Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: HzA4USA098gmfGZM30aR6I6sYjvUJEJ7serFS0TT/7w=
Subject key identifier: 1A:75:47:F1:71:2D:1E:B5:28:75:4A:33:36:EC:03:D8:34:BE:1C:FF
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 0194BC7316E63BEB6BB2F60CC568D7EADE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 0469
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: QEss9zLOzbnk5Xa_0K4YXbMb5qY.roa (hash: OBsJALGCyyQG7Ejkwlv6+1osaKxY665jLogVGloKmd4=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: JnG7DtsZ2RTcfQCJhnjYiHNqG+9JPoFLHb+YBxtOIiE=)
3: iod1FPjVZHROtKiJ8lRk3YiaWZQ.roa (hash: K2cRj1I0UZZyoJT6YPL19GajXyd/qWrS6uFVn+EV4I8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:16:e6:3b:eb:6b:b2:f6:0c:c5:68:d7:ea:de:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=1a7547f1712d1eb528754a3336ec03d834be1cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:6d:30:03:5b:27:f9:0e:9f:94:98:f7:a4:
65:22:d4:79:33:17:d3:40:d3:fc:d2:0a:55:bf:ac:
05:20:eb:8a:dc:77:28:cb:e3:9d:6b:c2:0f:e2:41:
8e:6b:9c:fd:3c:9e:fa:d9:c2:69:b1:22:2d:e4:d9:
74:f6:6c:a3:24:fa:5a:13:56:b7:a7:68:5f:17:91:
b5:eb:58:ab:db:85:0e:61:dd:6c:e0:4f:2c:92:88:
70:fb:c7:ce:1f:a0:0d:7b:14:11:a8:3f:8b:3f:8a:
59:f1:e4:2a:b7:93:89:c6:15:c3:c3:03:8a:7e:a8:
ec:00:88:8d:f0:f7:eb:29:5f:ee:09:c6:7f:83:d0:
15:96:6a:c9:d1:d1:24:43:22:7e:99:8b:cd:e7:e8:
c7:f2:87:49:f1:f8:23:0d:b9:e1:b5:6c:29:65:a2:
e3:b4:09:2d:b8:cb:c0:d5:5c:3f:7f:db:94:94:dc:
09:f5:29:b7:3a:74:a6:ed:ba:fd:9f:04:20:e9:0f:
b1:54:9e:48:ce:ed:b9:65:6d:20:a6:76:78:1b:75:
3b:4a:b6:a8:d7:84:5f:0f:2a:4b:44:4c:2c:52:c4:
ad:f9:3b:3d:f7:ae:3c:a2:16:18:cb:f9:4f:f4:da:
c6:f0:9a:da:da:31:a4:95:e1:0e:0c:e8:02:f9:a0:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:75:47:F1:71:2D:1E:B5:28:75:4A:33:36:EC:03:D8:34:BE:1C:FF
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f8:54:fe:a1:62:c2:0c:29:23:69:58:ad:01:e1:73:61:6f:
60:f9:3c:fc:df:d0:70:96:2b:27:f0:bf:d9:b5:7e:b0:45:fa:
b0:89:bd:77:a2:07:78:12:7b:ab:4c:d1:9e:56:97:95:a4:69:
fb:fd:6b:f1:59:20:85:a0:bd:47:0f:e7:34:de:51:0c:fd:ab:
35:2a:21:25:05:d8:b4:47:9b:26:f6:17:c3:9c:00:f0:b4:b4:
98:88:03:d4:eb:b6:cc:17:26:08:eb:3d:1e:58:5c:e2:92:cf:
c7:33:1a:bb:7f:a3:fa:93:0b:f1:f0:b7:93:96:65:bb:8e:1b:
ac:d2:5a:a5:de:8b:15:69:ea:b9:0c:f3:82:bc:de:00:89:9b:
6a:b8:9f:e6:49:3d:44:15:f0:1d:00:7d:39:7e:9a:d5:f8:8d:
2a:27:2d:0b:c8:01:26:b7:5f:1d:d9:2c:71:19:6f:f4:07:22:
98:41:b0:06:6f:fd:b7:1b:04:13:f1:65:86:d8:20:89:4f:38:
d2:dd:4a:c0:07:23:0d:be:1d:21:db:ca:82:4c:d0:cb:7b:01:
b0:6e:df:24:dd:02:ab:cf:ee:b7:95:11:a2:01:4a:2f:d1:98:
cd:15:85:71:ca:f3:b7:5e:ad:80:2f:a6:d5:91:3b:9f:08:bd:
8f:ed:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:29 2025 by rpki-client