Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
File: XTAFa8TiA5Om_r9ldrORLH6laaY.mft (raw, json)
Hash identifier: R1DLIqYCpbqvn3PiVv25sAfka7ttY+HiTw8rBYUP65I=
Subject key identifier: 3E:16:F2:9F:A4:65:50:7D:4B:11:8B:09:79:01:B9:5B:D5:9A:BA:BD
Authority key identifier: 5D:30:05:6B:C4:E2:03:93:A6:FE:BF:65:76:B3:91:2C:7E:A5:69:A6
Certificate issuer: /CN=5d30056bc4e20393a6febf6576b3912c7ea569a6
Certificate serial: 0194B037E37BAE6853F2254CC8C79D28D017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
Manifest number: 0291
Signing time: Wed 29 Jan 2025 04:00:40 +0000
Manifest this update: Wed 29 Jan 2025 04:00:40 +0000
Manifest next update: Thu 30 Jan 2025 04:00:40 +0000
Files and hashes: 1: 2Th08CsGcph52DOySFf8avd11s0.roa (hash: WgaVVlF9ZBAWiPJHuR7pDrCRfi4rbJHfsc6PSI0qP/M=)
2: JHjtR6dPHZXFBsIOZw0u6xWP-BA.roa (hash: PHwjXpxNa4Nxa9fqZhKBs8iq8segIku/HFSGGt3kNbU=)
3: XTAFa8TiA5Om_r9ldrORLH6laaY.crl (hash: uqGLmeaUSMRd4vGzNXr9kZPCaP6lsxINpBFArw7kNB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:37:e3:7b:ae:68:53:f2:25:4c:c8:c7:9d:28:d0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d30056bc4e20393a6febf6576b3912c7ea569a6
Validity
Not Before: Jan 29 04:00:40 2025 GMT
Not After : Jan 30 04:00:40 2025 GMT
Subject: CN=3e16f29fa465507d4b118b097901b95bd59ababd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:8b:36:3f:f3:e5:35:cc:b0:90:0f:7f:a8:
78:24:d0:1f:7f:fc:ff:d1:99:77:ae:c5:07:1f:22:
6a:ec:fd:58:83:ae:29:da:d1:7a:86:90:fd:b9:f5:
5a:ae:fe:c0:13:dd:51:fb:40:bf:50:d4:2c:db:73:
2c:21:73:c6:c9:88:cc:74:29:48:1f:d9:75:7c:9e:
e7:2a:ad:38:6a:02:11:12:2c:ca:f3:aa:76:22:ca:
74:6d:ac:63:5c:4d:72:0d:bd:f3:0c:2e:94:13:8f:
38:81:81:89:aa:e7:0a:a1:20:6c:00:c3:00:ff:58:
50:9b:59:e1:d4:15:6d:ce:26:41:6b:1d:8e:29:50:
70:e9:fc:76:66:9f:a2:32:a1:c9:ca:a3:85:9a:a2:
d0:d9:36:5c:3d:52:b6:6d:3f:3e:05:af:52:a4:e3:
dc:32:9f:3e:90:95:c1:e3:ab:ec:dd:0c:a2:66:dd:
25:56:6d:34:90:8c:bb:f9:cb:c1:1d:37:ef:7a:69:
ec:3b:b6:06:12:37:f0:14:85:ab:19:68:32:70:f6:
66:9a:9e:39:66:5f:7c:56:e3:60:37:cb:95:8b:4f:
7e:d8:eb:b1:2c:cd:7b:92:ed:8d:b7:b8:3d:c0:d0:
59:6c:49:9e:d5:73:97:2b:df:cb:ba:bb:b1:c0:47:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:F2:9F:A4:65:50:7D:4B:11:8B:09:79:01:B9:5B:D5:9A:BA:BD
X509v3 Authority Key Identifier:
keyid:5D:30:05:6B:C4:E2:03:93:A6:FE:BF:65:76:B3:91:2C:7E:A5:69:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8f:96:f3:08:5e:d2:e2:da:ac:25:d7:bb:26:c6:80:85:a6:
3b:fd:b8:42:42:ab:ce:6e:86:2a:ec:19:ab:91:c2:61:49:4b:
ca:e7:19:31:3f:ed:df:59:11:aa:06:08:f4:6c:bc:aa:74:c8:
b5:2b:bc:11:45:f3:ff:6c:6f:81:6c:8a:38:de:1b:24:df:ae:
95:2b:0b:3c:dd:77:2c:f3:63:dd:82:e6:e2:20:a6:bd:29:eb:
dd:07:58:60:06:dc:ff:c8:5f:94:52:46:24:65:81:27:a9:01:
cb:06:a4:aa:e0:2a:4e:ea:0f:51:ae:5f:9f:f0:01:9b:21:59:
ba:1f:d0:11:a3:6f:17:9b:25:bc:bd:94:1f:d4:13:40:8c:0a:
5a:ad:eb:65:7a:1c:ff:8d:04:15:04:3e:dc:e4:66:41:0f:be:
6f:18:25:65:bd:89:dd:c4:ef:13:5c:5d:5d:43:60:84:ab:1b:
2a:dc:ca:e9:43:fb:eb:21:e7:31:e6:73:a9:03:d7:53:c2:c6:
40:b6:51:1c:45:da:6e:c2:76:67:1e:e5:ef:9b:ca:ca:12:d9:
85:3f:06:1b:76:a6:01:64:a7:54:f6:51:8d:a9:e5:dc:ec:98:
98:f9:f4:6e:fb:fd:04:1b:7f:10:4a:83:7d:5c:85:52:cb:8f:
ce:be:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:41:04 2025 by rpki-client