Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: bJMnWepnF5de2pkHaTq3ldyP0c/ekffAgK839dgaZSg=
Subject key identifier: 1B:5B:B7:3C:09:D0:92:44:C2:3F:19:90:27:43:9E:B0:6C:98:14:06
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 0194BBCDEA0321A9C4A853436993295561CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 07E6
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: DOPhEnaYUKRa3g5K2dlO6U6gMqHUph1oE3payqQng3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:03:21:a9:c4:a8:53:43:69:93:29:55:61:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=1b5bb73c09d09244c23f199027439eb06c981406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:07:bb:2f:02:b4:1f:e6:f8:6c:74:d0:95:
24:a4:c7:6c:77:e4:70:94:b4:e9:2d:6a:4a:2e:a2:
05:2e:78:6e:23:d1:de:3f:e0:f3:bf:05:01:62:03:
5c:13:06:80:1b:db:c5:7f:43:25:d7:3c:71:0b:2f:
f4:9b:e0:76:e2:92:6c:f3:7d:a6:97:25:fd:59:ac:
62:46:2d:cc:0a:d0:be:a7:29:c5:04:6e:77:76:b4:
a5:64:9f:3e:06:20:33:63:ca:b2:d0:7f:62:c8:fe:
45:9c:e9:5b:71:3b:5f:ef:60:0d:d1:37:7c:61:c8:
af:31:e8:09:ce:fe:d9:6a:16:d2:15:90:78:95:73:
85:f8:01:06:ba:3b:76:7f:4b:f1:89:88:f5:86:ff:
a4:4b:33:3c:66:9a:d0:ff:4d:30:71:a6:f7:dd:aa:
09:91:d9:9d:e1:77:91:3d:bf:7c:56:38:a3:b2:19:
28:5e:3b:ad:98:20:f3:85:58:dd:10:30:2d:14:00:
82:19:dc:a8:37:3b:98:1a:cc:6c:0d:90:e3:a8:c7:
49:c2:0b:8b:ec:1a:7e:a3:8c:f3:ec:0c:90:5e:69:
e3:1a:3c:06:7d:e4:f3:c3:f8:5b:82:44:21:ab:e3:
a8:b2:eb:1c:85:f7:37:38:ac:f4:4e:0a:99:6f:45:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:B7:3C:09:D0:92:44:C2:3F:19:90:27:43:9E:B0:6C:98:14:06
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ec:bb:9b:e5:a8:04:b1:af:c0:65:6f:39:25:4b:d2:07:a8:
b5:00:71:58:72:bc:f1:82:7d:7c:9a:65:38:b7:07:a6:4f:14:
8f:2f:81:e2:37:25:61:92:60:29:35:68:a6:2b:2c:b1:ee:00:
d0:a7:f8:cc:57:89:61:3e:c8:96:7c:61:34:9a:82:8c:ce:2a:
c5:47:1c:41:00:a9:37:a1:07:15:0b:6e:bc:a6:62:76:57:5f:
e0:42:c8:ec:9e:13:b4:96:56:8c:c9:7d:1c:1e:37:1c:3b:b0:
2f:f8:dc:01:df:42:4a:02:38:96:43:34:90:2f:ae:7d:bc:f1:
a3:26:e5:e1:05:87:03:d8:3e:8a:6f:89:3b:ce:87:03:0b:47:
a5:28:51:ea:39:40:89:d2:12:0c:f3:c9:18:aa:78:1e:e9:68:
63:38:c9:d3:72:fa:e2:59:42:56:c5:30:47:f1:79:58:27:26:
2f:4c:fc:8f:7c:26:15:0e:7c:12:1b:92:2f:e2:99:d5:a4:00:
5a:e9:0f:2d:b0:ab:d2:61:43:0e:9a:16:2f:f5:29:60:20:6e:
83:23:10:54:53:83:a5:f3:d5:12:41:f0:21:e7:b5:98:50:4c:
f5:9b:90:37:d6:67:a4:fb:1a:6b:41:3c:d4:09:a3:48:55:a8:
81:04:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:00 2025 by rpki-client