Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier: Q3TVhJns0pTUuw4+/cFRyZNrMaQNYsSLrttV9F7FSRY=
Subject key identifier: FE:AC:7D:36:59:32:4E:D9:3C:60:92:11:9E:02:45:56:4F:37:BA:57
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial: 0194BD17AC171FBEB0951413A14DD2F2FC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: ONQkOkRkp2DB93FS+Sr18bS9NCw6fsA2G2yftUlQu0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ac:17:1f:be:b0:95:14:13:a1:4d:d2:f2:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=feac7d3659324ed93c6092119e0245564f37ba57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:98:90:ef:25:fb:40:59:14:3d:36:d5:30:
50:3f:c3:fa:24:62:48:ba:dd:b0:67:78:a1:d1:6f:
97:4b:bb:07:46:8a:9a:e8:93:2d:50:bd:df:45:4a:
7d:f5:bd:fc:2c:95:1b:c2:e0:44:4b:7c:d6:89:03:
1b:9f:d7:d1:02:e8:a9:85:de:b6:79:34:23:52:6d:
67:ef:cd:ea:4a:23:58:b5:fa:3c:f6:b0:98:12:d5:
ff:a7:90:39:f8:92:32:fe:7d:73:9a:88:e7:78:a0:
27:55:de:1f:11:03:ce:84:5a:b4:44:b2:57:bf:19:
76:ec:0f:63:54:e3:9a:c4:38:7b:95:16:9a:7a:50:
0a:84:af:4e:56:2c:78:a6:f2:e9:d8:dd:f7:2e:62:
d4:09:49:a1:fb:16:34:3c:95:fc:dc:da:16:48:30:
76:7e:92:9f:d8:d9:6a:72:f8:9a:fd:ab:55:6b:c0:
cb:a7:b2:e9:7f:eb:a2:5d:fe:c8:d7:b4:f7:4c:ce:
f3:0a:a1:01:37:91:72:d2:25:1d:ee:15:5a:45:54:
c5:aa:b1:84:88:c9:1e:5c:b6:e6:17:e8:4e:69:46:
58:9a:1c:05:29:cf:f4:af:f0:f4:38:16:33:6c:02:
17:d5:c4:48:0b:98:6d:a0:58:40:57:89:3d:b1:61:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:7D:36:59:32:4E:D9:3C:60:92:11:9E:02:45:56:4F:37:BA:57
X509v3 Authority Key Identifier:
keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:04:aa:a5:73:9e:e5:64:c9:9f:c0:36:16:10:c8:18:f3:
a4:aa:d7:44:41:ec:cb:0e:81:cf:c6:b9:89:70:2b:b9:f7:3b:
e3:76:9b:82:e6:ae:83:e2:94:37:eb:eb:a7:43:a6:ab:4d:93:
a4:6f:c0:d8:43:d5:51:3a:7c:e2:33:91:f9:ea:e7:5e:9e:12:
95:d5:c2:63:3a:ef:de:1a:67:b9:16:23:11:f6:d5:7e:2b:68:
90:8c:fd:f7:a1:4b:06:ad:ce:40:09:5e:68:aa:74:fe:69:67:
44:c3:20:7e:94:d2:db:d6:40:fe:48:4d:b7:03:b5:48:a1:18:
75:65:dd:4c:55:07:7d:f1:5e:75:c4:66:a2:4e:e3:ba:f6:e1:
67:98:96:ce:d0:0b:df:80:90:d8:99:c0:32:ae:fa:cc:97:c3:
5c:e5:39:de:83:fc:95:24:33:85:53:4b:4d:b7:22:1c:9f:c2:
2b:18:ce:4d:c6:b0:b7:5c:1f:9d:1c:91:23:4b:86:65:a1:3a:
b6:e7:24:f0:8f:38:a9:ed:67:d7:ef:07:b3:3f:2d:7b:b9:8b:
98:07:0a:8e:ba:20:94:db:0c:16:21:29:30:b7:e8:f3:4d:c9:
11:e7:d9:64:47:c1:55:54:c0:5f:13:3c:ec:89:77:86:0f:dc:
bd:5c:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:22 2025 by rpki-client