Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
File: xASkYSDKwffLHkNvWWnWxDaJoFA.mft (raw, json)
Hash identifier: qW3Ex5to50iojJ6vkqK7/Sk1dTaaJJOzPnwlHQ0OhYc=
Subject key identifier: 57:5C:6D:12:AB:7C:FC:FA:36:53:C0:B4:B8:8C:0B:A8:6D:88:10:44
Authority key identifier: C4:04:A4:61:20:CA:C1:F7:CB:1E:43:6F:59:69:D6:C4:36:89:A0:50
Certificate issuer: /CN=c404a46120cac1f7cb1e436f5969d6c43689a050
Certificate serial: 0194BC728D2C3871BEDE2924C5DCBC9C6AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
Manifest number: 10AB
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: xASkYSDKwffLHkNvWWnWxDaJoFA.crl (hash: yVTm8T63vVa5KYcNjTEMVBM36oRk5gbt6dEiw9t7VBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8d:2c:38:71:be:de:29:24:c5:dc:bc:9c:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c404a46120cac1f7cb1e436f5969d6c43689a050
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=575c6d12ab7cfcfa3653c0b4b88c0ba86d881044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:45:10:56:b0:22:a5:98:2b:1f:7c:10:aa:
c7:50:bb:96:89:4a:d8:95:64:22:2c:19:a7:2b:e3:
82:51:ba:dd:3d:52:7d:6d:96:08:20:77:c4:2a:25:
0f:83:88:da:38:c8:c3:f9:c3:26:95:0e:16:70:e3:
ef:a7:f1:49:1a:69:ef:d8:3c:58:34:c6:7c:ca:08:
38:73:ff:75:79:2f:d2:88:5e:9f:25:d1:d2:01:26:
62:04:48:30:df:44:e4:32:6d:a6:79:6e:5b:5d:b5:
74:bd:36:fa:aa:57:32:ac:08:78:d6:e9:af:c3:16:
08:3f:24:de:07:0c:3f:d2:a5:39:dd:cd:ee:74:a1:
69:52:f9:90:7e:ac:7c:23:53:e8:5f:2d:6e:58:7e:
0f:ed:08:3f:d9:fc:0c:ef:63:77:6e:b5:81:71:e0:
11:a9:dd:a3:32:bf:8d:ef:a0:40:06:8d:17:90:e5:
2a:1b:29:85:d9:77:cf:9c:2d:72:fc:ad:50:bb:e1:
59:1c:6d:c7:a0:ce:ce:50:d2:9c:b1:8b:40:ae:fa:
7d:16:37:ae:8f:b9:c7:ab:7f:92:88:2a:e3:82:4b:
e6:29:10:c3:46:f9:84:d1:86:58:f3:2d:6a:02:2b:
29:19:47:fa:19:27:e4:46:f9:c6:8f:54:70:4b:67:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:6D:12:AB:7C:FC:FA:36:53:C0:B4:B8:8C:0B:A8:6D:88:10:44
X509v3 Authority Key Identifier:
keyid:C4:04:A4:61:20:CA:C1:F7:CB:1E:43:6F:59:69:D6:C4:36:89:A0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:e6:5f:1c:d7:37:65:78:b5:5d:5f:60:ac:01:43:03:d1:
66:94:f4:03:d6:e7:a3:b6:33:cc:55:8f:e2:25:77:40:fa:0e:
2e:cf:9b:65:1d:58:46:fe:52:78:e2:34:92:f7:16:8b:a4:47:
f3:0d:05:df:32:b5:db:2a:fc:21:85:e5:b3:b1:c5:af:cd:09:
8f:45:a0:4d:ff:3e:61:8f:cf:94:03:32:3b:c1:24:2f:8d:4d:
93:39:7d:73:39:bc:26:c9:c1:ff:de:a7:e8:7e:56:d9:92:7d:
d0:e8:27:c5:40:a9:15:a6:cc:67:06:75:d7:e9:ab:a4:c7:3e:
c4:0e:5c:24:79:81:b1:60:0d:dc:44:94:13:0a:c9:f0:fe:47:
4e:84:c7:a4:6d:7a:57:a3:5e:f6:1c:49:2e:fb:35:1b:59:d8:
3f:ba:ed:ca:8e:cb:11:44:0d:52:74:4a:22:66:5d:b2:f0:e5:
11:b1:cf:92:65:11:22:88:6d:38:6a:b8:e8:10:f4:34:b7:b0:
24:28:45:5e:ca:78:20:f9:06:80:48:0c:40:80:f4:d6:55:59:
73:cc:c4:ac:01:17:90:da:1c:bd:3b:51:0c:63:a1:ef:1b:21:
c1:17:4a:1f:9d:33:66:3c:dd:cd:10:f8:ba:a9:2b:50:a2:7f:
24:f6:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:56 2025 by rpki-client