Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: kBqRVwRsp8vp+5ZrDmsk40zpP9DW1a0W1zhf1UNAwIA=
Subject key identifier: 6E:3F:6D:D4:2F:A9:DE:3F:D3:7E:FC:00:17:1C:ED:7F:70:C3:CA:25
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 0194BC3C783BF7BC0587118347FEBD2E2533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: S9GxU5vnz0qTUUSjqHxaSfEbs1qH4KmOEwfEbXSV5LY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:78:3b:f7:bc:05:87:11:83:47:fe:bd:2e:25:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=6e3f6dd42fa9de3fd37efc00171ced7f70c3ca25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:ad:81:2f:a7:21:2f:fc:a3:6f:1c:cf:66:
b2:86:c4:ce:e6:9d:e2:20:e0:4e:18:48:42:e7:cd:
e8:ef:95:ac:ad:7b:13:8a:b2:f1:f9:29:5e:81:75:
bf:0e:ec:69:68:ec:33:1d:1e:0b:04:36:af:0c:26:
63:17:13:d3:e5:36:f5:67:57:eb:80:4d:2c:fb:99:
4a:86:c1:ed:80:7d:35:24:6e:d1:aa:8a:8b:58:5b:
a0:6c:1b:c4:70:53:ca:93:55:06:5c:2e:79:8e:10:
81:d2:3d:67:02:da:b4:79:00:6a:01:f7:7b:2c:cb:
5a:95:d8:43:50:4e:42:46:02:e7:d6:38:de:bc:f7:
13:72:50:11:aa:d9:dc:de:43:3a:88:39:9c:da:bb:
50:c9:15:9d:92:38:1f:b5:7a:77:2d:10:5a:4d:b4:
c5:c3:03:1e:54:26:0f:74:bf:f0:0b:3a:8c:f2:e7:
4c:27:cc:d1:5f:c5:fe:bd:0b:46:fb:5c:f3:01:2c:
bd:46:e4:38:67:67:b0:56:23:ae:5f:14:55:f4:ef:
16:91:a2:05:0e:be:82:fa:1e:12:4b:2e:5c:cd:97:
9c:43:2e:6d:05:c5:fc:0f:fd:20:b2:e1:ce:7e:2b:
c6:a9:b1:d5:74:f5:ec:41:87:a5:09:4d:d4:b3:a5:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:6D:D4:2F:A9:DE:3F:D3:7E:FC:00:17:1C:ED:7F:70:C3:CA:25
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:11:97:69:ff:f7:e7:0e:f5:f2:52:87:dc:5a:65:a8:32:a7:
e2:4d:6b:80:ef:17:76:60:49:f4:b9:84:9c:18:6d:a4:95:f6:
98:3c:35:3e:d3:89:d2:0a:26:51:04:f1:3d:8a:b4:b3:86:15:
1a:9c:fc:e3:9f:80:35:ca:55:bc:de:b9:55:cc:78:8f:cd:c3:
e4:55:28:27:00:a4:a6:cb:ec:6d:a3:f1:4d:56:c4:81:b9:8d:
5b:73:da:2c:0c:aa:cb:96:8c:07:bb:b1:c2:1a:cb:70:4a:db:
cf:c5:95:11:b6:36:77:89:a9:9c:62:7d:dc:6c:73:ff:c2:a8:
0c:11:d9:3f:72:5c:19:95:d8:3e:9b:d7:2b:91:a9:10:34:e0:
5b:88:bc:c0:79:6d:f8:eb:b6:4a:6f:d6:1c:94:21:68:92:e7:
95:13:c9:45:32:d5:c2:1e:53:06:0b:81:83:ca:f2:52:df:57:
0d:35:c4:aa:44:32:4e:fb:53:5d:06:ce:3c:78:a7:a6:06:fa:
b8:70:cc:8c:18:f9:fe:bb:66:14:12:36:a3:8d:ac:cd:9d:35:
c0:86:b3:06:3b:25:b5:7a:ed:70:ca:18:ad:35:5d:b3:00:44:
7a:9a:7c:34:1d:1a:73:c6:4d:f1:1e:2a:3a:a3:fd:58:5e:6d:
db:3c:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:50 2025 by rpki-client