Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
File: XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json)
Hash identifier: lVmKQk2BLmQV5qOzSGLi2gC4h1tatONdnUtcJzt1LLk=
Subject key identifier: FD:EF:0A:A6:F7:5A:0F:FB:8C:C2:5D:AD:CE:B2:1E:54:74:0B:F2:86
Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
Certificate issuer: /CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Certificate serial: 0194BBCDB545F972C5B301F42BC0BC6BD07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: WiZTciP96uPGvmdUQv08v07hWWko4lIZgSR1wpqD/U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b5:45:f9:72:c5:b3:01:f4:2b:c0:bc:6b:d0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=fdef0aa6f75a0ffb8cc25dadceb21e54740bf286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:83:ac:8f:16:3a:4e:db:1d:94:af:9f:91:
b7:15:f6:20:80:a9:04:78:95:c9:05:87:8f:44:f8:
c7:ef:ce:de:64:87:71:9b:ee:b7:3a:dd:93:ed:c2:
6f:fe:41:3b:fa:ae:ee:10:b0:1c:fe:c0:0c:8a:d5:
90:78:2c:91:a1:93:11:93:31:13:a2:f7:41:8c:e4:
cb:e5:ac:64:9d:6f:a1:f6:f2:51:7c:08:71:78:1c:
62:cb:ce:4b:8b:9f:f0:57:66:6d:07:3d:a1:68:da:
72:24:1d:5c:7f:94:50:87:6d:2f:10:b2:0b:53:54:
b4:92:dd:49:49:c0:3b:ca:b6:76:ca:02:2b:46:76:
3a:b6:3f:4c:35:3e:bb:a0:fc:c7:29:3e:a2:ee:12:
4d:a6:28:05:de:84:fc:27:2f:8c:a2:13:61:85:ce:
ca:6d:47:63:38:c2:fa:99:fd:e9:4c:d3:40:61:2a:
db:92:78:58:cf:e6:5f:ae:0b:ba:88:d3:b3:cd:42:
b2:cf:37:74:6b:16:58:1d:bb:26:d4:c6:96:67:13:
9c:c8:c9:2a:97:d2:56:a6:0f:40:0f:4a:8b:df:95:
89:d2:8d:b1:d4:eb:7b:a6:f3:fc:3e:15:ef:68:58:
0e:71:eb:2c:62:ab:d1:5b:cf:e4:3c:dd:53:22:f2:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:0A:A6:F7:5A:0F:FB:8C:C2:5D:AD:CE:B2:1E:54:74:0B:F2:86
X509v3 Authority Key Identifier:
keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:aa:cd:cb:a9:31:ba:6b:7d:9d:08:8b:e4:01:a7:95:be:2a:
74:81:07:bf:9f:5c:e0:1f:d5:85:fc:29:df:75:0b:5e:61:c1:
8c:e5:00:c5:ea:fa:ec:00:31:f6:a9:86:50:db:01:a6:a9:69:
1b:03:1c:95:01:28:96:69:49:10:85:ae:85:7f:3d:a9:92:77:
73:8e:c0:7d:29:95:bd:c8:23:a5:0c:70:bd:8a:28:cb:dc:57:
42:f9:ac:80:9f:42:ab:45:8f:c4:dc:f4:b9:eb:8a:87:53:b5:
de:60:7e:83:96:91:8a:49:95:6a:35:9c:02:a1:10:dc:21:e0:
35:bd:8b:0c:41:fe:73:87:0b:28:1a:11:ea:2f:cf:9a:59:b7:
1e:ec:25:c9:86:68:33:30:de:e7:df:1e:e8:13:f8:99:7b:06:
88:52:4b:c2:1b:fc:2c:b6:54:e6:64:a4:44:74:7e:9c:64:ed:
3b:9f:bd:46:08:e3:15:c2:1d:d5:23:86:30:79:a8:b7:cc:0d:
98:94:d5:70:60:4e:a4:95:c5:09:37:97:84:19:af:81:2e:ad:
39:a5:b9:e8:9e:0e:84:1b:3e:d9:f4:19:74:73:40:39:ff:cc:
70:ad:44:1a:58:2f:c8:7d:72:8b:dd:18:bf:8a:51:32:9f:c0:
60:4b:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:06 2025 by rpki-client