Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: LhJIr1Rpgz6oYJkgbffUvEJg8NT/ZGdeJ3ByvmMS3NY=
Subject key identifier: 5B:6C:51:B8:F1:A8:F3:40:11:72:97:D9:C8:74:3B:0C:F1:BF:DA:FB
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 0194BBCDF42280E94E14BA7CCAD894AF440A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 087A
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: DTpIu+Of40KMSPrtl1qiPsHt7MrodjJndYk2oPG30fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f4:22:80:e9:4e:14:ba:7c:ca:d8:94:af:44:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=5b6c51b8f1a8f340117297d9c8743b0cf1bfdafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:15:45:e0:41:08:b0:34:63:e9:7e:10:48:
31:05:fc:ab:6e:77:63:49:70:ac:a7:29:03:03:1b:
9e:59:03:9f:c5:cc:49:4f:b3:e6:3d:e5:0a:85:f0:
72:c3:c7:ab:33:38:74:86:0c:1a:c3:a5:2a:ae:0f:
9c:b4:12:33:45:35:45:c3:58:63:04:29:c1:fe:34:
94:f2:3e:30:16:03:1e:7e:80:33:d9:0f:b3:6b:4a:
1b:24:e7:ed:a5:a9:06:9c:02:cc:2e:26:e4:34:2c:
aa:6b:4f:11:8c:11:4c:77:b7:08:3d:c5:e2:3f:54:
ec:40:d1:84:44:8d:1f:28:08:0c:1d:fc:c8:79:b9:
3f:8c:55:2f:10:e4:4f:e6:9a:83:a7:09:c5:5f:02:
b0:63:ed:41:de:39:7d:31:b2:47:e3:90:4f:e4:be:
aa:fa:c3:ee:d3:9c:73:03:db:02:d2:f9:89:2c:04:
65:dc:49:5d:b7:41:0b:ac:8d:ad:71:a3:29:fa:4a:
3e:e8:e4:97:50:91:79:0f:74:95:c3:ca:ae:01:b5:
c5:e8:64:8e:a8:e3:db:08:92:f9:e8:3f:6b:4c:4f:
89:1c:07:c3:55:7a:90:ab:17:8b:17:17:a4:c5:c9:
67:2a:36:ad:c6:c7:ec:70:5e:73:85:8e:e0:f3:49:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:51:B8:F1:A8:F3:40:11:72:97:D9:C8:74:3B:0C:F1:BF:DA:FB
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:91:8b:07:04:23:8f:8d:00:29:84:17:60:c7:e1:3b:f7:24:
dd:09:1e:18:61:1f:55:35:89:07:93:0d:54:49:f1:8f:e4:c2:
17:b7:2d:d4:45:aa:48:b2:10:c7:35:30:48:fd:5b:98:db:9c:
f0:c1:61:4d:3b:b9:d4:17:52:89:e3:bb:57:a1:4d:cb:4e:8f:
28:a6:db:dc:75:13:1a:c7:21:f5:8a:c8:48:00:f8:2f:98:cd:
0c:ff:34:cb:03:0e:a4:d6:6f:d2:26:53:ad:48:3d:28:01:16:
16:93:26:30:d5:1b:dd:aa:84:7d:52:13:93:74:a7:6e:6e:8f:
a4:44:07:38:77:64:f3:04:fd:18:b2:8d:e5:82:d9:28:bb:62:
5d:01:f3:01:de:b8:ad:28:c4:f8:29:5b:c8:54:da:56:aa:64:
7d:22:ad:5f:c1:8c:bb:36:ac:75:da:b3:8b:a4:25:0b:f4:03:
1c:8e:42:85:b5:0c:88:16:4f:db:eb:5f:f1:60:8d:55:1f:fe:
0c:c2:d0:44:c2:f2:bd:d7:06:2e:06:6d:2b:61:f0:02:74:22:
c6:32:cd:c4:79:39:43:42:31:bd:a5:02:92:bc:f8:a2:68:98:
d6:fe:a6:35:1a:48:61:27:65:5e:d1:c0:5f:61:bf:43:c5:75:
85:34:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:03 2025 by rpki-client