Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.mft
File: XYxMrtvxY99oiGrDtz8OTLQX4V4.mft (raw, json)
Hash identifier: QY27MFZ53tMGey270XxW92Yw3l19Bd/mb+DsO0s3hc8=
Subject key identifier: C3:28:2C:97:32:29:18:34:50:17:B9:4D:E5:4F:E4:B8:62:43:8B:41
Authority key identifier: 5D:8C:4C:AE:DB:F1:63:DF:68:88:6A:C3:B7:3F:0E:4C:B4:17:E1:5E
Certificate issuer: /CN=5d8c4caedbf163df68886ac3b73f0e4cb417e15e
Certificate serial: 0194BBCDFB591456078C2F2718E5A382190C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYxMrtvxY99oiGrDtz8OTLQX4V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.mft
Manifest number: 0A67
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: XYxMrtvxY99oiGrDtz8OTLQX4V4.crl (hash: 3XHPolMzhCF3t+OLdFmXgyXDXuAbRMyjAMoqQ1NIaIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:59:14:56:07:8c:2f:27:18:e5:a3:82:19:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8c4caedbf163df68886ac3b73f0e4cb417e15e
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=c3282c97322918345017b94de54fe4b862438b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:e9:2b:0d:bb:9c:d7:50:5d:c8:3a:9c:55:
ac:bb:cf:21:5c:ee:6d:d6:ff:47:76:fb:ca:2a:49:
59:87:e9:d3:c1:70:16:86:07:8c:9e:c0:24:df:71:
9c:f0:49:64:40:26:11:42:18:f7:ff:d7:92:6b:c5:
b4:81:e1:27:b3:e7:fe:1e:bc:24:d2:05:49:68:52:
58:8e:f2:9f:58:25:b3:19:f6:91:ea:49:fa:89:dc:
b9:1e:a3:48:ae:23:58:0d:64:43:93:d7:1b:ea:aa:
e7:57:09:58:a8:d2:8e:08:4c:47:79:63:0b:67:d7:
da:6b:57:23:a6:4a:db:87:28:d0:07:cb:9b:56:95:
a9:41:c6:4c:c8:e7:86:de:b0:db:f7:dc:27:80:42:
fd:26:46:31:11:30:39:40:4e:ad:19:5d:8e:69:92:
5c:a3:c9:8d:bf:90:c2:50:ba:22:ff:b5:e3:b0:9c:
b2:7a:f8:83:9a:d2:30:a3:54:df:cb:37:59:2b:36:
35:c4:ca:cf:01:4f:0e:b4:59:6d:56:d5:b4:ea:48:
c2:3c:d1:aa:bf:0d:f9:8b:ac:02:82:96:8c:36:57:
ab:d4:60:23:45:a4:f3:c3:ea:aa:12:09:50:ea:1b:
d3:b4:78:07:a0:70:50:f5:b2:c6:99:55:80:6d:26:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:28:2C:97:32:29:18:34:50:17:B9:4D:E5:4F:E4:B8:62:43:8B:41
X509v3 Authority Key Identifier:
keyid:5D:8C:4C:AE:DB:F1:63:DF:68:88:6A:C3:B7:3F:0E:4C:B4:17:E1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYxMrtvxY99oiGrDtz8OTLQX4V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7d:67:14:fc:a7:f6:1f:80:c4:7d:90:88:67:2a:28:d0:10:
0c:63:c6:d7:f3:fd:c4:12:20:22:de:df:b6:36:2d:a8:e0:95:
82:24:f1:65:00:37:69:38:a2:55:e8:04:96:7f:31:c2:7c:12:
0c:57:4a:24:85:82:78:27:a8:ce:20:6d:35:3e:72:85:c1:77:
42:08:67:2e:66:37:d7:8c:36:c8:a2:1e:5f:d1:3e:bf:58:58:
7d:76:e3:67:c9:53:7a:31:84:a8:b1:c3:19:8d:07:0b:df:b2:
81:11:61:26:a5:41:76:32:63:52:9a:f6:4a:00:35:a3:9f:05:
33:a9:8b:e9:85:52:79:9b:bf:d9:08:c4:3d:90:18:09:0d:f2:
6d:96:5a:26:b3:f3:9b:e4:f6:80:a3:4e:f7:09:9d:e4:90:91:
0c:e0:b5:be:1e:89:c5:c5:33:3a:ee:29:c4:f8:ae:a2:71:28:
8b:4d:f2:49:fc:37:8b:df:3e:8c:43:bc:d1:c5:f6:97:20:35:
39:bc:bb:d6:8a:aa:1a:dd:aa:e4:cd:26:dc:7f:4f:d2:a2:53:
a2:a8:6d:1c:46:f3:6b:63:b3:b9:60:5e:e1:80:cd:8d:1b:90:
05:df:d7:2a:25:68:11:ba:ca:df:f5:54:01:53:5a:fa:cc:99:
d2:e1:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:35 2025 by rpki-client