Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json)
Hash identifier: 3KuAakGKkdM2hkuv0cXP8ckegpD+5gGcpgWgf5SY76Q=
Subject key identifier: 6E:1E:54:B7:18:24:88:E6:15:02:B6:23:BE:8F:B1:C8:9A:5B:D1:D9
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial: 0194BC3C15111A86D504219B0EC6DD17D89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
Manifest number: 0E83
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: lOpol4DCVWeNp7hEryAk5xGGiGqBhqCll0JTCpvlB+k=)
2: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (hash: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:15:11:1a:86:d5:04:21:9b:0e:c6:dd:17:d8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=6e1e54b7182488e61502b623be8fb1c89a5bd1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:27:e8:cf:5b:72:af:99:37:48:c3:92:ae:
4f:1b:b1:e7:43:a3:81:17:3b:91:a1:d9:92:aa:8b:
42:d3:0d:96:ab:5b:d7:dd:a8:5b:26:e2:1d:be:61:
ac:29:09:0a:66:8c:44:16:93:3c:59:c7:c3:ef:3f:
3a:2b:b7:5f:c1:57:43:55:40:ec:dd:bc:ed:c8:83:
bd:48:9b:2e:11:50:f3:8f:34:e5:49:5c:2a:6f:60:
f2:3a:4d:84:0d:43:e0:c7:38:45:c9:a6:86:e8:f9:
02:71:05:fc:43:e4:ab:47:97:6b:17:fd:d3:a7:3b:
4e:7e:b9:d4:ea:00:6d:fe:af:5b:6b:7d:3f:2c:3e:
c7:55:17:5e:f4:dc:d4:78:7b:99:74:b3:37:f8:b4:
1b:b3:de:91:cd:15:25:2e:3e:80:a3:76:31:8b:e4:
9c:99:f6:7c:1e:24:dc:7d:2e:ba:3c:c7:f4:ae:32:
18:08:2e:bd:a2:f8:be:5b:ab:d5:14:f1:a6:73:97:
09:cc:80:57:62:d5:03:55:de:85:a5:be:a6:22:29:
6b:dd:f8:e1:d7:1e:a0:85:d9:f0:94:a3:7a:0a:57:
57:fe:10:55:15:4d:62:af:5f:93:15:b1:df:c5:31:
ed:dd:b6:4f:93:1a:16:ac:9a:c6:f0:80:05:66:5f:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1E:54:B7:18:24:88:E6:15:02:B6:23:BE:8F:B1:C8:9A:5B:D1:D9
X509v3 Authority Key Identifier:
keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4e:b6:4a:6f:67:61:0e:55:3b:33:79:5b:22:f2:20:88:d9:
96:b9:3f:a3:58:87:b3:31:3f:7e:42:ee:10:ce:f9:66:50:ef:
6f:ae:08:d4:f6:ab:db:b8:86:63:04:ef:55:29:fe:1d:85:10:
c4:f6:93:2c:84:a3:1a:6b:1f:e3:a5:92:0e:a3:d6:13:84:2e:
fa:1b:b1:a0:e4:97:48:e9:0a:0b:97:53:43:42:06:b2:10:84:
3d:1d:13:5c:2f:a9:78:37:f8:c4:f2:66:2f:51:1d:1a:c0:fe:
9f:18:73:b2:d9:83:02:4a:02:c9:01:26:ba:72:20:7c:94:ae:
b2:d2:3e:86:b0:5e:03:87:36:53:dc:e6:5b:3f:e8:11:57:c8:
26:b5:92:0d:33:31:54:5f:76:df:d3:a4:1d:ad:9d:a4:45:18:
23:24:c1:a9:47:da:a3:42:28:03:45:b2:df:e0:06:be:ca:72:
00:e4:ae:ec:97:cb:e1:eb:e0:21:ce:e1:c6:5b:25:59:5a:82:
f8:45:7f:04:2f:51:a0:9d:92:3d:2d:88:eb:ce:4f:b8:c8:5c:
99:8c:81:99:a3:02:96:dc:80:dd:b0:81:7d:1e:98:60:b9:94:
1d:a8:68:61:10:71:6e:d9:8c:42:e2:1f:27:10:1d:5f:cf:83:
74:d4:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:57 2025 by rpki-client