Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/54392f-bb9a-434d-a4ab-b1651a4a7243/1/XF9hLku-0cDGlnFsSqd-maBak4A.mft
File: XF9hLku-0cDGlnFsSqd-maBak4A.mft (raw, json)
Hash identifier: rsKpUOyzeIy4Y5iPfTcEyBVCVbBJmV5g5WVCOxi64Xo=
Subject key identifier: CA:47:A6:FF:62:9F:9F:0A:56:8C:AE:58:19:05:04:B6:BC:50:2C:4D
Authority key identifier: 5C:5F:61:2E:4B:BE:D1:C0:C6:96:71:6C:4A:A7:7E:99:A0:5A:93:80
Certificate issuer: /CN=5c5f612e4bbed1c0c696716c4aa77e99a05a9380
Certificate serial: 019479B72FA6AE90611D58EE00B5B9D72692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF9hLku-0cDGlnFsSqd-maBak4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/54392f-bb9a-434d-a4ab-b1651a4a7243/1/XF9hLku-0cDGlnFsSqd-maBak4A.mft
Manifest number: 03
Signing time: Sat 18 Jan 2025 14:00:35 +0000
Manifest this update: Sat 18 Jan 2025 14:00:35 +0000
Manifest next update: Sun 19 Jan 2025 14:00:35 +0000
Files and hashes: 1: XF9hLku-0cDGlnFsSqd-maBak4A.crl (hash: pyd7NmyPU6V69IT/oI/EIOBf69pcQGmGGCvIcjtbwBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:b7:2f:a6:ae:90:61:1d:58:ee:00:b5:b9:d7:26:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5f612e4bbed1c0c696716c4aa77e99a05a9380
Validity
Not Before: Jan 18 14:00:35 2025 GMT
Not After : Jan 19 14:00:35 2025 GMT
Subject: CN=ca47a6ff629f9f0a568cae58190504b6bc502c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:bf:14:ba:2d:7a:fc:f7:67:73:b8:11:e8:
ed:d2:8d:f5:bb:5e:ac:26:6a:16:f5:18:f3:07:4a:
24:2c:f6:8e:76:2f:24:3e:8b:4d:19:31:34:3c:10:
8f:08:e8:a0:6d:0c:b0:66:96:fe:69:16:e3:ef:cf:
89:78:8a:fa:00:8d:3d:15:c6:5e:7f:4b:75:82:46:
ce:55:b9:01:10:01:56:48:77:8f:54:a3:df:5b:65:
23:95:49:8d:7b:bd:a1:6b:af:97:f0:33:a9:bb:84:
7d:cb:bd:4f:27:d3:b9:c1:cf:8b:0f:25:07:9e:09:
13:c6:38:d2:d7:11:0b:4c:6c:b0:7d:20:19:96:b5:
44:c7:59:70:7a:60:10:0e:c4:02:f8:f0:46:bf:28:
b4:87:69:24:aa:f4:5e:13:5d:eb:36:e2:d6:dd:1e:
8b:ea:55:73:4f:2a:40:34:da:d8:d4:a9:b0:de:94:
be:d5:60:d0:86:7e:49:42:1c:25:3e:b9:c6:ef:b9:
d7:45:6b:72:11:19:b7:91:4a:90:07:df:33:b3:8f:
8a:f6:cd:19:8e:cd:ec:4e:b5:dd:ba:70:04:29:e8:
37:bf:45:4b:0a:7f:9c:cc:2b:5f:2c:4b:8e:7c:b6:
f5:c9:e6:74:61:1f:ce:a8:f7:01:ad:f9:37:57:2a:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:A6:FF:62:9F:9F:0A:56:8C:AE:58:19:05:04:B6:BC:50:2C:4D
X509v3 Authority Key Identifier:
keyid:5C:5F:61:2E:4B:BE:D1:C0:C6:96:71:6C:4A:A7:7E:99:A0:5A:93:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF9hLku-0cDGlnFsSqd-maBak4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/54392f-bb9a-434d-a4ab-b1651a4a7243/1/XF9hLku-0cDGlnFsSqd-maBak4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/54392f-bb9a-434d-a4ab-b1651a4a7243/1/XF9hLku-0cDGlnFsSqd-maBak4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:19:90:78:df:63:f5:f1:80:82:8b:a5:ad:32:b0:f4:11:
ab:72:e2:3a:68:76:fa:c4:40:1b:41:27:1d:8a:76:60:6b:6c:
d6:c0:19:27:ba:58:92:68:e7:e7:84:ea:65:c7:8f:66:dc:a6:
2d:75:be:c7:0c:f4:88:d6:ce:80:22:cd:5f:06:23:0a:a0:ad:
02:66:75:71:07:36:17:cf:2e:41:5c:1b:82:49:ac:48:48:81:
5b:6b:9c:6c:6c:5c:4d:eb:d3:1f:0e:c7:45:eb:67:10:da:3d:
b0:ff:f0:ae:76:73:67:84:d8:51:a0:a9:50:67:26:0e:6f:84:
c5:e6:c9:d1:a5:ab:36:4f:ba:2f:9a:2a:a8:06:e8:62:03:97:
8f:c0:04:dc:db:12:ba:cb:37:4b:1a:51:b4:90:33:fe:37:c2:
b2:c2:cf:82:52:08:a4:2a:3c:ae:af:34:0b:43:30:f5:1c:99:
25:2e:92:3d:b6:5b:44:de:c6:45:43:86:ec:e9:1e:d9:25:63:
2b:7b:a6:b8:1a:37:60:60:08:e6:de:a3:e9:19:d5:a0:81:03:
65:50:a3:3a:31:b3:07:ac:1f:c4:e0:75:23:86:30:57:90:5b:
83:66:24:30:5c:1c:35:5e:2d:66:3e:39:cc:2f:88:f3:95:80:
7d:f8:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:20 2025 by rpki-client