Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
File: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft (raw, json)
Hash identifier: vRAbSIs6D4y7vwcydJVQCWyfAl/VWGSOYQH7y0npSKA=
Subject key identifier: 1C:F1:8A:10:38:58:4A:E2:84:C0:7C:98:67:FA:A2:25:04:42:DF:F8
Authority key identifier: 5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
Certificate issuer: /CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Certificate serial: 0194BCAA0607F9D824137BABC159FE7D62C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl (hash: 9ByW298vqoHVJiYjShS0+KDAuVG+SXMX262GRzO9Peo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:07:f9:d8:24:13:7b:ab:c1:59:fe:7d:62:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=1cf18a1038584ae284c07c9867faa2250442dff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:38:91:f4:be:9a:b6:45:0a:ef:8b:2c:bb:
41:88:9e:9d:24:aa:07:08:8f:ba:46:c1:77:23:24:
86:c9:9f:f4:9a:2b:2b:76:42:e9:de:ab:83:70:44:
57:d8:d2:85:6b:74:f5:5a:eb:31:54:25:46:da:cb:
ff:bc:05:75:a3:d7:a8:7d:3c:69:b1:94:93:8c:16:
ff:6f:45:8d:75:d3:28:92:c5:5b:df:f0:3c:8d:04:
c6:84:e6:f3:49:fd:81:d2:1c:f8:70:fb:d3:63:1a:
16:e6:26:6d:1c:a8:83:66:03:9f:de:e2:36:91:42:
16:85:67:9d:b5:25:c3:45:ba:85:c4:1d:cc:10:57:
9b:b8:df:aa:7c:1b:c1:c2:68:68:2a:81:8e:2b:ef:
0d:6a:3b:60:23:d0:26:4c:01:9f:a1:6a:a1:3e:f0:
3c:ae:54:12:1c:72:fb:b1:cf:82:1c:c6:fb:94:a1:
90:18:b3:0c:18:0d:5b:87:47:9c:14:3f:21:54:34:
8b:1b:ca:d8:e9:a5:fb:c3:64:db:84:5c:77:5b:da:
18:21:ab:0e:10:d5:58:aa:ef:da:77:83:23:b7:ec:
b7:bf:da:db:6c:53:6b:70:3c:d7:2c:3c:35:02:73:
6e:0d:05:80:d8:59:85:20:38:16:b5:08:39:8e:66:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:8A:10:38:58:4A:E2:84:C0:7C:98:67:FA:A2:25:04:42:DF:F8
X509v3 Authority Key Identifier:
keyid:5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:91:95:94:04:4f:97:7b:00:0b:3d:ad:56:48:06:1d:b0:49:
f2:7d:c9:02:29:dd:01:ff:01:78:a9:35:2e:79:7c:b5:56:0c:
97:26:40:63:20:3e:f6:00:96:5c:38:86:15:f5:5d:53:de:14:
b5:a5:f0:05:7c:ec:c3:19:0c:97:96:c8:4b:95:32:76:d4:7c:
05:73:bc:5e:a2:47:f7:98:b3:1d:02:16:d9:a7:cd:76:5a:6c:
8f:9c:e2:78:54:82:9d:c0:75:c9:78:eb:3b:ad:7b:b3:15:d6:
a0:ec:ae:70:4a:ae:38:6b:63:ea:06:9e:bd:1e:ec:19:ba:2d:
f0:69:cd:c0:11:ba:ee:47:06:e0:ec:0b:81:73:24:00:59:e9:
11:4d:16:b7:09:39:2f:8c:df:01:77:11:f7:a8:66:21:4f:0a:
d4:b7:93:07:19:b4:2d:e1:c6:89:2c:8d:a5:79:2c:66:79:09:
47:57:f4:c9:f3:df:07:01:2c:44:37:bb:11:23:cb:3e:51:a1:
e5:32:13:51:c8:11:51:33:b9:cd:b8:48:b7:6f:48:5e:fb:4d:
61:7c:45:fc:ea:f2:98:52:e2:f9:87:10:0e:32:b6:14:05:62:
cf:28:19:10:86:38:b5:cc:2c:75:f6:b2:4e:46:05:b3:1a:af:
0c:4b:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:12 2025 by rpki-client