Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: WDjtSq9DDSeWt1cNild8xrSAnXr8h2aD8hSKx8nha9U=
Subject key identifier: 23:EA:F3:4B:B9:1A:B0:84:0B:9D:A7:D8:8F:8C:B3:EF:E5:1F:3A:3C
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 0194BBCE42CCA9531EFF52282C38C3145838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 095A
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: Sn4ga3wO3rTqbkNXPjDDptF22P6dzeV2CwMRsLZpOfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:42:cc:a9:53:1e:ff:52:28:2c:38:c3:14:58:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=23eaf34bb91ab0840b9da7d88f8cb3efe51f3a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:34:d3:0c:1c:1d:34:e6:76:2d:4c:ac:1b:
94:bb:11:57:8a:01:81:74:94:a7:76:a2:c2:09:d2:
d4:a4:a0:22:2a:df:0b:9b:14:66:28:89:92:9d:c1:
2a:0f:6b:0b:84:19:ea:88:5c:5c:93:a2:65:e7:43:
43:a5:b3:4d:4e:df:db:23:db:ab:71:95:2e:2c:69:
82:b1:9b:fb:0f:db:43:59:bf:e0:50:38:d1:76:8c:
fb:f3:38:24:44:d0:38:2e:9b:4d:d3:10:f8:69:97:
80:90:d7:e6:38:bb:6c:35:a1:5e:d8:28:db:9f:6f:
89:a1:59:6a:44:1a:00:6c:c1:5c:d0:f8:fa:4c:0a:
5e:5a:d1:67:87:ed:dd:5d:d7:51:0a:b1:fc:7a:ba:
f8:6a:ec:72:95:c3:27:06:88:6a:f7:11:ba:40:c4:
63:58:65:e7:f2:93:59:44:ba:bb:b3:bb:2b:d5:cf:
71:7d:2d:b9:a7:7b:81:bf:c4:df:54:44:7a:2a:2b:
55:cd:6d:4a:2d:a3:8f:95:bf:9b:80:9e:9d:67:e3:
12:f4:93:e1:86:12:07:33:e5:10:95:bd:5a:c6:01:
bc:9a:33:54:cb:0d:c6:93:15:26:7b:6c:84:1f:bb:
48:da:94:43:dd:c8:ab:bc:30:ea:5b:94:5a:fc:ed:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:F3:4B:B9:1A:B0:84:0B:9D:A7:D8:8F:8C:B3:EF:E5:1F:3A:3C
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b5:61:f6:ab:b6:59:2b:9b:c1:7c:b8:d6:e7:cc:0b:23:cb:
9a:61:a9:60:55:59:37:af:62:96:d2:a5:11:5a:5a:4c:04:d8:
ca:24:a3:64:26:0d:c7:0a:ec:ce:97:b1:cd:65:f3:ae:c1:82:
2b:2c:e4:29:9d:f4:40:39:5e:3c:db:ae:d0:99:37:34:e4:b2:
e4:52:86:3f:fb:8e:a2:69:8c:60:2a:d1:64:6c:1d:c1:a0:b7:
92:96:77:b4:13:ac:cb:89:a8:13:73:28:49:e0:9e:83:bd:9c:
31:09:ce:77:07:dc:2e:9a:0f:50:b2:45:bd:e9:32:9b:69:89:
c2:09:bf:80:93:a3:e4:02:a8:d4:30:0e:79:af:b9:f1:96:7c:
c6:4d:51:56:5e:95:e5:d9:72:a3:bd:43:b7:45:e6:df:da:0c:
3e:94:90:bc:d0:f7:97:2e:1f:0f:d8:ba:2e:1c:2f:ac:eb:a7:
23:28:5d:f4:10:24:bd:42:ed:44:a8:9e:f1:4a:25:a2:af:02:
ab:9f:13:ef:51:5a:a7:59:4a:89:75:cd:ff:b0:30:82:77:99:
a2:03:cc:6a:58:0c:91:34:37:43:42:e7:08:4c:06:9f:d4:8c:
88:0b:b9:ee:4b:d1:a9:9f:d2:8d:9f:ff:d5:de:ae:16:d5:10:
60:5c:7c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:34 2025 by rpki-client