Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
File: Xl5k_r-lZnT03hZCn13eSdnOk2g.mft (raw, json)
Hash identifier: 8Ok1ocdrUbg+XAgb9K6vs/VxEzOu5dcymcuD2Wc+yv4=
Subject key identifier: 79:AF:63:0F:C5:B2:DE:76:ED:2A:10:AC:15:D1:15:18:DD:11:E7:48
Authority key identifier: 5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
Certificate issuer: /CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Certificate serial: 0194BD17E71269542E258B73126842FFD18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: Xl5k_r-lZnT03hZCn13eSdnOk2g.crl (hash: Pv+H9K8jyWMXQjWq5TqY+aeePCSSmoeJAAjgcVO9gHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:12:69:54:2e:25:8b:73:12:68:42:ff:d1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=79af630fc5b2de76ed2a10ac15d11518dd11e748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9a:09:0b:5d:fc:75:e0:5d:b6:94:f4:f7:9c:
10:c2:e5:78:66:93:86:9b:da:d0:77:1f:8f:08:f8:
ed:93:07:14:eb:42:e0:9c:de:68:d2:0b:d8:52:23:
3c:20:e4:1a:43:3c:b0:08:34:98:5f:8a:fa:85:dd:
a6:f4:b3:5c:89:44:28:c9:b9:09:7f:79:ae:46:e4:
9d:70:d3:ab:90:f1:00:6d:32:02:7a:63:5d:9a:62:
a1:fa:13:c9:72:36:a7:7e:4b:9a:70:2b:4f:be:1a:
ac:f9:28:8e:36:2d:a2:cd:f1:8a:d5:f5:47:21:1b:
28:66:1b:53:7c:68:eb:1c:1a:8c:80:28:08:ed:49:
c7:b5:a6:74:d0:39:25:ed:c2:cd:6a:1b:a9:68:4c:
43:b0:2a:d6:71:9f:a2:2d:10:01:87:ff:26:f3:22:
c4:bd:58:56:1e:7c:a5:88:15:f9:e3:90:51:0f:bd:
7a:be:31:49:ee:fe:ca:02:6e:b5:60:3c:c7:0e:13:
c7:a4:a0:bf:07:db:4d:6a:03:14:1b:d4:c1:34:a1:
4b:01:63:d9:e5:47:cf:67:b0:b9:33:9c:ac:2a:c1:
0d:27:43:75:63:c2:8e:25:47:84:e4:59:12:73:99:
35:f7:d3:39:cb:e2:14:43:72:04:46:9f:8f:e0:39:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AF:63:0F:C5:B2:DE:76:ED:2A:10:AC:15:D1:15:18:DD:11:E7:48
X509v3 Authority Key Identifier:
keyid:5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:8b:75:73:bf:29:60:a6:7d:a0:d9:89:82:ca:84:70:f1:
ba:98:cf:d6:de:88:f8:f1:a5:84:5a:db:05:dd:af:3c:5c:7d:
6a:aa:7e:a4:54:a5:59:2f:fa:c8:53:51:f2:c6:fd:a9:35:8e:
85:83:1d:65:6e:e6:b0:1b:26:8b:7d:66:ee:fa:f6:5b:9d:42:
16:d0:c5:ce:0b:b9:78:0c:d7:96:4c:f6:4f:53:bd:a5:82:fe:
9f:50:ab:07:f4:ac:20:fd:c4:a8:ee:40:98:b1:3b:1b:7c:2d:
19:ac:59:6e:2a:ca:1a:6a:50:27:8e:6b:8d:c2:e6:47:19:3d:
32:35:50:04:78:f4:a8:d5:9e:d9:f0:d6:fe:a0:37:14:3c:81:
15:69:a8:0f:f1:0f:f4:a3:85:d5:0d:ce:d4:1e:e4:44:bb:e8:
43:e0:52:5b:bc:d8:77:1e:ed:eb:b1:d4:db:69:7f:c6:e5:ad:
7f:e9:d4:cb:ce:4a:54:d0:7d:0d:27:80:a5:6d:bb:c1:1e:66:
63:90:db:1b:38:00:f2:f7:4c:4e:11:90:09:74:a6:79:57:5e:
3d:d4:25:34:02:4d:01:32:44:01:66:dd:2b:1f:6a:f6:f3:5d:
b1:8f:c8:e8:10:03:3b:9f:71:0e:9b:93:9a:15:bc:2a:d7:bb:
58:fd:da:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:30:03 2025 by rpki-client