Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: Q4bmVFgPOm8J89VAfcTDW6jOQgaVNhMsDjiL6v63kNc=
Subject key identifier: DE:13:41:D7:10:40:1C:84:DD:C4:A8:E8:E9:9D:C7:9B:BC:95:A6:95
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 0194BC729AA40CA4428EBF6A7A0944B86FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 0600
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: Rj+rILbJ19rjR/JsAkrgs7/ZVTieBHvgZ5L+0cYnr44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:a4:0c:a4:42:8e:bf:6a:7a:09:44:b8:6f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=de1341d710401c84ddc4a8e8e99dc79bbc95a695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:2e:15:b9:89:a6:7e:27:7f:b5:d7:40:12:
ca:60:cb:ca:25:4e:a5:0c:7d:44:db:6e:8e:f9:55:
3c:80:96:6d:92:ad:72:6d:4f:de:ce:79:c0:93:84:
c8:46:b1:2a:20:6e:6b:82:65:88:bd:67:2b:22:ff:
06:22:9e:62:a5:4f:2a:44:02:bb:db:fa:d4:50:0f:
74:d3:d8:06:ee:31:28:eb:ec:9a:5b:82:4b:8b:e2:
9a:92:1f:b5:5d:af:df:7f:1b:91:cd:07:72:10:c4:
26:22:d6:94:6d:ad:5a:4b:ba:c3:28:bf:44:82:c5:
2d:a4:9b:ea:2f:4a:db:ec:16:ae:ac:72:d0:09:9c:
bd:d8:d2:ad:d4:92:91:85:65:36:2f:7f:98:9e:db:
f9:d4:67:fe:33:31:23:3a:a4:9f:99:a9:a9:2a:96:
e5:1a:fd:53:1a:6d:e1:14:96:41:aa:a5:89:a4:17:
c1:ca:82:6f:c3:f2:ab:98:f4:27:92:24:94:a9:d0:
e2:9d:4d:bd:c6:9d:53:67:fe:43:c4:f2:e8:44:30:
bc:d6:e3:2f:54:42:1a:23:46:31:48:76:c3:38:ad:
ed:12:51:fd:77:d9:9a:87:d9:96:72:6a:8c:80:c0:
c8:06:b2:3b:68:bb:d1:fc:ae:0b:e3:27:91:79:98:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:13:41:D7:10:40:1C:84:DD:C4:A8:E8:E9:9D:C7:9B:BC:95:A6:95
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:57:0f:99:d2:65:f5:50:50:74:5a:df:f0:07:a0:3e:24:1c:
39:c5:8b:bc:bd:e0:00:83:81:c5:14:5a:8e:09:71:e2:94:b6:
7d:3a:51:03:95:f7:04:61:05:ce:4f:25:0e:ca:31:6c:d6:23:
cf:e5:87:9f:12:2b:e2:cb:cd:c2:88:98:2a:bc:cc:1a:ed:52:
54:dd:21:0d:dc:87:39:de:f5:35:4c:bf:8f:89:3b:da:8f:5c:
87:99:50:03:3f:67:b6:b5:a9:8c:21:e3:26:53:90:35:85:70:
ee:8a:e9:cf:30:1e:cc:59:3e:c1:b3:cd:eb:9b:9f:82:69:63:
8a:69:68:f2:fa:0f:1c:ae:27:a2:43:32:38:03:ee:89:86:03:
72:38:ac:d5:6d:0a:97:ac:5e:7c:0d:4b:dc:28:3c:44:f6:5e:
63:76:8f:b6:73:f9:7a:9d:9d:c5:d5:0c:01:0a:e1:f3:bc:23:
3c:96:cf:d0:d5:0d:ed:cf:8a:bd:35:63:6a:bc:f5:70:b9:00:
de:5b:55:c1:a6:27:01:19:5b:ec:94:60:59:a0:aa:eb:08:83:
0b:54:73:d8:22:e1:a2:1d:b1:56:97:ef:4e:a8:d3:13:d4:13:
67:71:1f:2e:02:03:c1:98:38:b4:6c:e7:7b:13:b8:4b:f7:46:
bc:d8:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:43 2025 by rpki-client