Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier: qDOsnh65nuPeXqNomgRXwQ7C4QHIAitSd1myXnnshKc=
Subject key identifier: 47:93:7C:10:8E:F1:1D:2E:8E:EA:AB:44:EE:84:09:82:D6:B9:BA:D0
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial: 0194BCA9A92B28813F8E36B7E92221FBE890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number: 0227
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: e5uwOm5VI9uWc3gPo2l2ucQIrKbWhhDew5p5daFHrBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:2b:28:81:3f:8e:36:b7:e9:22:21:fb:e8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=47937c108ef11d2e8eeaab44ee840982d6b9bad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:cc:11:27:86:a5:b2:f1:84:90:da:23:c2:
e7:c3:0a:a2:0b:48:f1:cb:22:5f:90:6b:56:27:11:
b1:ed:74:1c:f2:c2:e1:f5:e9:c6:42:c4:25:e3:a7:
a7:0e:d2:3d:b7:f6:04:18:98:14:27:0a:33:1c:e8:
b4:2b:74:15:06:5c:b2:11:90:5e:3a:53:42:5d:1d:
a4:d6:d9:44:0d:c8:7a:f3:a1:a5:82:77:b2:cb:11:
93:a5:17:a4:0d:88:75:a6:ae:85:e7:dc:12:88:40:
8d:50:88:e1:11:7a:22:bb:70:db:21:43:e6:a9:77:
91:4d:7c:76:97:ce:6b:ed:c6:df:d6:79:ef:8f:96:
83:63:a1:aa:94:b0:27:89:8e:ef:0b:d0:c9:a5:a3:
b9:38:bf:9f:6d:46:07:40:98:c0:8b:25:41:17:13:
f8:14:c2:58:ea:cd:ab:bf:67:db:9e:94:06:b0:f7:
c0:b5:a9:9e:73:6c:82:4e:1a:01:a9:76:34:0b:a8:
f6:dd:1d:9b:ba:fa:0c:db:a1:d3:c8:1b:d1:3e:7c:
59:c6:07:7a:b4:e8:0a:96:5a:cf:dd:66:63:01:2b:
aa:4c:b7:59:f2:6f:e7:bd:13:b9:67:f9:94:84:94:
6c:8e:bd:b7:29:55:ca:39:19:04:33:74:50:bc:5c:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:93:7C:10:8E:F1:1D:2E:8E:EA:AB:44:EE:84:09:82:D6:B9:BA:D0
X509v3 Authority Key Identifier:
keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0f:17:86:a8:16:33:b6:59:8b:5c:b2:80:fa:a7:3f:9d:f7:
1c:a5:7a:9b:2c:66:f2:ff:d8:f3:a2:ad:35:cc:25:a3:2c:6e:
12:e8:9f:22:b8:42:bf:c2:48:84:e8:fd:7f:8f:33:0a:d6:e2:
27:2b:a5:00:4c:fe:36:ca:96:5c:f0:c7:39:2c:34:2e:ae:e5:
e2:86:bb:b8:36:af:a3:55:48:e4:80:7a:50:5d:e4:8a:d5:fc:
0b:2c:1e:bc:b4:f8:e4:ce:b5:52:f1:cc:ed:a9:1f:bb:41:e0:
0c:c3:4f:e7:09:6d:ea:b2:f4:db:1e:4b:08:84:6d:16:cf:37:
fa:20:9c:67:78:f3:4b:fa:24:68:a6:13:a8:27:57:65:33:0c:
0c:41:d8:31:70:6b:87:01:7e:88:32:f5:0f:4b:01:21:6c:92:
d3:cd:71:32:b2:fd:14:b9:d7:56:cf:b2:90:f7:3d:9d:c4:c9:
71:34:3e:22:b1:6f:9f:f0:70:0a:26:fd:81:86:12:b5:db:fb:
36:30:ca:41:03:b8:b2:ff:fa:83:35:60:5f:52:04:dd:ad:6d:
ad:fe:90:34:c3:30:df:de:1a:de:af:19:fd:22:87:85:bd:49:
b1:5b:91:c0:91:51:36:66:fb:03:38:57:33:e8:f6:83:46:37:
6e:5a:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:58 2025 by rpki-client