Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
File: XtXKWxx3mVWyVz2isQzXxZH57hs.mft (raw, json)
Hash identifier: LwdujEiGfCO4VOLhjcXiDJGqvZljxBnjOBhq5tC1MsQ=
Subject key identifier: 9F:09:42:F7:18:24:53:05:15:62:16:F8:E0:74:59:0A:E2:D3:AB:A6
Authority key identifier: 5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
Certificate issuer: /CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Certificate serial: 0194BBCDDA1AE8DA72A9D9E8825ED4F46F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
Manifest number: 096B
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: XtXKWxx3mVWyVz2isQzXxZH57hs.crl (hash: FrjTo/UtVPdtIkCe+to8TaWZyPa6JrMqWy3DJYZ7g64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:da:1a:e8:da:72:a9:d9:e8:82:5e:d4:f4:6f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=9f0942f718245305156216f8e074590ae2d3aba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:e4:05:c2:e2:3a:45:d3:85:d6:92:c5:f6:
d1:89:bb:ee:76:0e:db:21:26:b4:6d:00:a5:16:d1:
16:9a:f8:ad:fa:4f:8a:41:c1:c0:85:af:e4:92:cb:
e3:0d:77:60:93:0d:45:ff:23:bd:e6:f9:a1:d4:2e:
4f:51:98:69:82:f8:0c:2b:b8:7f:ee:c6:18:48:4b:
05:fb:7c:43:a1:80:52:eb:d0:32:fb:60:fe:48:f1:
9b:02:d5:43:0c:78:06:f6:ea:10:7c:09:1c:07:af:
25:20:f4:52:20:1d:20:97:bb:52:9e:c6:83:ed:51:
6f:3f:32:12:4d:cd:02:26:dc:93:b6:54:a1:a4:bc:
d4:e8:21:65:c7:af:35:60:a6:c7:e5:15:b5:1c:b1:
dd:bf:f1:e7:9f:3a:09:7b:1a:37:55:d0:b2:f8:ce:
84:81:d5:9b:b9:af:fa:5e:c1:fa:4d:30:ea:4c:b9:
92:5a:42:7a:42:83:c2:52:69:54:c1:70:96:17:be:
f5:aa:35:c9:1c:f7:7e:0c:b4:8d:57:4e:ea:84:5e:
db:46:88:ec:a5:61:1b:a1:59:d9:54:4b:a5:78:d4:
cd:c8:55:ae:75:08:c5:80:b2:50:d1:a2:e8:2a:2e:
e5:bb:12:69:3c:7d:de:bb:62:77:04:a5:0b:6b:ae:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:42:F7:18:24:53:05:15:62:16:F8:E0:74:59:0A:E2:D3:AB:A6
X509v3 Authority Key Identifier:
keyid:5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:75:9e:7b:76:af:26:93:ea:10:e5:60:10:db:84:08:c9:49:
58:e3:5e:42:d8:7a:cd:0a:51:dd:3d:28:85:a6:47:59:c3:49:
00:4d:b6:28:91:c5:84:0f:7d:b4:fe:04:6d:9e:cd:9c:22:93:
c3:16:a1:bc:05:34:fa:8d:5a:05:3e:0f:95:16:65:9c:2d:e5:
d5:99:40:c5:e4:12:a5:fe:46:4f:3f:c1:3f:f1:1c:a5:b4:c6:
b9:a4:5a:39:04:cc:52:f2:87:01:69:71:89:c0:85:c2:36:d2:
12:97:02:37:c6:1e:c5:f3:6e:87:38:47:f5:45:62:0f:1e:a6:
c5:a3:9d:55:7d:a7:0c:31:54:54:64:d7:de:84:e2:cb:27:eb:
35:fb:49:55:35:70:4b:a3:09:f0:78:fb:e6:1f:6b:21:bb:99:
0f:00:bc:52:c4:4a:d1:0b:4b:59:d4:77:fd:5f:3c:73:0b:c9:
bb:35:60:9f:5c:ac:79:5c:0a:83:b5:a2:0f:3e:89:04:ec:1f:
fa:0e:5e:82:87:de:9b:70:c3:75:fc:fa:7e:1c:d7:22:0d:0b:
84:6a:9f:f2:11:c7:9c:24:b2:fa:58:ba:8a:8d:89:dc:1a:4d:
5b:b3:e1:4e:3d:d4:9d:51:f9:ba:f0:99:cf:1b:1c:72:37:d5:
03:93:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:33 2025 by rpki-client