Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: LzKSHMJnVR5nHae3jpTJvfoXdFQ9UPXIPKrQgk2zL68=
Subject key identifier: 9C:42:77:0F:C3:51:35:B7:5C:08:F4:AC:86:1A:E3:CE:AA:1F:C3:90
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 0194BC3C9128373C514138A51E6AEA46D72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 127F
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: L6Csr5sTxjR6IZ2JHT7yUYOh7fF8Gfy0I3hBAQA943k=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:91:28:37:3c:51:41:38:a5:1e:6a:ea:46:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=9c42770fc35135b75c08f4ac861ae3ceaa1fc390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:ea:9d:1a:12:fb:98:d5:42:bc:ff:3b:ff:
c0:58:15:f8:22:dd:33:e6:e1:5a:31:17:74:2c:68:
fd:0c:c8:9b:e5:68:54:af:93:d9:de:9b:6f:7e:57:
e9:bf:cc:9e:c9:b6:0f:da:ef:f4:96:12:09:c1:df:
fb:ec:e0:65:b3:9b:4a:0d:ab:b6:4c:3a:d7:7e:37:
09:33:3e:78:aa:1c:9c:12:25:cc:d3:c3:d4:ae:60:
39:0e:ee:e3:c1:c9:6b:f7:c1:05:b2:5e:bb:2f:20:
53:2f:74:e5:83:ed:3e:7d:d0:cf:cd:9b:e4:34:dc:
9f:aa:e7:16:1d:a1:52:6e:37:d5:16:28:fa:e7:50:
4b:7e:aa:cb:48:2d:81:66:53:84:fb:fe:0c:12:96:
27:47:b5:99:4d:a0:12:4f:a6:41:32:9a:c7:09:5f:
53:76:5c:41:34:cd:27:ac:12:20:16:cd:d1:7d:5a:
62:02:b0:28:0b:d2:fc:17:01:46:2e:7b:be:60:d7:
b2:49:33:e0:97:1d:4f:d6:64:f3:de:75:d2:4e:1e:
33:11:f0:c7:17:71:e4:5a:ef:06:68:7c:ca:1f:c2:
e7:ab:2c:01:87:4b:6e:9e:af:18:2e:2d:bd:1b:fb:
4f:5b:e7:05:3c:2d:3e:c7:49:7c:04:4a:43:bb:52:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:77:0F:C3:51:35:B7:5C:08:F4:AC:86:1A:E3:CE:AA:1F:C3:90
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:6a:e2:ee:6f:7a:9d:97:00:de:ac:7e:af:fd:1b:45:3a:bf:
44:30:98:c7:26:e7:a7:28:50:f9:bc:21:1b:84:d0:f7:5a:93:
99:77:0d:3a:69:f2:18:fd:5a:2f:05:1e:d9:3b:86:ac:d2:0e:
1e:74:97:ba:53:c7:57:a6:d1:ac:22:b8:05:42:5b:02:2a:99:
3c:eb:d8:b9:2a:36:a6:0e:1d:b9:e5:4f:dc:41:30:1f:2c:f5:
85:96:be:38:1d:fc:77:33:bf:c2:88:d8:c2:2a:a9:63:06:4e:
6d:fd:e9:b1:3e:29:5b:a4:6f:cc:f2:7d:1f:12:ae:5f:bf:39:
55:2b:26:21:a9:1b:08:64:fe:f3:98:54:9f:4f:83:46:2d:b5:
9f:74:ee:cc:20:36:85:dd:5a:ad:7f:4a:8b:c7:6e:ec:44:09:
52:75:21:bd:21:60:95:73:f6:27:9a:97:55:02:c8:51:61:98:
f1:3b:b0:af:9e:5e:8f:50:80:ba:a6:45:3f:c3:6a:73:69:f1:
4d:04:4f:76:95:e3:f9:dc:24:c1:88:5b:3a:6b:0b:74:1e:a4:
ea:31:4a:1f:14:4a:22:f9:db:1d:93:b0:1e:8b:fc:f4:2e:70:
39:f4:c2:85:87:b6:8d:f6:fa:e1:26:ea:c3:72:2c:2e:cc:b9:
1e:35:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:10 2025 by rpki-client