Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
File: XsApKzJbgsdEucIBMrg7M7Uv_5c.mft (raw, json)
Hash identifier: vmqu63GfnDi8am59AqcHNmbldV46mRp8oPmd/eYB5ww=
Subject key identifier: C4:49:7B:3B:EC:10:2E:2E:0F:1E:85:2A:63:65:93:FC:B4:6F:C1:DC
Authority key identifier: 5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
Certificate issuer: /CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Certificate serial: 0194BC3BF777AF645D3AF0587B6E0F81804E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
Manifest number: 02EB
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: XsApKzJbgsdEucIBMrg7M7Uv_5c.crl (hash: fpKBeVLNURVZtUJTRJRXfjSJ6L63jJC0QevTfS/cPr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:77:af:64:5d:3a:f0:58:7b:6e:0f:81:80:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=c4497b3bec102e2e0f1e852a636593fcb46fc1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:eb:2c:67:98:04:a5:6b:eb:15:d1:ca:f3:
cf:a7:f8:2a:40:87:0f:0f:b7:b8:9b:b4:53:8e:72:
b1:3e:47:91:93:c7:0a:58:fb:45:73:f7:81:09:e0:
ed:0a:e0:0b:18:bb:e7:52:1b:68:c6:b5:d2:6c:13:
13:d9:a7:88:b7:58:2d:9a:90:65:32:33:06:c0:81:
c6:10:9d:d4:33:ff:2f:95:c5:37:68:73:4d:c1:91:
a8:3f:1f:a9:00:03:89:5b:fc:f1:9f:d4:fa:f1:ef:
cd:02:5a:de:64:a7:0b:33:b9:1a:93:42:21:80:ea:
3d:d8:2e:66:17:7e:61:0c:5e:55:5e:b8:27:9b:c5:
ba:7f:99:31:8e:85:fa:55:94:2d:fd:45:36:ca:0c:
95:21:b7:41:e7:7a:20:f2:c8:d2:06:23:60:6c:f0:
e4:58:22:bb:0d:84:aa:94:fe:f2:68:2b:4b:b8:8c:
bc:ea:4b:60:c6:7a:ea:e6:30:79:3f:60:ce:c5:1c:
ef:a1:54:a4:60:ba:6d:cf:d1:80:6d:c4:28:b0:31:
5a:38:9c:34:b7:53:6d:e7:3a:e6:27:f3:b8:ed:25:
28:a2:50:a2:9a:dc:17:58:aa:05:65:c9:64:f0:34:
de:7a:01:32:71:b1:f2:c1:6c:47:13:6e:35:16:7a:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:7B:3B:EC:10:2E:2E:0F:1E:85:2A:63:65:93:FC:B4:6F:C1:DC
X509v3 Authority Key Identifier:
keyid:5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:26:60:1a:d7:ae:0d:00:be:88:46:ef:82:ae:03:13:f9:7b:
cd:6c:24:07:2c:e4:2f:e0:41:2d:20:52:b7:91:bd:60:cc:46:
d7:e0:2c:b7:1b:31:50:64:26:61:26:64:7a:d2:bc:9f:ac:64:
52:9a:55:b6:23:b1:99:b6:c0:de:17:5f:19:93:84:05:c9:cc:
6b:63:52:ca:cd:dc:4e:64:64:c5:48:4b:ff:7c:a4:6c:0f:38:
4b:5c:31:1a:66:84:54:ce:00:5d:21:b7:93:d9:e4:67:33:77:
b0:92:4a:a3:25:3e:b1:27:01:0f:7c:34:3f:ad:e5:17:97:24:
d8:51:0d:14:fa:71:59:9e:c2:59:5b:8f:94:75:8b:31:fb:72:
12:ef:73:cb:46:8f:6d:b1:9f:b1:93:3a:59:de:19:92:6f:50:
61:04:49:da:7c:d9:08:46:af:6f:d0:ad:29:12:08:53:8f:93:
e3:47:ef:4b:1a:15:27:de:94:53:75:0e:9d:ee:cd:cc:56:85:
a5:d7:52:bc:cd:5e:ef:1e:40:82:38:45:b7:19:c0:9f:54:8d:
44:ef:47:ef:84:83:bf:75:de:f6:5f:db:93:85:9a:da:25:75:
40:db:b2:df:d6:2c:05:da:9b:72:68:a9:97:af:1d:1d:ac:55:
40:af:61:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:22 2025 by rpki-client