Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier: Hlcb2S5m0X8JRipMLiKIdA0HcWXsL6ike0qZPZUZKDQ=
Subject key identifier: D3:1C:6B:1E:4F:99:26:0B:DF:E2:61:69:FF:09:C3:24:87:55:08:5A
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 0194BD85890043DAFBD0E825E88E7D1509B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: RViJXKLh/0VHotWOH7NHLo92jg/x5kF4bhNw4ZDKLcA=)
2: xvd4BQAaFIQNecfP9MFF9HZWetY.roa (hash: H4hv0g1B0Bpd/V9ce40NED2EMiktUs80+ZWeEUAJRVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:00:43:da:fb:d0:e8:25:e8:8e:7d:15:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=d31c6b1e4f99260bdfe26169ff09c3248755085a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:f7:21:43:84:8b:a6:9e:1a:5f:73:ce:5c:
1d:78:6a:5f:30:32:ad:17:be:58:67:cd:d1:3c:46:
24:6e:af:95:75:f4:6c:1d:7c:81:d1:92:08:65:eb:
63:9c:ba:f8:03:73:32:dd:93:b5:aa:83:40:a6:e2:
51:c5:4c:05:21:cf:e9:7d:ec:79:93:f2:ef:3e:d7:
c8:eb:cc:b5:19:f8:56:38:f2:68:b4:ee:02:e9:b9:
f6:de:9d:57:cb:db:a1:04:be:5d:71:c5:1b:4b:7e:
78:c4:21:28:23:27:a8:38:20:fa:33:36:73:c0:80:
42:ef:62:2c:b8:83:bf:43:d4:25:a7:d2:88:17:69:
a4:62:27:ad:2e:c4:76:98:00:1b:3f:3e:3f:b1:3f:
ba:dd:b3:f8:ac:90:8e:3b:fd:bd:0f:69:7f:43:5c:
ae:95:a2:5c:e3:9c:d0:f9:e9:7a:a9:6a:2d:72:39:
c4:3c:eb:82:02:05:5b:d5:ff:f6:5d:26:82:b1:72:
ac:2b:d5:99:be:35:68:da:65:21:2b:7d:46:1a:96:
fb:3f:73:8c:2c:2e:92:ee:85:e1:96:f0:77:c0:74:
e9:76:46:a8:a1:7b:16:66:03:5a:70:0c:77:ea:d9:
2d:d0:5e:00:10:e9:37:9d:ec:10:24:bc:dd:63:28:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1C:6B:1E:4F:99:26:0B:DF:E2:61:69:FF:09:C3:24:87:55:08:5A
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:43:2d:a3:73:2d:0e:27:13:1b:b3:bc:f4:45:e6:15:0c:54:
9e:63:1a:0b:86:5d:10:2f:6e:64:37:4d:dd:43:30:e2:d4:a3:
ec:81:7c:5b:96:6b:6f:60:02:f8:33:5e:7b:51:ef:bf:4a:35:
2b:55:9c:c1:ad:15:1c:52:38:2e:4d:20:a1:cb:a1:b9:64:bd:
77:f1:6c:ec:80:f4:2b:ff:0a:b7:39:be:c3:80:97:57:42:b2:
1c:12:f5:69:10:43:4a:ec:c4:ad:d3:24:1f:b5:28:df:d1:de:
2f:9f:4c:d6:d7:3f:b3:85:48:db:94:f6:67:da:d2:57:8a:08:
a3:44:80:64:c0:c1:98:33:83:b7:71:9e:fb:b1:15:f4:b4:16:
b2:d9:57:12:47:e0:db:d2:b9:d8:50:34:ca:e0:61:e5:a2:c6:
8f:59:be:4d:3c:25:fa:60:6b:61:a4:f8:a1:75:7c:02:9a:0b:
24:7d:2a:c8:79:9e:34:20:f0:b4:d0:ad:cd:c8:a9:56:04:be:
96:67:8f:26:42:ad:7f:18:bc:3a:48:1a:be:f5:2e:92:c2:0e:
2f:91:15:8e:7a:9f:02:92:9c:11:5b:e6:2a:3c:8c:fa:6d:31:
01:be:81:dd:e0:88:26:56:5a:85:24:ca:5e:e0:c6:3c:4e:c7:
1f:77:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:40 2025 by rpki-client