Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft
File: XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft (raw, json)
Hash identifier: r1gH9m2xjUziDqZvfc31tRk4Uq0ZUnuOPsAotSVQvnE=
Subject key identifier: 71:C2:6A:72:7E:54:35:AE:CF:A3:C3:64:04:97:70:28:3A:FD:05:74
Authority key identifier: 5C:DF:30:1A:C0:15:26:D0:8C:DE:C2:42:CC:5A:14:01:41:FB:15:3D
Certificate issuer: /CN=5cdf301ac01526d08cdec242cc5a140141fb153d
Certificate serial: 0194BD4EA6E6A616282A27B7FCA8CBDFBE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN8wGsAVJtCM3sJCzFoUAUH7FT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft
Manifest number: 4F
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: XN8wGsAVJtCM3sJCzFoUAUH7FT0.crl (hash: FrUcXArRaTn7sny+DwqnVHkyCk4pqGklWywrvg+MuYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:e6:a6:16:28:2a:27:b7:fc:a8:cb:df:be:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdf301ac01526d08cdec242cc5a140141fb153d
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=71c26a727e5435aecfa3c364049770283afd0574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:0c:27:ce:74:a0:34:e8:41:16:fb:24:e4:
e5:29:aa:96:96:57:ff:2e:56:22:29:6b:db:4e:75:
9b:ed:b2:39:fb:87:c6:d2:d0:53:ae:4b:df:77:5a:
da:24:63:0d:87:1f:00:09:91:da:88:12:75:00:f5:
78:d9:49:9b:74:70:ce:1d:5c:f4:8d:8e:e0:6a:df:
d5:b2:59:61:d1:7f:96:cd:e1:5d:28:e4:07:05:c5:
5c:a8:ba:c4:9d:eb:fc:99:ad:19:7c:ed:fa:99:c4:
4d:f2:38:32:e2:7f:92:eb:70:95:13:a0:65:62:09:
15:e1:8d:f4:9a:a9:c2:2b:5f:19:44:f8:7e:7c:de:
1e:9e:50:3f:62:9f:81:69:08:0f:bc:c4:2e:24:bf:
25:98:ab:64:32:b4:ba:84:aa:2f:cc:01:07:bc:d7:
31:d2:b2:36:8b:a4:ad:6b:51:09:22:02:a4:a3:c5:
7c:73:5b:5c:17:29:f4:e5:60:b9:05:56:9f:a7:9d:
ff:0c:16:ca:f1:94:c6:d9:ed:69:97:c9:3e:d9:f3:
67:dd:68:39:da:92:7f:52:4a:74:a7:8c:22:a2:d5:
1f:51:f7:d1:ed:9c:86:e3:81:77:e9:39:e5:bf:4e:
73:65:38:99:bd:fa:75:e3:22:40:5d:88:8b:9c:8f:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C2:6A:72:7E:54:35:AE:CF:A3:C3:64:04:97:70:28:3A:FD:05:74
X509v3 Authority Key Identifier:
keyid:5C:DF:30:1A:C0:15:26:D0:8C:DE:C2:42:CC:5A:14:01:41:FB:15:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN8wGsAVJtCM3sJCzFoUAUH7FT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9e:69:ad:38:ad:10:2e:c9:44:b5:6c:ef:74:1c:1a:cb:e1:
74:bb:e9:67:73:44:96:c9:3c:a2:80:a3:a6:96:b1:02:b6:3a:
80:f4:56:03:85:55:20:60:46:3d:99:8d:e1:17:2a:7c:5e:3e:
e7:9a:d9:fd:5b:72:5b:4a:56:0c:dd:29:5e:3a:e3:78:68:30:
db:25:6f:de:fe:04:66:f6:97:4c:eb:22:3a:12:b7:28:d4:3f:
25:c1:dd:85:43:fe:31:90:c9:69:f6:40:0d:fe:f3:af:61:77:
e3:1d:47:f2:3a:c8:0f:23:c4:61:4a:1d:69:de:e8:71:02:82:
60:cf:52:b3:c9:07:f6:37:25:a7:7e:f8:39:26:b7:e5:45:0f:
d7:21:05:e7:2d:9c:3f:82:7a:62:8d:1d:d2:e8:22:31:9f:c3:
d5:fb:5b:0f:86:7f:3f:56:91:38:1c:91:ad:ba:2f:37:3e:05:
5d:ed:a7:da:47:a8:c4:41:86:45:d5:e8:66:cd:69:96:b2:14:
73:86:8a:fa:0a:a8:b6:50:db:67:10:dc:39:95:92:2f:a0:ef:
5a:e8:ec:a2:f5:86:60:ca:a1:93:7a:09:9a:24:7d:46:1d:41:
cf:93:ce:6b:7a:d0:0e:69:24:7b:0f:d8:ab:b0:5c:1b:a9:cd:
68:c7:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:02 2025 by rpki-client