Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier: Kb7DhJMeOFepP5rlx1oDqBIvyL/PXmW7yztlI3kIaDc=
Subject key identifier: 2C:A1:DC:67:53:F1:BB:B7:AE:6F:5F:2C:CD:A1:32:91:BA:C2:B2:98
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial: 0194BBCEE61D8C849580071CD63B2CD242F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number: 0AA6
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: DHTCu5Fx0qRb/4jtecg8yzOKBk2wn0nSVaOPgBmB938=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e6:1d:8c:84:95:80:07:1c:d6:3b:2c:d2:42:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=2ca1dc6753f1bbb7ae6f5f2ccda13291bac2b298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:8f:e7:aa:f0:de:c4:95:c0:aa:7d:5b:89:
75:98:b7:b0:ac:39:ab:bf:a2:c4:36:7f:a1:66:b1:
04:66:c8:a6:b2:e4:6b:15:63:72:a5:f6:32:44:b9:
7b:81:06:c2:8c:f6:48:0a:12:e6:e3:60:39:b2:5c:
86:51:31:74:b4:88:85:61:e4:2b:7c:bc:81:e0:bd:
ba:a0:53:fd:e1:ec:53:92:c8:87:4a:aa:ed:ff:0e:
6f:4d:37:2b:0d:44:98:63:e0:97:61:33:69:9b:3c:
54:1c:9b:c7:3f:b2:72:8b:ae:8f:24:3e:48:aa:0b:
39:c3:a9:48:86:24:8a:71:43:bf:d7:23:31:59:fe:
ff:32:0c:ee:1f:02:b1:c4:b4:ca:38:2d:b3:b5:d3:
9a:75:28:19:27:ff:62:ce:a5:dd:a0:fc:8c:6d:13:
36:a7:fc:ae:9a:55:72:07:65:75:38:b8:6d:f7:0e:
f4:90:e7:18:b3:6c:58:bc:72:30:76:07:f7:13:92:
12:69:28:b4:06:af:ad:0f:50:b1:21:96:0d:79:26:
67:f0:79:55:f3:b8:e7:49:23:27:aa:20:ab:2d:23:
8b:7f:1a:a9:3a:68:09:55:bf:cc:f0:7c:fd:e8:c6:
c7:80:6b:02:8e:5c:8c:68:6a:81:74:e3:d9:49:41:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:DC:67:53:F1:BB:B7:AE:6F:5F:2C:CD:A1:32:91:BA:C2:B2:98
X509v3 Authority Key Identifier:
keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:64:f5:fd:2a:3a:bc:94:a3:46:d0:26:a0:e7:78:f8:09:
dc:7c:f7:d1:f1:9a:54:82:04:39:ef:d0:6c:49:eb:9e:62:0f:
bc:dc:c8:b5:3f:65:ab:31:27:1c:f4:ba:e4:5b:d5:2c:17:06:
9f:13:a0:97:77:81:7f:5b:9c:a8:15:1b:38:ea:02:88:8f:b9:
ba:a2:cb:a2:9a:c9:b1:67:1b:68:9d:2e:28:ee:14:aa:00:66:
c2:8d:28:90:89:66:5b:64:5a:d8:05:ee:a2:98:39:0c:cd:3b:
b2:26:7d:94:77:57:1a:21:56:00:cd:e8:3e:98:87:f3:ef:3f:
e7:ad:28:b1:4e:cf:88:6a:17:e7:88:95:d2:66:62:d3:11:b9:
69:53:31:dc:fb:f8:23:d2:f0:8b:42:db:c5:8b:91:dd:92:6d:
c8:9a:5b:4b:2c:16:bd:5d:cd:aa:21:3c:2a:2d:7e:2d:e4:36:
b7:07:b3:40:7b:6b:ab:6a:f6:13:cf:ef:45:43:f0:5d:3b:da:
d9:56:0d:c0:6f:60:47:c3:5a:8d:ee:00:74:49:2f:26:f2:bd:
a6:71:7d:2f:2f:44:97:eb:9e:66:0b:9c:6d:4d:b5:e2:15:fe:
0b:8f:9f:fb:d7:6c:6a:44:86:60:19:d5:a6:0e:81:92:71:82:
00:e7:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:29 2025 by rpki-client