Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
File: xAqOocjcM7gpD-vTTkU4vZWXROg.mft (raw, json)
Hash identifier: eFjud7JUDKaXwycFPJUz/Drh8MFzZvxeZkBeQ1SiLJw=
Subject key identifier: D3:73:D9:3C:94:A1:A1:7E:CA:AE:B9:4D:84:0E:A6:F3:25:6C:53:81
Authority key identifier: C4:0A:8E:A1:C8:DC:33:B8:29:0F:EB:D3:4E:45:38:BD:95:97:44:E8
Certificate issuer: /CN=c40a8ea1c8dc33b8290febd34e4538bd959744e8
Certificate serial: 0194BC3C620550EA697F486AAA3ED14536EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAqOocjcM7gpD-vTTkU4vZWXROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: xAqOocjcM7gpD-vTTkU4vZWXROg.crl (hash: Y1CQ8FSlIxxH4zIvhnFQJeggAzaOEzf+hFA5+E83YL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:05:50:ea:69:7f:48:6a:aa:3e:d1:45:36:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40a8ea1c8dc33b8290febd34e4538bd959744e8
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=d373d93c94a1a17ecaaeb94d840ea6f3256c5381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e2:64:2a:17:df:93:df:ee:66:43:16:3c:0a:
24:d4:d4:5c:b3:4e:5d:db:a7:90:ff:fb:62:91:f0:
a2:74:eb:e0:55:3d:5a:f8:56:4a:5a:9a:74:a4:2f:
7b:50:6b:17:74:34:59:14:8b:05:be:cd:97:ff:a1:
34:6c:89:71:6d:38:3f:60:81:ee:c9:e4:de:5a:cd:
86:5d:4f:21:d7:05:dc:3b:b9:95:40:db:50:fd:76:
b1:36:be:2d:49:ba:2e:af:bc:0a:6c:ba:08:5c:d6:
39:78:0a:81:ee:60:12:3f:fe:b1:59:d1:09:c8:c4:
b0:c8:cf:ad:e8:51:da:42:90:b2:76:3b:4b:b7:ec:
61:70:f6:4f:49:a3:86:21:f4:8c:42:28:96:be:8c:
2a:4d:69:d8:aa:63:27:ae:98:fd:be:96:df:9b:6e:
9a:93:e1:89:cd:db:df:d7:82:0c:b2:46:29:c3:56:
cb:08:a0:1e:37:c5:b5:3d:1d:70:73:ba:79:64:3a:
35:cc:37:ee:f9:e6:1a:b0:14:45:90:25:53:47:52:
d5:35:0a:19:15:20:7b:ce:55:b8:be:51:66:0a:5b:
53:cb:bc:31:9e:ff:b4:80:9f:74:a8:9a:90:6d:e0:
5c:e4:8e:4e:e3:72:d9:c3:87:83:07:af:29:bf:25:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:D9:3C:94:A1:A1:7E:CA:AE:B9:4D:84:0E:A6:F3:25:6C:53:81
X509v3 Authority Key Identifier:
keyid:C4:0A:8E:A1:C8:DC:33:B8:29:0F:EB:D3:4E:45:38:BD:95:97:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAqOocjcM7gpD-vTTkU4vZWXROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:22:db:b4:61:63:72:62:47:53:3d:a8:fa:af:62:b1:39:df:
4d:27:44:25:9e:4f:60:81:b2:a1:21:59:54:c8:32:58:3e:2e:
dc:b3:f5:97:98:c6:d1:89:1b:b5:8b:10:7e:1a:5b:14:d2:29:
15:3b:95:39:00:92:23:b3:e6:47:02:4f:bd:b8:5b:ad:68:36:
05:f5:a0:cd:b1:6b:9c:09:32:e2:c1:2d:c5:50:52:01:10:ba:
b3:64:ae:68:c0:df:aa:ec:f1:8c:1e:24:ba:42:80:b2:ad:9f:
ab:da:71:47:a6:9b:68:c9:4a:ce:17:f9:f2:f1:92:83:cb:87:
6a:85:c2:a0:d0:3c:d9:62:4f:10:3f:6a:d0:0b:8f:1c:ef:1c:
c0:02:68:8d:c1:17:2e:06:24:b0:ba:4a:ca:ac:11:ef:51:c8:
86:95:3a:be:6e:8e:01:73:81:9c:3f:90:80:bc:dd:a7:fb:3c:
ed:5a:d8:af:c2:ef:98:ce:f5:6e:9c:9f:fe:f3:67:2a:49:77:
ad:76:a7:2d:b3:80:c7:43:d6:76:e0:a5:44:56:ce:17:6b:93:
ac:3f:e1:a1:46:ee:1a:2a:12:2d:c3:4a:1f:98:6c:63:16:10:
78:fa:ad:85:29:fd:e0:9a:03:16:84:04:70:28:2d:2c:98:1e:
23:02:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:17 2025 by rpki-client