Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: QwNYTyUJ5KUdG4jN+tS61oml2Sz03BLCpb3xgWBqX1g=
Subject key identifier: BA:2C:BF:8E:17:17:AB:C9:10:AC:45:E3:44:21:DE:7A:94:2D:F2:CC
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 0194BCA9F81C358B4687662737C819FF20C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 0489
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: MenwEiwxUJYw4GENHwOIEd0CqTKA2FXwGLlbqhBc85E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:1c:35:8b:46:87:66:27:37:c8:19:ff:20:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=ba2cbf8e1717abc910ac45e34421de7a942df2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:54:41:16:d9:ec:51:e7:00:14:a5:96:18:
64:a4:1d:6b:ea:2d:dd:3a:ce:8e:a5:0d:c1:a6:0f:
ea:aa:fb:c7:a4:39:3a:40:13:4f:d3:e7:d3:95:22:
d9:a6:07:20:62:0e:83:8a:4b:87:bf:0b:4f:32:7d:
70:fd:78:7f:e3:74:85:f1:2a:61:d4:94:f4:ff:08:
c7:6e:c3:90:aa:31:81:60:cb:5a:cd:86:c1:7e:ec:
f9:4d:b9:a1:e8:3b:81:6a:66:97:1e:2b:e7:5c:df:
47:3e:b0:f5:5f:5f:99:cd:d6:4e:3f:b6:ba:42:6d:
89:93:1f:04:54:d2:89:0e:0b:e8:61:9d:c7:6f:4a:
90:47:14:a0:5b:0f:63:c2:c9:87:44:fb:c8:78:f8:
e1:8e:82:54:a5:d9:44:20:01:84:c2:3c:12:bc:14:
94:45:8f:a6:86:dd:aa:98:f9:ef:ff:81:f4:fa:e2:
72:8c:f0:83:32:ae:70:0e:ad:45:2f:37:26:15:74:
a3:90:03:fa:a0:ac:8d:a1:5a:d0:50:d0:c5:14:55:
d4:eb:3a:07:bd:ca:90:75:b2:50:7c:f0:18:d4:b0:
21:c6:5c:e9:7d:ee:fe:e3:18:67:ac:b5:34:59:01:
a1:67:da:09:df:74:45:c2:e9:50:1b:f7:54:8f:0a:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:BF:8E:17:17:AB:C9:10:AC:45:E3:44:21:DE:7A:94:2D:F2:CC
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:af:e8:f8:09:c4:a5:42:cb:85:c0:7b:8e:7b:e9:95:1c:89:
2f:96:f7:05:dc:89:c4:69:30:36:29:e5:21:a1:28:40:12:93:
0d:70:2c:2e:d0:a5:f7:b0:e8:fc:17:5b:b8:40:64:da:61:f6:
bb:70:80:7b:9c:9f:4e:df:7d:6a:9b:0f:3d:82:3b:85:c6:54:
5c:83:b9:a2:04:36:a3:3f:e4:b2:40:27:c8:04:74:4e:4f:40:
ed:1b:71:76:dc:11:98:2f:1d:d5:67:48:5c:e4:8b:e3:5b:68:
d0:29:d5:20:52:57:4a:6e:9c:06:6d:23:ca:54:76:6f:4d:51:
2a:5a:14:b8:c6:7b:48:d1:0f:19:db:03:9d:2e:91:ff:54:49:
c6:f7:da:5a:6d:33:73:ab:d4:df:43:35:0c:74:45:a7:ee:d4:
29:55:62:b2:39:60:bb:ae:66:21:22:44:85:c6:a9:dd:4a:c4:
6d:a3:7b:ef:4b:88:75:bd:4a:5a:36:89:7e:8a:4a:68:9e:ea:
a8:1f:f3:72:00:09:16:7e:73:d7:0e:47:33:76:71:5f:7f:45:
13:a6:8f:6b:d9:7c:02:5e:ec:6f:31:5a:d6:64:8d:4c:1a:2e:
7d:a4:8c:0b:a2:29:66:55:d6:f8:e4:6a:d2:e9:cb:f5:d3:86:
f8:34:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:18 2025 by rpki-client