Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json)
Hash identifier: SyUC37H9oCJ1cLLZPaN3MGzpcmmLj91OaodaVahkpx4=
Subject key identifier: 29:F4:D3:E8:8E:FC:88:96:A1:39:C2:77:5E:90:E5:53:AB:D9:63:62
Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Certificate serial: 0194BBCDCBA580A8828597EAE026B54A43C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
Manifest number: 0B4D
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: eE5+HwcvOG8ir7ao0NdE5TXqcISISOkdwI4Jem9YuBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cb:a5:80:a8:82:85:97:ea:e0:26:b5:4a:43:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=29f4d3e88efc8896a139c2775e90e553abd96362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:16:e9:a2:a5:98:58:2b:ef:37:b7:4a:2a:
12:7b:72:ce:53:9e:90:da:53:37:b2:8a:e5:2a:d1:
37:ec:3e:5d:c5:d0:f2:dc:1f:29:1e:cf:e0:7d:a9:
29:c0:43:31:1c:53:75:32:8e:12:3f:79:86:6c:71:
b6:dd:c9:b8:a1:3c:82:0a:71:dc:9c:25:c6:18:4c:
a7:dd:a1:df:68:a1:dd:a1:3a:5a:63:56:09:4b:b1:
6e:87:d7:eb:15:26:a8:39:37:0b:59:6a:e1:ff:33:
9d:d8:c1:31:9b:de:f4:45:d6:09:d8:d2:c4:66:ca:
6e:60:92:ca:49:f6:2f:ff:03:14:49:4a:d4:a7:1f:
60:af:75:89:cd:6d:33:28:2f:a5:c7:09:8d:ee:bd:
51:4c:05:e2:25:0b:23:18:b4:31:5d:d8:cb:8d:e8:
70:9d:70:f5:28:d1:6e:6d:63:8b:77:14:e7:6b:fe:
e8:4d:ce:de:9c:73:78:39:28:51:08:45:53:05:13:
a1:7d:58:53:67:21:e4:30:20:66:93:eb:98:61:3d:
03:98:3b:9c:d3:88:0b:c2:db:2c:4c:d4:c5:ff:68:
36:5f:0a:df:96:b7:c0:02:90:2c:f8:9a:b9:f8:da:
51:48:9e:3b:d5:1f:9e:b4:2b:65:32:e1:9a:9a:19:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F4:D3:E8:8E:FC:88:96:A1:39:C2:77:5E:90:E5:53:AB:D9:63:62
X509v3 Authority Key Identifier:
keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:22:48:61:1c:8b:5e:36:73:df:0b:38:0b:fb:59:df:98:
86:69:fd:8f:46:02:b1:14:f2:a8:09:43:95:41:cc:a3:a5:b6:
a4:8c:3e:65:c0:df:fe:e3:f3:f5:4a:a2:19:48:68:90:a2:9e:
5a:c2:7d:75:55:7d:75:10:ef:51:ef:bc:fb:2d:98:82:b4:0a:
15:c1:fe:bf:72:c6:eb:56:d3:48:37:4a:b5:fc:f3:88:cb:16:
e4:88:72:b2:25:d9:58:8e:f1:ff:e5:c9:b1:78:61:a5:7e:f2:
22:84:e5:1f:9b:6a:11:85:0a:ae:09:65:b6:30:1e:27:9e:a3:
e0:31:97:3d:30:e8:3d:92:fb:1a:56:09:e8:b2:43:cc:50:6c:
95:40:0c:ed:a9:e7:c1:ef:37:58:bc:c6:43:ac:2b:1f:70:88:
b6:6e:ec:4f:9a:5f:51:56:c2:7c:11:53:70:42:73:ec:e1:ed:
f0:90:8c:a3:3b:8b:14:22:cb:4a:e3:4b:61:0c:de:b4:d6:92:
6c:af:cb:13:c4:23:31:04:fb:4b:72:ae:8f:64:0d:5b:66:c8:
23:ed:e1:c8:00:c7:ae:e4:4b:9a:0b:46:9e:af:2a:a5:ca:25:
e7:7b:77:7e:c0:29:f3:b5:c9:3a:a1:5a:39:f9:78:e2:18:0a:
ef:78:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:30 2025 by rpki-client