFs3As1MJjkNcnxedfsI/kkNDPKD1Xe3lCxOQyaL0w4=
Subject key identifier: 0E:BE:EA:1B:86:DB:D5:91:50:2D:50:BC:98:B0:E3:2A:AB:90:E1:D2
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 0194BC3BCEAE60DB956BFAB22A0106DB5939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0A0F
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 8tsNYx+F9mGXzJGdERn6Yji25qsZ8b3jYlM26th3TgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ce:ae:60:db:95:6b:fa:b2:2a:01:06:db:59:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=0ebeea1b86dbd591502d50bc98b0e32aab90e1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:e2:44:51:42:15:d7:1f:c7:bf:15:45:80:
f2:f3:e0:02:d4:d0:b4:c2:eb:52:f0:db:20:90:e9:
ba:97:5c:72:32:32:d5:8b:72:16:f7:c7:72:2b:85:
86:ee:f7:e4:dd:be:9f:14:1d:03:76:5a:12:27:c7:
8c:16:0a:98:30:e9:63:d2:40:07:c1:9c:5a:08:ef:
df:c1:57:59:9d:48:b3:a6:d1:d1:62:69:9b:95:50:
c4:2f:6a:e8:e0:d0:fa:85:a1:a0:05:de:23:8f:43:
63:e8:54:21:2a:8d:fe:d5:cc:9c:45:dc:9d:6f:72:
5a:13:66:93:be:84:ba:0b:72:97:b1:c4:2a:9c:f1:
bc:59:e1:c5:b8:e0:04:33:9e:d9:bb:04:9a:31:26:
b2:d0:8b:63:2a:1b:24:92:ce:df:0f:2a:d2:5f:ee:
20:0d:bf:08:1e:10:60:0b:c4:9a:65:12:1b:6c:c6:
09:8a:08:f8:c2:3d:d0:40:67:0e:ea:2a:bd:27:5a:
d1:88:b4:2b:69:c1:8d:85:ca:04:84:9a:68:74:a6:
bc:ef:d7:ab:cc:13:8f:58:ea:13:6c:dd:c5:3c:b8:
02:c4:1b:5c:33:31:b1:91:08:c2:a8:5d:ad:70:1c:
51:a8:63:90:0b:9f:cd:4c:d3:bc:97:00:a0:43:ea:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BE:EA:1B:86:DB:D5:91:50:2D:50:BC:98:B0:E3:2A:AB:90:E1:D2
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:95:f3:92:85:ac:58:40:a3:29:0d:37:bd:2a:61:32:6b:83:
89:c5:95:e9:dc:3e:a2:d5:ce:f9:b3:dd:ec:dd:e9:c6:c3:cf:
d3:cc:30:d4:8f:be:ad:58:fb:d8:6b:77:bf:1d:c8:2d:f3:5b:
e3:2d:9c:38:43:ee:df:c2:6d:39:8f:9b:f0:12:10:5d:39:18:
3a:71:c9:d5:ec:29:13:d7:19:a4:17:fe:83:31:4c:93:a9:e8:
0f:37:0e:bf:57:52:7d:9c:d0:b0:5f:50:ca:59:8c:62:b0:e1:
74:7e:a4:a7:dd:53:9e:43:b2:06:e3:0b:c2:97:8e:2a:63:d3:
44:b3:ad:dd:46:c9:8d:b1:a2:57:3f:1e:c4:55:9e:91:a2:db:
ab:9f:d9:cd:e3:04:58:8c:3b:cd:a1:8d:cf:da:32:fe:9a:3a:
a1:3a:6c:d6:ff:a6:cf:cf:86:8e:ce:95:89:92:31:35:c3:bd:
f4:17:ad:75:b0:73:f0:a9:8f:85:2e:e7:bd:0a:66:3b:90:9f:
85:16:a3:6d:14:5a:53:fb:89:5e:b3:67:21:a4:aa:31:f0:0f:
bb:8b:a9:d9:48:3f:cb:f2:f0:70:50:c4:c0:91:75:57:40:98:
e9:85:24:d4:b5:89:bc:e9:9a:27:39:10:41:97:d4:9c:46:6d:
96:18:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:15 2025 by rpki-client