Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier: vOu/d2clqMHuNlZipy0iCvUbUafb2tj+fI76YHKN234=
Subject key identifier: 05:DA:81:7D:D4:9C:1E:C5:00:C9:51:56:48:38:69:46:62:32:1A:0E
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial: 0194BBCF092E27B0215C5B916AE7C94787CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number: 0836
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: k6la7HRIaPqbBsQzbnYSKoalCwVr/vawQdFNJA6Mg2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:09:2e:27:b0:21:5c:5b:91:6a:e7:c9:47:87:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=05da817dd49c1ec500c951564838694662321a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:af:c2:31:e1:05:88:a7:c0:3f:bc:54:90:
05:f6:ca:81:a8:41:2b:9d:6e:d1:15:3e:dc:8f:d4:
f7:40:c3:98:ab:17:4f:ef:ee:1b:e6:8b:8e:a7:5b:
0c:50:6f:43:d8:90:c8:7c:1d:9c:53:42:5b:22:ad:
f3:6c:61:e4:0d:c0:66:e5:5b:7e:d7:71:26:0d:92:
66:ca:4b:d5:ce:35:7c:4a:cf:9c:c5:9c:79:21:51:
2a:75:7c:a4:15:bf:ed:7d:a9:ad:94:57:ed:3d:d2:
70:18:65:25:22:06:81:68:60:0d:dd:77:68:da:c6:
78:31:9c:c2:ed:ab:f2:3d:44:74:31:ab:17:d0:d4:
4a:f1:5b:78:91:ce:dd:cd:86:d5:93:da:dc:8d:4a:
e4:5d:25:82:e2:d3:4a:2b:97:37:a0:fd:1e:bd:3e:
b0:3e:87:11:03:90:f5:63:77:36:b2:92:ea:2d:a7:
7c:d2:1f:dc:13:15:5a:06:55:69:c8:b0:53:8b:29:
89:fb:9c:77:45:54:b2:d5:44:e7:a7:d6:31:0e:06:
43:b8:ad:e5:7b:e9:a6:bf:9a:33:ef:7f:21:44:4f:
81:97:bb:19:9d:7a:7a:bf:b8:35:a1:83:e6:bc:04:
46:9d:f0:02:47:15:e6:71:4c:6e:13:2f:2d:e8:0e:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DA:81:7D:D4:9C:1E:C5:00:C9:51:56:48:38:69:46:62:32:1A:0E
X509v3 Authority Key Identifier:
keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a7:a1:94:d1:de:f6:59:2e:89:96:fa:9a:f1:73:a0:0a:e7:
18:8c:d4:fc:36:87:4e:b8:26:21:7d:c0:52:6f:13:dd:e8:19:
0c:7a:a5:72:0a:5b:4e:2a:5d:9d:50:51:cf:04:fc:d8:00:21:
bf:f4:86:d2:da:79:61:e7:4a:3b:4e:34:07:71:0c:0f:d6:6d:
e7:05:e8:97:c9:db:28:bc:70:02:a2:e3:c8:b1:e8:d4:a1:2e:
5d:c7:26:22:59:ef:84:e4:ae:fc:59:e3:bd:fa:2c:f4:63:0d:
ee:ac:41:e1:5b:40:d4:d3:bf:45:09:71:c9:a5:7c:6d:a8:f2:
ce:a8:80:f0:df:61:3d:17:90:32:e0:f5:24:fd:0e:68:fa:2d:
c5:18:a3:ce:94:c4:fb:8f:1c:af:02:b1:6b:ee:82:22:9c:b2:
32:0d:f2:8a:f4:b3:8a:9e:c2:fc:cd:35:31:72:4d:0f:f8:65:
8c:d4:03:19:b6:d9:90:5c:38:e3:9a:fa:05:ef:e6:00:8a:48:
be:0a:53:0b:48:7e:a4:eb:d7:2b:91:a0:b7:4b:fd:e8:6a:de:
63:9d:4d:d7:5c:13:b0:5f:3e:9b:3a:7d:b0:90:e9:dd:6c:f2:
0f:01:4b:fc:ed:50:2f:a3:e4:5c:4d:5a:9f:24:77:78:ef:df:
50:f5:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:38 2025 by rpki-client