Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: jxFFIqYfTXDmCybGVZzT8PhfDDX25dKu9HBRu1eJuO8=
Subject key identifier: 40:1E:3D:90:E9:CB:6F:85:E3:7B:F7:EF:5D:36:B3:61:87:BF:C8:27
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 0194BBCDF669E2D94EE6BB7363703BB7A87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 11CE
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: 4W5EKGHBiCTAMuR8hZkxtth0E935XlbFaT+xJFc7fTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f6:69:e2:d9:4e:e6:bb:73:63:70:3b:b7:a8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=401e3d90e9cb6f85e37bf7ef5d36b36187bfc827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:32:3c:ca:d1:ec:85:bf:e6:6a:32:2b:bb:
b1:a6:ad:3e:f6:b0:46:f4:23:5a:8a:16:dd:dc:c6:
3a:ca:fd:02:3a:b0:0d:55:00:55:40:8a:30:5f:b5:
96:1f:0d:ba:0e:a9:e5:6b:70:0c:7b:3b:e4:d2:8a:
f4:96:be:a3:6b:df:c7:09:b1:f1:f0:ea:2b:e3:e5:
06:81:11:87:65:96:d4:fa:1f:3b:38:76:4d:54:dd:
7c:d0:f3:2a:a3:8f:93:0c:16:dd:70:36:dc:bf:47:
01:23:ff:d5:53:36:5b:5d:db:fc:18:6c:74:b0:93:
4c:96:fc:b1:d9:a2:16:5c:6e:2d:0c:95:d1:0e:f4:
5a:ea:a3:4b:83:4c:2e:77:f8:c3:3c:8a:3a:bf:23:
fa:22:13:2d:ce:3a:9b:9b:e7:62:e5:7e:19:d9:73:
0e:18:00:c8:f6:f9:ec:3d:d5:52:65:77:6d:aa:81:
8f:ba:a0:43:ad:80:10:12:aa:ba:df:37:ab:06:00:
c4:01:4c:37:13:e4:6c:a7:98:7c:6a:30:27:38:f8:
f1:4f:b7:2c:30:8a:47:df:30:58:62:bb:8f:e7:e8:
8e:ec:a0:42:32:90:63:c1:18:c9:32:a5:61:d5:51:
ca:af:0b:2b:f6:ae:e1:3b:21:ce:d8:5d:c9:6f:eb:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:3D:90:E9:CB:6F:85:E3:7B:F7:EF:5D:36:B3:61:87:BF:C8:27
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7c:a3:42:71:ce:16:1e:63:6d:7f:9d:5a:53:d2:d4:99:63:
cd:47:a5:13:4d:de:b9:15:7e:90:75:b5:71:03:c1:56:18:9b:
f9:31:9f:2d:fe:ab:ba:1b:2d:b9:70:b1:28:18:ea:f1:2d:15:
53:77:98:df:84:89:e3:33:d4:a2:a5:d1:c8:80:45:64:49:a4:
c6:38:12:54:6c:e0:0d:1b:e7:12:b9:09:7a:15:20:81:32:f4:
99:95:6a:b6:d0:e1:bc:ba:04:bf:04:47:ec:2f:a8:f1:80:e8:
fe:5f:4f:c9:ad:31:a5:4b:e1:6d:ff:f0:20:f5:9e:43:7e:00:
0f:b0:25:c6:55:e9:e1:85:01:de:4b:ee:e2:c3:e9:02:20:95:
63:0c:59:3a:80:c0:55:12:95:ca:42:3a:bc:39:0f:69:ee:59:
18:7d:b5:69:75:5e:37:d7:5e:98:37:02:b1:c3:dd:40:14:a1:
6b:8e:c1:b5:4e:9b:1b:08:b6:21:df:64:c0:3c:75:0f:39:1f:
1a:50:76:11:b1:a3:8f:b3:2a:22:ec:67:fd:be:b9:95:f8:37:
50:d4:20:d8:7e:72:66:fc:27:08:76:2d:57:a6:3b:e1:7f:6c:
c6:ef:2f:6b:f1:66:8e:de:31:5c:80:09:e7:ba:ec:7d:f3:2f:
9a:81:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:51 2025 by rpki-client