Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f187a-82cf-4ec3-92fe-01d76b5661fe/1/xoPOi2rRrrgxD7l-XxvZ9oYTfC4.mft
File: xoPOi2rRrrgxD7l-XxvZ9oYTfC4.mft (raw, json)
Hash identifier: 2mbuh+wEz27tUVvmEiXTOJlnSGFDzrV4d6fFumnk1cc=
Subject key identifier: 05:97:2A:9D:1A:26:16:03:AE:7F:9F:DC:A8:4C:81:D5:63:D5:AA:F2
Authority key identifier: C6:83:CE:8B:6A:D1:AE:B8:31:0F:B9:7E:5F:1B:D9:F6:86:13:7C:2E
Certificate issuer: /CN=c683ce8b6ad1aeb8310fb97e5f1bd9f686137c2e
Certificate serial: 0194BC730EA8C0883689F92E3BDCCC11C1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoPOi2rRrrgxD7l-XxvZ9oYTfC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f187a-82cf-4ec3-92fe-01d76b5661fe/1/xoPOi2rRrrgxD7l-XxvZ9oYTfC4.mft
Manifest number: 0674
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: xoPOi2rRrrgxD7l-XxvZ9oYTfC4.crl (hash: lXCZ7JDTyLgqVYHHBTYI1n74SUetrWnuaANfQWRNdTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0e:a8:c0:88:36:89:f9:2e:3b:dc:cc:11:c1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c683ce8b6ad1aeb8310fb97e5f1bd9f686137c2e
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=05972a9d1a261603ae7f9fdca84c81d563d5aaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:88:bb:02:ab:1f:3d:10:4e:e3:f3:d0:5c:
e3:a0:a1:65:9d:d4:7b:95:db:30:43:90:aa:55:a5:
f8:9e:7c:04:e8:5d:5e:13:64:21:fe:f5:de:66:7d:
58:34:05:ab:c8:a7:41:2a:6a:ad:cc:9a:d5:a7:ae:
22:8d:c2:dc:a7:f6:e1:b3:56:09:0d:3e:9f:1a:6f:
46:8c:1c:c4:24:d5:ab:e5:91:7e:14:bc:ab:af:ce:
7d:36:90:c9:33:83:1d:86:8b:15:b7:8d:ad:53:9f:
da:e9:06:b1:45:aa:72:f0:b4:71:49:78:20:c0:fc:
c3:fd:fd:5a:90:37:03:a2:74:65:01:13:f5:66:95:
38:36:10:81:92:02:07:e1:e4:30:45:eb:01:90:33:
10:34:2a:81:9d:e8:96:b0:db:01:ef:3b:6f:32:b7:
9b:7d:17:ed:73:f9:c6:64:f4:a7:b5:a5:d8:4f:f9:
4f:fc:f6:41:b2:06:0a:41:d7:67:6c:f1:a2:af:89:
33:05:c0:f3:b8:b2:ca:5f:bb:17:32:15:9e:10:cc:
0f:9e:18:13:76:cc:2a:17:5f:26:aa:da:4a:db:51:
9c:25:e1:b2:be:dd:1f:87:44:75:43:e0:aa:cd:f4:
4b:65:58:37:cf:ab:f4:be:d5:61:a1:53:e8:4e:66:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:2A:9D:1A:26:16:03:AE:7F:9F:DC:A8:4C:81:D5:63:D5:AA:F2
X509v3 Authority Key Identifier:
keyid:C6:83:CE:8B:6A:D1:AE:B8:31:0F:B9:7E:5F:1B:D9:F6:86:13:7C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoPOi2rRrrgxD7l-XxvZ9oYTfC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f187a-82cf-4ec3-92fe-01d76b5661fe/1/xoPOi2rRrrgxD7l-XxvZ9oYTfC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f187a-82cf-4ec3-92fe-01d76b5661fe/1/xoPOi2rRrrgxD7l-XxvZ9oYTfC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:27:e0:b5:5f:05:b8:92:07:9e:ec:3b:c4:68:ae:0d:74:c6:
32:26:29:14:5e:af:e8:d7:48:ce:48:0f:e2:cd:ff:e8:db:6c:
99:d0:db:69:41:64:3f:73:cf:78:49:d0:76:49:6f:26:22:f3:
35:d5:58:84:2a:7a:d5:32:c8:a5:d3:ca:d6:6f:14:c3:c0:0a:
0a:55:1d:04:26:fe:f4:ce:ed:e4:c7:2c:15:f6:3d:fa:3f:72:
2b:7f:e0:ad:d8:9d:76:5a:05:93:3d:d1:16:ee:f7:4f:e8:e7:
ed:54:39:64:88:bc:a7:65:9e:37:6d:fd:b7:76:e7:5a:0d:6d:
aa:81:ae:9f:21:de:56:a2:f6:51:eb:84:40:b5:24:d1:e3:13:
35:75:41:ad:c4:79:0a:07:6a:eb:66:9d:01:d6:d2:68:e4:42:
9c:8a:9d:ec:ee:15:96:84:c0:71:74:83:64:b7:c9:58:63:24:
61:78:25:26:9e:02:db:41:9a:f0:54:25:b1:4f:7e:55:35:45:
16:b3:e9:e1:f9:3b:e8:51:ad:37:b4:67:d9:f6:00:31:96:89:
a3:c4:b2:78:9b:06:d3:10:75:27:5b:ca:ad:e7:4a:fb:fa:91:
8a:fa:7a:43:77:84:cb:bd:69:26:31:e4:b8:9f:a7:fd:a2:31:
c3:ee:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:18 2025 by rpki-client