Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: hgvYE4OQUHEJwrQ8qKliCvvr+pmqxPLhzq5fyXxd9zM=
Subject key identifier: B2:BA:7A:91:3F:59:10:34:3F:F0:0B:2A:0D:8C:1C:E2:3E:A2:B2:BA
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 0194BCA99183769324508993B582F5BC0026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 0F1C
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: t0GJstY3YaiFQCqnNtAwvfBWymc/fG5jd2Xi6Zt3hHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:83:76:93:24:50:89:93:b5:82:f5:bc:00:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=b2ba7a913f5910343ff00b2a0d8c1ce23ea2b2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:50:e1:80:24:9c:47:17:07:ed:8b:85:7f:
a5:c9:15:b8:2e:1c:6a:f6:ce:c4:51:26:ae:b2:12:
a4:88:75:d7:74:53:6f:32:47:35:f1:f2:8c:7a:a6:
9a:1c:00:2a:a3:7e:20:20:ca:d7:96:e7:ca:3d:d2:
b2:dc:13:b8:8a:88:4e:52:f6:37:58:a5:03:5c:ba:
ad:d7:34:cb:ad:44:c3:b9:fb:7c:2f:3d:06:2e:5e:
7c:da:ad:4a:aa:14:6d:8f:d6:ce:2b:3e:83:50:c1:
7d:a0:f4:eb:fa:ae:2f:4f:5a:6d:05:94:da:ff:31:
00:bb:5f:32:2d:0f:45:5b:3b:6f:f8:49:c4:77:87:
bc:4f:1c:6f:28:dd:fa:c5:dd:2a:2a:ae:52:de:70:
01:f3:2f:36:f7:8a:6a:7a:9b:87:eb:62:41:e6:03:
b9:1c:bc:5d:4c:d8:25:30:21:ab:87:93:e1:17:30:
65:3f:df:50:ae:e6:88:94:b8:da:b2:dd:d4:e6:09:
7f:70:8f:6b:00:13:1d:b3:1c:01:7a:f0:d8:d1:27:
ed:63:6f:64:eb:fb:65:05:8e:5b:b9:e6:61:ff:c2:
a0:5f:c6:fd:15:c4:dd:f7:13:a1:db:f3:77:ae:35:
23:9f:b9:fe:fe:a0:ed:6f:0e:20:7c:71:63:05:ff:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:7A:91:3F:59:10:34:3F:F0:0B:2A:0D:8C:1C:E2:3E:A2:B2:BA
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:f0:cb:37:34:e2:1d:dc:b2:57:b2:ed:a0:f4:bd:5d:a5:
d1:92:b1:05:2b:df:4d:83:03:05:76:cf:0d:d9:cc:67:c2:b5:
c4:22:6b:0c:26:9d:39:be:41:2d:72:0f:18:b7:fd:fb:63:0c:
bf:9f:61:85:72:34:69:1c:df:c1:e0:a9:24:80:0a:b6:e7:73:
71:23:0e:b4:40:b9:b5:d0:34:ad:ac:cd:98:27:5b:ef:5b:c0:
0d:4e:9d:ff:06:5a:c5:ae:58:dc:b7:63:bf:ba:39:12:55:59:
a4:8a:b6:e9:4b:4b:eb:26:73:8b:40:99:0b:09:b0:71:ef:a6:
1f:87:94:41:38:6a:8a:4d:05:51:28:f1:63:f5:5e:ec:33:f3:
f7:23:67:f2:17:c4:aa:2d:ff:5b:ab:9b:16:da:53:46:11:99:
c1:e2:ec:ad:aa:26:c2:68:08:ee:81:fe:93:1a:e3:c6:2e:18:
a2:5d:52:14:ed:49:df:ff:7b:73:93:02:16:29:62:93:c6:92:
50:71:37:8f:1b:d3:e0:44:2d:3b:76:d2:12:4c:e6:c0:1a:58:
de:93:6f:91:06:0b:f4:40:c6:8f:fe:20:d8:14:f3:f9:bc:01:
5c:cf:28:db:70:eb:4a:dc:fc:d3:f7:bd:a5:fc:ba:ba:a2:cb:
40:3f:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:44 2025 by rpki-client