Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: 9ert4ziGKEV5gQq9xzWlW/SnSFXhtlJiuloYDkN2E1g=
Subject key identifier: FD:5E:AD:B8:03:76:E2:7A:2B:30:C0:08:0A:40:71:F6:F6:5F:55:0A
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 0194BC72D399BF07A723B0721A66315D93DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 0424
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: IZ5Uw/iNNYldYiiteedfBRgzjrFMZWsLQmuLnCXXiFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d3:99:bf:07:a7:23:b0:72:1a:66:31:5d:93:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=fd5eadb80376e27a2b30c0080a4071f6f65f550a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:9e:5e:91:23:df:b2:a5:98:74:c7:c7:46:
f3:2c:02:08:71:10:7c:36:8a:ff:bc:4e:02:ed:9b:
61:8f:32:94:35:84:90:36:36:1a:ab:38:ec:7e:a9:
0f:54:0e:ea:ce:92:e8:0c:d1:0a:2c:4b:c7:2b:07:
2a:f6:dc:e0:d7:55:8d:e6:36:1a:bb:a5:fc:3a:4f:
9e:3c:28:20:fc:18:76:cf:43:7c:21:10:37:be:57:
b3:fd:9c:5d:19:e8:e8:ab:36:4a:a2:a4:19:3d:9b:
31:d8:29:04:44:4e:f6:fd:97:8f:6a:3e:6d:54:b2:
7b:3e:19:90:a2:18:ec:02:49:c8:9f:5e:77:81:4f:
e9:6c:43:b9:77:ce:07:4c:43:65:12:6d:91:a8:9b:
7f:50:50:b2:f8:0c:a4:77:21:7a:cc:2b:1c:2a:e3:
2c:ea:89:46:aa:54:81:4a:42:79:ce:b6:f2:7b:85:
83:07:f1:94:18:64:ad:e2:c0:11:e5:8d:17:ca:3b:
4e:00:93:59:c7:08:90:12:04:8d:03:27:b8:c1:56:
e0:61:75:31:03:8e:ed:19:85:58:37:85:f8:60:22:
3e:75:21:fd:04:8f:39:2e:cf:c9:6d:a3:09:7a:b9:
54:95:0b:5f:3c:f0:ee:57:7f:f3:6d:66:59:02:53:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:AD:B8:03:76:E2:7A:2B:30:C0:08:0A:40:71:F6:F6:5F:55:0A
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a8:e7:3f:d9:9b:12:38:70:43:7e:3c:bb:79:11:09:9d:a6:
a4:19:0d:3e:e9:90:23:a2:01:58:47:c6:58:0f:6f:0d:7a:c0:
57:ec:10:93:f4:3a:71:4d:c3:7c:d7:1c:78:b1:e1:26:1f:e0:
be:d9:4c:eb:80:73:f6:b1:7f:86:29:ce:91:e5:5e:76:e6:8d:
8c:a5:86:18:96:10:d9:b9:26:98:a0:4f:6f:11:b8:68:f5:61:
eb:6a:66:bd:3c:1d:6a:25:b5:ae:8e:7d:c4:e8:00:0a:ae:85:
3c:4a:86:2c:e0:39:d6:0e:00:06:36:08:2d:ac:d0:ab:08:fb:
26:c4:26:d4:45:78:91:19:d2:7e:93:93:da:78:f7:1a:ff:01:
83:96:ea:2a:06:38:0a:31:77:4b:06:99:c9:a3:e8:84:5b:9b:
6d:89:94:38:26:2a:c0:68:17:12:da:98:b4:72:6a:27:c8:d8:
af:d2:29:0a:cc:e2:ec:9c:04:09:73:b0:af:3d:44:c2:ae:43:
04:28:fc:84:d5:a0:4b:31:c3:b9:5c:5b:16:55:b1:b4:36:3a:
5f:71:2b:d2:ae:e6:71:e5:87:96:b6:06:47:dd:26:47:98:f0:
f2:73:9f:4f:82:10:2d:8e:a7:ac:1b:90:38:5c:49:60:45:66:
59:24:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:00 2025 by rpki-client