
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: R9iu+Kh39sunjhCxpZDL1TqMEk3Ncw5hoaKCt8c0uHk=
Subject key identifier: D0:0B:F2:67:17:11:26:E3:CD:96:C8:FC:18:46:27:C8:E4:7F:61:77
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 0194BC3C183A7BAB8680C2ADCA05131C93EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 0379
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: f8l8yfB86iNO4KwUYGBXa0zxS+zBJ4fjKl6gSKVeW4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:18:3a:7b:ab:86:80:c2:ad:ca:05:13:1c:93:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=d00bf267171126e3cd96c8fc184627c8e47f6177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:94:d1:0b:10:10:a1:92:53:5d:d9:8a:2f:
26:44:3d:7b:ab:85:f3:66:7c:fc:7f:6f:5f:d7:fc:
a4:36:36:d3:a2:7b:68:dc:7b:a0:5a:1f:7b:5a:eb:
e3:db:4c:58:2e:78:08:c0:0c:cd:80:6b:cd:5f:a9:
ee:5b:8e:06:ba:3e:3e:91:16:af:cb:be:5b:6f:db:
a1:75:c4:cd:16:11:b9:04:8b:cd:f6:44:fb:5c:39:
91:22:d4:f6:f5:59:a6:e9:f0:cc:57:3e:ae:96:15:
75:c6:6e:59:23:84:86:c2:ae:df:f7:73:c3:6f:82:
d2:77:30:d9:3f:67:53:cd:61:77:1e:b6:56:65:32:
ce:26:0f:0b:f1:2b:93:15:95:ad:22:1e:d9:50:8d:
a1:6a:78:e8:8d:cb:4e:fc:bd:ca:4e:1f:9e:f8:0a:
2e:20:e7:e6:64:df:e2:bf:96:73:95:f8:76:ad:4d:
d5:58:9c:27:d3:17:9b:41:84:27:b5:5c:1c:8d:e9:
9e:d8:d1:24:89:95:b7:b0:5d:69:39:ab:9a:3b:b8:
47:08:25:26:32:06:aa:ad:40:58:43:c9:c2:7c:7b:
d2:ce:e3:46:ea:65:c0:6b:b0:e4:8d:7f:14:b2:8d:
2f:80:ef:e7:13:31:bd:ab:16:09:db:67:5f:78:9f:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:F2:67:17:11:26:E3:CD:96:C8:FC:18:46:27:C8:E4:7F:61:77
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9f:c2:38:04:e9:fd:49:64:ff:56:28:14:e9:9b:3b:20:06:
df:01:1c:52:1a:2f:8c:b5:1a:b6:00:c0:23:78:56:18:47:bc:
e8:91:d3:4c:0f:a5:09:89:4f:73:5a:c6:53:28:09:77:03:2d:
1e:4c:66:d2:4f:bf:5b:41:9b:1c:e1:59:5b:1c:c0:70:c9:d6:
45:bd:16:e3:a7:97:25:cd:8f:2c:5a:88:49:d3:98:4e:02:2e:
3c:36:fe:ea:33:26:45:cb:78:8a:c0:ed:e3:11:d1:31:4b:7f:
3a:70:fd:8b:bf:37:12:bf:60:52:92:1d:b9:36:0e:2e:93:0c:
23:0a:02:9a:ff:1c:02:1a:e4:9e:f4:31:49:1d:5c:f1:d7:a3:
7f:21:9d:4d:c1:9c:9e:b6:5a:5d:0f:ec:b0:1a:e2:8c:e6:bf:
74:72:6e:51:5a:ea:fe:05:aa:b6:e5:33:f2:dd:b4:b2:dc:44:
8e:58:a1:e2:6e:18:0b:50:95:a5:ca:57:c6:23:85:48:66:f9:
d9:bb:42:bf:0e:9c:00:7f:03:0f:7f:09:19:ed:3d:a4:ff:44:
61:66:05:36:74:e7:26:ae:17:17:ff:23:99:95:77:1d:26:73:
97:b3:8c:51:dc:79:d0:16:fb:16:58:60:78:bc:71:56:b0:ea:
44:1e:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:29 2025 by rpki-client