Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: ILRNdXz+FRNNi6JxN70upuGOVQk0T59paHuyMI4MMSc=
Subject key identifier: 68:15:8B:20:CB:D8:0E:1B:91:32:2F:4C:F6:C5:CF:6E:6E:79:0B:98
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 0194BC72F53DCD5DD5A704078D8893AC12D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 0D2A
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: brE+N4ZloqNmKB/QANz53RnNPFUFPU3MCMDj8dQVehA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f5:3d:cd:5d:d5:a7:04:07:8d:88:93:ac:12:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=68158b20cbd80e1b91322f4cf6c5cf6e6e790b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:ed:6a:74:09:af:f7:31:60:c8:ab:d6:5a:
39:44:f6:92:c2:d2:73:4f:08:dc:26:fc:aa:32:48:
45:67:7d:37:af:34:46:19:cb:13:28:f7:8a:8f:d1:
26:5c:ac:04:c9:4b:de:4d:1c:2f:8f:03:28:c7:72:
2c:21:7e:9c:7d:da:53:ac:4a:03:dd:3e:81:ce:ff:
27:17:fa:74:7f:9b:c9:07:38:89:1b:74:72:db:a9:
8e:a2:65:d2:fc:67:b8:1c:11:37:a0:da:0b:3a:5f:
2b:64:21:c3:52:38:6f:40:b3:87:17:f2:de:86:b5:
e0:12:23:01:b4:ba:8e:da:13:76:dd:d4:67:6e:56:
24:cf:5a:95:cd:49:05:fa:d1:6f:88:4e:ba:2e:72:
6f:cd:d2:1c:8e:51:98:f5:42:1e:b0:a4:28:ab:b2:
ad:93:47:7b:98:72:cf:ab:06:a9:e8:8f:80:db:86:
61:dc:86:87:69:5d:20:5e:72:68:13:27:ea:03:b5:
da:bc:fd:e0:a6:88:ac:b9:6f:f1:61:98:ba:3b:68:
d0:c4:82:5d:1f:fa:02:39:b5:e5:18:db:de:81:d6:
53:c8:a2:ed:f1:0d:18:93:af:32:28:9b:6d:f0:e3:
da:c0:76:cc:29:08:66:51:8d:01:42:ad:4a:b6:fe:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:8B:20:CB:D8:0E:1B:91:32:2F:4C:F6:C5:CF:6E:6E:79:0B:98
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f5:5b:d4:92:1a:ed:20:2d:fe:47:57:dc:04:94:9c:14:03:
25:09:67:36:8c:be:3a:bf:1d:c3:a9:1f:8a:ee:fa:b7:da:86:
a6:fe:03:4d:02:18:f4:7d:0f:4c:06:d2:ef:0a:aa:0e:b5:5d:
45:e9:b3:e6:69:ec:65:83:5a:5b:98:2a:13:37:77:4b:91:e1:
39:ae:97:8b:30:bb:82:75:76:ba:e1:2e:6c:d7:22:47:67:65:
5a:49:39:3d:35:ed:0e:a5:15:9d:62:7d:e4:bf:15:d8:7f:c7:
2f:23:84:ce:60:88:6b:fa:50:19:1a:29:df:fd:b5:5d:30:94:
0b:16:92:49:83:07:cd:97:a6:95:1a:39:8c:4c:bb:8c:df:cf:
80:be:2c:6e:11:78:30:5d:85:dc:82:cd:e9:18:56:23:ef:4e:
08:4c:3d:30:0d:b5:b8:d6:50:cd:87:b7:77:79:75:89:4c:32:
98:2a:13:7c:c9:c9:40:11:35:e9:8b:62:ed:7d:dc:21:91:1f:
dc:3a:d9:17:6e:b8:f2:9a:5a:cb:ea:a1:b6:f0:54:e5:b8:46:
78:8d:3c:cf:92:52:0e:15:0e:00:45:9b:be:64:b2:73:33:19:
b7:36:b3:07:c0:84:45:63:d9:f9:91:38:34:c0:fe:52:da:b4:
b0:2e:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:41 2025 by rpki-client