Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: x8SyOtYmwOATghmXq/pukQ/Dau3LA1IGnEHMb9TsyPQ=
Subject key identifier: BC:11:BD:D9:C9:4A:52:33:46:4E:58:B5:42:F6:40:63:D2:5C:B1:C3
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 0194BC04B67B6B79BFE558D842D58961711D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 03F9
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: AHJrikJIfo60eIjgl8PlfwV0MPIumGaQ8nZhG9kCc8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:7b:6b:79:bf:e5:58:d8:42:d5:89:61:71:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=bc11bdd9c94a5233464e58b542f64063d25cb1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:98:86:f4:07:65:41:ca:18:d0:2a:fe:8a:
60:2c:ae:1c:d4:92:af:f6:92:e9:c3:f8:f5:fc:4e:
cb:db:1a:84:65:98:82:4e:05:60:ca:bd:fc:a0:3d:
c0:4c:3d:32:27:ee:3e:23:59:3c:de:4a:31:41:92:
b0:14:c1:89:18:8e:ce:8a:d4:d5:54:08:bb:4e:24:
f3:f5:76:12:d8:d5:b7:f7:38:9a:0d:73:bd:f0:49:
8c:65:f4:02:42:94:35:3f:18:c0:6b:24:48:54:06:
09:ee:95:40:b8:6f:32:c4:8f:74:0b:3e:46:ba:8b:
e4:65:4b:15:4d:32:e4:97:e5:c4:6a:83:39:8b:ba:
4e:22:5a:5c:4b:e4:15:fc:c2:f8:08:76:5e:7b:c3:
c9:ed:b6:98:db:d4:0a:06:f3:b8:77:53:86:2e:99:
32:04:fc:a7:6b:cd:a1:1a:1a:88:30:58:63:81:c7:
ef:3b:ee:c4:42:39:19:7b:d6:c0:54:30:21:60:2b:
6d:d9:fd:be:17:c3:a9:fb:6e:bd:d3:52:6e:38:ae:
f6:6c:3e:8a:0e:5f:22:6c:59:05:03:74:3b:ef:20:
7d:52:e3:d7:de:25:c7:e9:0f:2f:58:bb:a1:11:8a:
a9:41:ff:23:41:f3:82:53:16:6e:bb:9a:27:c4:eb:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:11:BD:D9:C9:4A:52:33:46:4E:58:B5:42:F6:40:63:D2:5C:B1:C3
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:36:c3:46:99:eb:18:91:66:2b:3d:b5:50:65:35:c7:6d:6d:
d8:78:ba:8f:ca:45:61:8b:b9:bd:90:73:30:26:93:0d:11:77:
15:31:43:06:90:75:46:e4:95:ac:4f:c5:ba:56:1f:e5:4e:13:
c7:ee:7c:58:2d:29:a7:57:a1:b6:46:82:09:e7:ec:bf:d3:2f:
9c:6c:42:9b:86:31:71:4a:4d:87:51:7c:40:00:98:70:4f:c3:
15:d8:b6:d6:35:9e:39:82:c7:2b:25:6f:1f:9a:02:83:39:f8:
09:30:e7:60:fb:37:2b:9a:cf:7c:39:92:45:25:ec:e2:db:93:
33:38:75:79:d3:07:8d:94:fd:21:29:64:e8:b5:71:b3:0e:9f:
63:ad:dc:53:a3:60:26:ec:5e:b5:f6:2e:a8:53:30:c8:a7:f7:
82:bb:d4:80:7a:8c:a0:69:a2:3d:40:64:a1:71:70:41:87:03:
9f:9a:c7:30:69:3c:b5:f3:fc:3d:23:2e:76:73:e3:ac:d6:62:
5b:0f:df:1f:f4:e6:2a:fc:97:bf:29:c2:ed:a7:d5:a4:5b:89:
a1:3b:09:eb:84:52:c6:63:b9:bf:80:8d:69:a4:f5:44:46:db:
f0:eb:8f:20:28:d2:4e:4f:cb:e1:c4:66:13:ed:2e:20:05:a0:
2f:18:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:54 2025 by rpki-client