Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: /ET4b3jnS2xCM7u5tjLb5LTgYCqpcJ6KhAy5Sgd4Um4=
Subject key identifier: 4B:37:90:00:45:E3:B9:9E:7E:A4:91:4D:E8:77:56:5A:4F:70:13:51
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 0195DFD9654FF03DC73A00F620D1FE470F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 03:02:00 +0000
Manifest this update: Sat 29 Mar 2025 03:02:00 +0000
Manifest next update: Sun 30 Mar 2025 03:02:00 +0000
Files and hashes: 1: F62WfIiTSrMtpYaKvt60lcQtkXw.roa (hash: YJlkN/VgWCfVi9nZv63jvrsBfGYFWAiYVqihH5uZ7es=)
2: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
3: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: ruLpi3jHJEmgrJx3MDDUKV8dUothYRf7BNQyoMgGPdE=)
4: g69Pz3CuRumdk71XePj8dM2ccdQ.roa (hash: nnZldHhJmKFU3ji36X9uDUakGmtJCxtFpshmsg3zpfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:65:4f:f0:3d:c7:3a:00:f6:20:d1:fe:47:0f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Mar 29 03:02:00 2025 GMT
Not After : Mar 30 03:02:00 2025 GMT
Subject: CN=4b37900045e3b99e7ea4914de877565a4f701351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:0c:d1:90:80:5e:d5:13:b8:49:81:22:af:
2d:f5:aa:f6:04:bb:69:20:49:2e:a4:34:cc:c2:f0:
4b:8c:14:55:c7:ac:db:d5:14:95:3c:19:b9:5c:9a:
35:b8:32:fd:80:f5:1c:e6:85:8a:f4:9e:e2:bb:1b:
d4:12:04:ac:c8:be:66:0e:cc:80:e4:eb:a8:f6:b0:
53:f9:37:60:3d:7b:f6:bd:d6:56:ae:ad:34:37:eb:
88:f1:f2:41:da:64:ae:19:fc:3b:32:54:55:85:14:
33:a0:90:57:b3:93:c5:12:fc:c6:ad:b3:2a:a2:cd:
c6:3b:8f:e3:8e:99:77:d8:5b:02:3b:75:92:7c:69:
28:85:08:0c:f8:cb:be:eb:5b:1b:3b:dd:8b:73:c9:
32:66:36:17:f8:3d:32:2f:a3:29:45:d5:a6:ef:4a:
f6:3c:f1:e0:18:19:8c:3c:a2:27:b3:e9:d4:ba:ca:
f4:39:2c:36:4a:9d:d4:04:80:d7:0b:3f:47:b0:ab:
c4:43:c6:46:06:72:1d:19:99:f6:62:69:71:47:c5:
47:41:dc:f6:8f:f3:a5:97:22:86:12:1e:50:1d:92:
a7:65:4d:a9:ef:56:5c:92:19:c8:cc:df:2b:d7:d7:
a4:91:79:af:5c:d9:35:86:11:58:c2:bf:b5:d2:6f:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:90:00:45:E3:B9:9E:7E:A4:91:4D:E8:77:56:5A:4F:70:13:51
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7e:23:26:4e:60:4c:43:7a:3f:83:53:7c:b9:32:88:91:07:
1c:f3:dd:4b:4b:1d:25:93:3b:36:7d:f8:73:2c:12:c2:d7:a0:
8a:b0:cf:cc:51:3d:35:89:11:77:2c:3f:14:26:ad:09:8b:c1:
ae:a6:78:a4:1b:b2:85:46:19:0c:f8:3c:d0:5a:fd:16:8d:d8:
7a:54:68:cc:80:ed:5e:ed:56:3a:8f:20:8a:d4:01:c2:89:3b:
33:33:6e:cf:71:4e:2a:c7:1b:4a:5a:9e:d2:ec:cd:0d:98:fc:
80:df:f2:42:60:b3:ae:17:11:a0:07:2e:fd:22:20:bb:88:8d:
96:57:11:08:05:0a:56:b0:ee:06:86:dd:ed:90:7f:96:e1:91:
62:10:02:07:8b:2c:71:b4:07:68:5f:5b:7c:f0:e0:f2:86:da:
4d:c6:e2:54:30:3f:6f:7b:59:e5:0f:b3:49:be:fc:15:7a:7b:
6f:e7:50:c8:58:c1:f3:2f:18:59:fd:37:6d:31:ff:4b:51:c3:
e5:76:2b:51:de:fc:31:fd:f2:a3:b1:85:ab:1d:9f:dc:35:ba:
c7:a3:71:53:c8:5b:15:df:8b:24:a2:8a:aa:b3:67:1c:74:d8:
a1:de:52:df:7a:ac:34:de:ec:4a:19:bd:77:9b:12:94:c6:d3:
a6:ad:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:24 2025 by rpki-client