Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File: xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier: kuPt32AOrZXz9eGvV4ecSmZiQJ4NcnMe/CWXOj6Dts8=
Subject key identifier: E2:6E:A8:87:E4:70:A5:D7:0F:3D:87:90:9B:4E:5C:53:F4:B0:33:75
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer: /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial: 0194BCE05A3B5E0F9314786EA13E4B0E7A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number: 03FA
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: NxqjgGwpO+G6dI8Oq0CgIhDQMye3aVovyT2EpG+l5sY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5a:3b:5e:0f:93:14:78:6e:a1:3e:4b:0e:7a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=e26ea887e470a5d70f3d87909b4e5c53f4b03375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:bf:0d:a2:8a:5a:c7:05:e8:c2:29:ef:47:
83:9a:71:fc:d2:91:51:c9:bf:f4:61:26:ec:f4:fb:
7a:1c:58:61:71:49:e7:e6:a7:94:e5:b6:c5:1f:ed:
4d:c1:31:76:dc:1e:f1:23:dd:31:a8:35:5d:81:48:
d0:cd:11:21:30:4b:a1:b4:2a:b1:dd:c6:5a:3a:74:
49:85:29:79:53:0c:d3:b9:e9:1a:8f:42:29:6f:9a:
1a:1f:dd:38:c1:1f:a5:47:8e:ac:a9:0a:2c:8e:cc:
de:7e:02:ba:7b:3d:9e:24:38:80:74:55:aa:a1:8b:
27:dc:74:98:07:9b:c5:04:57:e3:83:74:59:fa:1e:
43:d0:ee:09:ce:ec:50:26:cc:b5:b8:ac:77:99:6b:
23:f1:9b:8c:52:4a:80:93:ff:8d:c7:9e:11:de:54:
0f:b7:c4:5b:22:06:83:4e:a5:fa:0f:34:17:ec:cc:
1d:d1:82:6c:96:aa:83:c9:4e:73:2c:79:5f:63:97:
9c:3f:b1:aa:19:99:74:62:61:15:00:d8:8e:da:e1:
70:c1:11:fd:4f:1f:6a:aa:7c:b7:54:85:db:4d:d5:
ab:df:4e:73:28:e0:61:bc:4e:49:02:eb:27:01:ee:
ab:41:50:55:73:41:01:67:0b:c3:41:70:bf:0d:c8:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:A8:87:E4:70:A5:D7:0F:3D:87:90:9B:4E:5C:53:F4:B0:33:75
X509v3 Authority Key Identifier:
keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7e:4e:cd:93:39:a7:dd:25:5b:bb:18:d0:7f:86:d2:b1:14:
b6:f6:8b:8a:01:70:25:26:23:d0:c6:c4:09:dd:7b:0c:c8:de:
46:da:bd:dc:5d:19:ae:a8:81:3b:7b:2d:a6:65:f0:9e:96:b7:
c8:08:80:31:3f:7c:37:48:ab:0c:7e:96:9e:c1:80:68:84:9e:
27:1f:1d:2f:f4:93:31:26:3f:93:3b:ec:37:dc:a3:ff:9e:d1:
2e:3f:77:45:3c:67:a7:ee:64:6c:b8:59:02:76:8c:79:58:03:
5b:b9:cc:fa:84:4a:bc:51:0b:61:0a:0a:b7:b7:d0:cd:b0:f7:
df:96:96:1f:37:13:b8:4f:1e:96:e2:f2:dd:fc:5e:a2:d2:6a:
72:ba:4c:62:20:fb:73:ba:13:c3:40:e6:94:5d:c5:a6:76:9e:
7d:81:73:b7:07:0a:19:4d:c7:bb:d8:ff:da:84:c3:be:7a:73:
c7:bd:45:27:00:88:f8:b8:32:04:fa:50:c9:53:eb:c8:d2:c0:
e5:c7:62:b6:d5:32:56:0a:27:67:d8:c7:73:83:2b:96:1f:40:
63:96:f3:27:e9:6c:3d:ae:65:f8:fd:c4:81:f5:e0:96:c2:0d:
9e:d7:79:64:b5:73:86:2c:cb:7e:ed:f1:0a:cf:14:34:26:bd:
29:3a:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:14 2025 by rpki-client