Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: XtZFtXmZz+BrvLfH2lg3TbC1HT3ey+DJc91hXWgnb/g=
Subject key identifier: 0F:37:4F:86:60:D1:CA:0A:AD:D5:CD:9D:A4:11:8D:BA:9F:88:CC:63
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 0194BCAA2FA9C6DF6780728D92ABBC000508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 1177
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: liEnGKrzNknTvBMSRGEJ4qHXxrN4gTCxAJrXen3NhJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2f:a9:c6:df:67:80:72:8d:92:ab:bc:00:05:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=0f374f8660d1ca0aadd5cd9da4118dba9f88cc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:b8:fe:b4:ae:a8:83:6b:ce:a4:4e:82:29:
a9:ed:02:ae:e8:ad:9a:97:1a:b7:a2:cb:67:72:f8:
59:13:ac:9b:a2:3e:b2:02:51:5e:6b:fb:2e:0b:5b:
c3:25:1c:19:39:5b:87:08:4b:5d:bf:80:eb:19:68:
79:66:3d:09:e6:d9:f0:f7:cb:4f:74:11:45:ec:4f:
09:b9:5c:c9:3e:72:bc:08:80:8d:83:f4:ad:13:e3:
cc:0d:3f:f4:0e:7f:ae:c7:52:25:7c:23:c8:65:c9:
8d:53:84:b2:b0:d8:14:76:61:f3:b9:e9:de:d6:2a:
1d:a0:16:46:80:2d:66:14:59:59:f4:ea:eb:4c:db:
9f:6b:b5:22:ca:83:2c:59:18:20:cd:83:2e:04:69:
36:3a:e6:7f:e8:49:2d:36:24:bd:9b:99:df:1d:4d:
20:fc:04:92:6c:52:9a:08:cf:10:4c:f3:1e:19:cd:
1c:49:6f:e3:ec:83:c5:e3:8a:04:1d:b3:d4:82:0e:
ad:d3:6f:b7:94:73:84:e6:25:da:f8:4a:4c:40:13:
d8:a5:ce:24:0c:ae:0d:31:29:ec:df:b2:b1:21:3c:
6e:b9:3a:f1:c5:3c:b0:a7:45:a1:32:02:41:25:eb:
4b:0c:2c:55:d6:9f:d5:46:55:35:fc:c2:b7:99:80:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:37:4F:86:60:D1:CA:0A:AD:D5:CD:9D:A4:11:8D:BA:9F:88:CC:63
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:84:d6:48:84:a6:15:00:58:13:ba:45:2d:0f:1e:1c:4c:be:
b1:16:cd:51:15:b0:a4:61:9d:1b:cc:2f:d3:63:be:19:eb:d3:
ae:99:dd:01:d2:03:59:7d:5f:a0:08:eb:02:e2:fe:44:d5:f5:
3b:17:55:8e:15:98:0b:62:b1:1a:14:69:54:e0:0f:b8:44:0c:
02:2c:92:56:c1:a6:a8:f6:c7:34:69:9c:8f:90:c1:ec:de:8f:
51:fe:da:84:62:1a:d4:c4:89:b1:87:a5:71:c3:f5:ea:b0:6f:
59:f3:e7:00:3f:e0:72:cd:95:d5:10:d5:d2:b4:fa:66:98:26:
f3:0c:51:8c:e3:fe:75:2a:90:73:d6:f3:1b:03:0c:af:36:b8:
b0:01:2b:35:32:34:6b:50:d4:64:a4:a6:93:2a:4f:85:a2:15:
90:22:62:76:29:39:e2:6c:11:fe:32:0f:af:dc:f8:74:07:ff:
9b:b6:c1:9c:c8:c4:76:28:01:ce:87:76:fd:cb:0b:72:bf:eb:
1e:b0:f6:75:49:57:ad:e4:55:c3:c7:9b:49:64:92:b8:c8:b9:
68:75:1b:7f:01:f8:71:f3:a2:5d:b6:48:ae:56:b6:45:04:db:
db:86:09:ab:00:63:3c:5f:f0:62:80:f1:a7:50:8b:e5:7c:d3:
ac:d4:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client