Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: TT7lakITz2+f2zssLvXEfZCL8VapvBwDvaoRyZ76WM4=
Subject key identifier: EE:17:CA:98:7C:F2:7D:67:69:64:79:F6:77:18:1C:1C:A9:85:7B:9B
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 0194BCA99F6A4B58A7264EF6DB53B6144916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: YCWaSm2rffjIiAlTxyt+JnlTtV9w5Xc4DoiLLxUy4m8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9f:6a:4b:58:a7:26:4e:f6:db:53:b6:14:49:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=ee17ca987cf27d67696479f677181c1ca9857b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:cb:7a:00:bf:41:52:60:05:a7:8d:26:b1:
d3:cc:66:37:a3:35:9f:d8:09:e4:69:97:4d:f9:cd:
eb:fc:d6:69:63:6b:bb:1d:7c:4b:48:de:e3:f5:68:
4d:95:21:47:bc:11:06:a8:a9:4a:4d:59:17:e6:c1:
fc:a0:b0:e7:3b:86:c1:6c:21:b0:ae:53:e2:79:ee:
29:9e:d9:95:e2:22:bd:6d:ef:2a:6a:19:60:c2:7b:
75:f6:a0:65:c4:d3:26:38:e5:c6:3c:ba:f3:17:67:
6c:c1:85:92:66:c8:ee:31:f6:64:ab:a3:d2:b2:c0:
bf:bd:f5:f8:7b:11:d4:22:80:05:ce:4e:55:4e:85:
6e:e6:2a:d1:fc:85:6f:11:87:a7:13:fd:d8:05:19:
e6:bc:9a:e6:32:17:2e:91:af:b2:3b:be:e9:59:fc:
ee:2c:d5:3c:b3:2e:04:66:97:49:a8:2d:9b:d0:b7:
85:ba:d1:78:37:9e:9a:4f:81:9d:6b:9c:a6:f3:8f:
25:f2:7d:ab:f9:ea:4e:c1:52:de:f4:ca:b3:29:36:
fe:38:fe:66:18:47:59:ad:dd:dd:09:57:47:9b:a7:
da:bf:54:9b:1c:3b:e1:ca:f2:4e:bc:69:01:74:9d:
ce:78:95:7f:b8:60:80:9e:6f:e0:de:bb:ba:13:cd:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:CA:98:7C:F2:7D:67:69:64:79:F6:77:18:1C:1C:A9:85:7B:9B
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a1:ea:63:ca:6d:e7:59:f0:68:15:5f:71:3b:f5:50:41:ba:
09:57:71:71:cc:a3:0e:1f:49:bb:90:31:d5:c8:c5:ad:e3:18:
67:ff:1f:7b:18:cd:99:6f:47:fa:a0:4f:42:9f:4e:52:cf:82:
99:09:a1:fa:b9:e4:2b:41:32:6f:1b:d8:05:8e:d5:8b:48:9a:
21:6e:2c:ba:50:a4:62:1c:75:10:05:4d:6a:47:c7:17:26:67:
95:c6:e9:23:f4:a4:a8:65:29:3c:ec:92:b1:14:5d:41:d8:c1:
b1:ae:ce:a6:f3:12:77:4d:0e:e8:9c:72:c7:68:d2:5d:57:f0:
a2:8c:56:18:66:dc:f0:5a:68:c1:38:94:4b:19:7c:46:fd:88:
cf:c3:fc:21:0e:80:a3:db:a9:14:b6:ed:20:eb:8e:3f:97:8a:
6b:d6:2b:e1:61:51:31:61:82:45:0a:80:c3:cf:1f:b6:b0:76:
94:d1:48:10:c7:b2:fb:de:a8:0b:54:82:c5:2d:3f:4a:78:72:
86:6d:24:4d:87:85:52:6a:e3:2d:16:aa:38:2f:3e:08:08:1c:
00:ff:4f:6c:df:91:23:74:24:28:7d:6b:6c:00:24:bb:e2:e4:
1a:19:cf:73:ce:09:3d:83:40:e3:3a:9a:c8:fc:89:fc:6f:2f:
90:99:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:33 2025 by rpki-client