Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
File: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft (raw, json)
Hash identifier: XYPs8KDm0NtFGebBNSVrJKEeA6BDntP1mq0mbUyxhYE=
Subject key identifier: 4B:B3:8B:07:0E:34:82:E5:F0:D9:2E:F1:F4:5A:0C:0D:BC:DF:AB:0E
Authority key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
Certificate issuer: /CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Certificate serial: 0194BBCED98A09C04CDB478AD312220CA611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl (hash: DVM8G7umovyQS/LpZXBdSFjG0zOPNp8djNQ6UfjbB8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d9:8a:09:c0:4c:db:47:8a:d3:12:22:0c:a6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=4bb38b070e3482e5f0d92ef1f45a0c0dbcdfab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:e8:d2:90:86:c9:b9:2f:2e:ec:da:4e:64:
04:1b:b5:71:df:c0:dd:10:09:26:19:b7:89:52:08:
46:e1:dd:8f:85:26:b5:9e:e5:6a:75:26:71:e2:eb:
37:65:ec:f6:78:24:14:88:77:6b:e6:8b:83:fb:8b:
a7:57:bf:df:40:3a:58:f4:ae:b3:e1:07:8e:6e:2e:
a2:4c:0e:27:75:40:ec:60:36:35:9b:e0:0a:a5:68:
b3:10:58:ac:91:2f:e8:19:34:b7:28:4b:04:03:12:
1b:5b:62:47:48:79:b5:6e:5c:b7:1f:21:22:b5:30:
99:70:fb:8a:78:d6:bc:46:eb:5f:47:80:bf:81:31:
b8:81:56:1d:9c:3b:bd:52:b4:17:a3:c3:40:cb:28:
27:c7:75:e6:d6:9b:c8:bb:f6:27:45:f8:f6:b2:34:
87:52:f5:5f:ed:57:a3:fe:0e:15:ca:9e:2c:f1:27:
c2:ef:32:d1:03:61:79:7a:bc:12:1b:e1:31:2d:b6:
71:5d:bf:3c:c4:b1:95:25:72:48:1d:05:1b:04:0d:
78:48:72:11:21:49:9a:5d:1c:f5:b7:00:47:df:94:
9a:f3:34:d8:29:46:71:3e:f3:8e:1e:04:0a:af:6c:
6c:68:8c:a6:ad:d9:7f:0d:79:a3:d4:1e:7a:53:16:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B3:8B:07:0E:34:82:E5:F0:D9:2E:F1:F4:5A:0C:0D:BC:DF:AB:0E
X509v3 Authority Key Identifier:
keyid:5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:98:60:cb:79:43:fd:a4:0c:4f:76:60:96:e2:40:00:18:f6:
fe:4a:e0:28:0a:07:cd:21:3c:bf:be:59:64:8c:76:96:2f:25:
fc:30:11:d8:0b:72:2c:80:b9:4d:c3:d1:f6:d4:c8:18:ac:17:
8d:a4:67:b1:38:27:dd:46:b2:54:2b:f4:af:45:c8:53:6a:12:
c4:3f:63:c2:52:88:80:d8:2f:c1:46:82:1e:8f:a2:a9:34:05:
40:3b:2c:f0:85:bf:92:c4:b1:c9:7c:0e:f7:95:26:d1:4a:c1:
6d:65:f3:dd:54:51:9f:8a:4b:5c:3f:c9:c7:23:ff:35:6b:d2:
5b:56:a6:c6:1b:42:0e:d5:c1:04:4a:17:5c:3f:01:c5:e8:df:
4a:63:4f:97:a7:9e:ce:de:8a:62:7c:94:06:76:09:a1:3a:bd:
c4:0d:27:bd:df:ce:0c:ad:23:20:fa:53:45:3b:83:bc:e0:f9:
ef:ed:23:44:07:52:e8:dd:35:f9:76:da:f3:f8:f9:c7:e0:ce:
10:9a:a9:74:33:6b:7f:ca:51:f4:c5:a6:1d:b2:9b:c1:53:e8:
e8:1e:9f:46:74:e3:2c:22:0d:97:d0:79:0f:08:8e:66:f6:92:
c8:00:77:b4:f8:1d:2f:f4:3d:7e:55:2d:73:24:b8:d5:45:9f:
41:d2:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:58 2025 by rpki-client