Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: BkCeHffqYES/hqE7giSd+0DmaK2ldTjfxLNm1F7/NRA=
Subject key identifier: BF:28:CC:59:CF:FA:63:F4:4B:3C:11:C8:AB:B4:70:8B:3A:00:74:14
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 0194BC72F32FB59F8BAA61BEB168DAB11CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 063A
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: mjlhwkNfjBrQW/DOA3X34k4ReTWTycMEjZXZ0K1AStw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f3:2f:b5:9f:8b:aa:61:be:b1:68:da:b1:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=bf28cc59cffa63f44b3c11c8abb4708b3a007414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:24:c4:c3:0c:9a:df:ca:0a:d5:1c:fd:cc:
f6:33:49:6a:2c:e9:79:e3:04:7b:14:5c:2e:c8:e6:
fe:b7:dc:13:b8:38:58:39:1f:bc:5b:e9:5a:e4:1e:
10:d2:a9:0e:f9:42:8d:09:87:af:e4:5e:f3:82:64:
20:e1:33:02:9c:70:7e:2a:bc:fe:e1:ef:aa:70:e6:
a7:37:4b:b2:39:69:1c:ff:2a:97:36:30:29:a2:0d:
aa:cd:21:28:36:aa:11:a7:3d:1b:ce:a0:dc:bf:82:
95:11:93:e5:d5:90:2e:80:8f:a8:c9:51:10:b6:de:
7d:c9:51:b6:cb:05:f0:a9:a3:86:71:ae:99:34:ea:
ec:67:cb:f0:3d:9e:23:bd:62:93:64:28:df:3f:d5:
c2:80:8e:8e:fb:5b:e4:e6:a4:62:a3:6a:a5:b4:46:
0a:73:73:2f:2d:d9:6f:db:03:4d:fd:f2:09:64:36:
ce:1d:45:f4:23:27:39:5d:07:c3:28:b6:e1:2e:73:
83:44:93:a1:65:39:92:49:47:b3:f2:8f:92:c2:9f:
27:77:1e:b5:c7:68:64:35:de:a7:4e:0e:65:8c:86:
96:e3:8a:ad:2c:02:ee:27:1a:50:1c:6b:63:eb:fc:
cc:fb:dc:27:eb:2f:74:5e:ff:a9:84:7e:17:82:53:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:28:CC:59:CF:FA:63:F4:4B:3C:11:C8:AB:B4:70:8B:3A:00:74:14
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:28:d8:c4:11:92:3a:7e:86:8e:c6:73:e2:72:69:26:0c:6c:
05:fd:4c:c8:e6:59:c5:47:f7:d8:64:43:99:9b:ba:0c:e8:05:
6b:ea:b2:4c:8b:cc:11:65:ba:a2:69:ba:27:19:36:2a:d6:56:
36:dd:be:4e:ed:e8:85:42:68:6c:d9:31:bb:8f:d2:03:35:5a:
e9:43:13:92:12:66:e9:f8:fa:c1:b5:72:5e:ee:f5:42:a7:b1:
88:b9:8a:76:0d:aa:9b:05:d9:4d:11:ea:06:28:02:1c:68:ce:
93:6d:1d:e6:47:44:c6:b4:ef:16:e1:63:d0:ae:ff:cc:af:51:
e5:66:2e:c5:d7:fa:07:e6:12:85:48:5e:d1:49:db:0c:1f:0d:
ef:2e:40:da:40:3b:6d:34:89:c2:76:e0:a3:cf:58:18:4e:35:
78:d0:23:2e:5d:82:9e:51:1b:36:16:0f:ff:cb:76:2e:72:31:
88:bc:e0:ae:db:e0:d1:f5:f8:a9:f3:69:c1:83:ed:19:3f:f6:
93:3f:85:c8:92:51:c8:e5:de:e6:20:01:2a:bb:a4:cb:82:9a:
3b:b0:b4:e0:30:24:0b:7f:0d:b6:e1:43:22:18:59:eb:7a:cd:
76:67:1f:33:44:71:2e:a3:ae:e9:d8:a3:27:95:51:6f:86:3b:
b1:ec:e8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvMvtZ+LqmG+sWjasRysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Y2ZlOTBhYWZlMmU4MDg1ZWJmNmYwMDUzOTYwYjk2Yjc3
ODA0OTEwHhcNMjUwMTMxMTMwMDM3WhcNMjUwMjAxMTMwMDM3WjAzMTEwLwYDVQQD
EyhiZjI4Y2M1OWNmZmE2M2Y0NGIzYzExYzhhYmI0NzA4YjNhMDA3NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35UkxMMMmt/KCtUc/cz2M0lqLOl5
4wR7FFwuyOb+t9wTuDhYOR+8W+la5B4Q0qkO+UKNCYev5F7zgmQg4TMCnHB+Krz+
4e+qcOanN0uyOWkc/yqXNjApog2qzSEoNqoRpz0bzqDcv4KVEZPl1ZAugI+oyVEQ
tt59yVG2ywXwqaOGca6ZNOrsZ8vwPZ4jvWKTZCjfP9XCgI6O+1vk5qRio2qltEYK
c3MvLdlv2wNN/fIJZDbOHUX0Iyc5XQfDKLbhLnODRJOhZTmSSUez8o+Swp8ndx61
x2hkNd6nTg5ljIaW44qtLALuJxpQHGtj6/zM+9wn6y90Xv+phH4XglNN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8ozFnP+mP0SzwRyKu0cIs6AHQUMB8GA1UdIwQY
MBaAFMXP6Qqv4ugIXr9vAFOWC5a3eASRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iOTNiMDEtMWNmNC00MzdiLTgzMGQt
ZWIyMzU5YzI0MmRkLzEveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iOTNiMDEtMWNmNC00MzdiLTgzMGQtZWIyMzU5YzI0MmRk
LzEveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArijYxBGS
On6GjsZz4nJpJgxsBf1MyOZZxUf32GRDmZu6DOgFa+qyTIvMEWW6omm6Jxk2KtZW
Nt2+Tu3ohUJobNkxu4/SAzVa6UMTkhJm6fj6wbVyXu71QqexiLmKdg2qmwXZTRHq
BigCHGjOk20d5kdExrTvFuFj0K7/zK9R5WYuxdf6B+YShUhe0UnbDB8N7y5A2kA7
bTSJwnbgo89YGE41eNAjLl2CnlEbNhYP/8t2LnIxiLzgrtvg0fX4qfNpwYPtGT/2
kz+FyJJRyOXe5iABKruky4KaO7C04DAkC38NtuFDIhhZ63rNdmcfM0RxLqOu6dij
J5VRb4Y7sezowQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:12 2025 by rpki-client