Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.mft
File: xrZwIi65BeUq-fnXoN4r6d9uGUY.mft (raw, json)
Hash identifier: FHNCp/e45GeFW876WWLxSFSbvQYGzMxx9EbIL1uO2rQ=
Subject key identifier: 93:88:6B:DE:4B:B9:55:49:6D:5E:B6:F8:A3:BB:05:0C:B6:E2:AD:12
Authority key identifier: C6:B6:70:22:2E:B9:05:E5:2A:F9:F9:D7:A0:DE:2B:E9:DF:6E:19:46
Certificate issuer: /CN=c6b670222eb905e52af9f9d7a0de2be9df6e1946
Certificate serial: 019197C9B7F0125623ADFCA1E3EAD5460FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrZwIi65BeUq-fnXoN4r6d9uGUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.mft
Manifest number: 096F
Signing time: Wed 28 Aug 2024 07:01:04 +0000
Manifest this update: Wed 28 Aug 2024 07:01:04 +0000
Manifest next update: Thu 29 Aug 2024 07:01:04 +0000
Files and hashes: 1: xrZwIi65BeUq-fnXoN4r6d9uGUY.crl (hash: 792ECO/XwFXy9y/W/QQp6Zo4Wk/ML78rYFAeavd7cBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:97:c9:b7:f0:12:56:23:ad:fc:a1:e3:ea:d5:46:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b670222eb905e52af9f9d7a0de2be9df6e1946
Validity
Not Before: Aug 28 07:01:04 2024 GMT
Not After : Aug 29 07:01:04 2024 GMT
Subject: CN=93886bde4bb955496d5eb6f8a3bb050cb6e2ad12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:63:0a:4c:a1:b5:fa:b0:cc:d3:1f:5b:0a:
cb:3f:78:a5:a6:ab:04:4e:05:c5:07:4c:c7:c3:30:
4b:ef:63:d2:27:6a:b7:aa:b9:f2:b2:dc:30:4d:9d:
7b:93:95:fa:e5:e7:8d:13:c4:c5:4e:eb:ad:7f:c9:
fa:7e:eb:d3:6c:6d:37:6d:79:3d:c4:ae:3b:89:31:
ec:1f:9d:8d:a8:34:e8:6f:57:4c:ed:71:5c:17:1a:
03:0e:eb:ac:43:77:3c:d2:df:96:90:48:59:a6:82:
2e:ab:56:d9:f0:42:54:65:0e:65:39:ba:6a:6a:9c:
39:ba:74:47:40:9e:f0:20:67:3f:5d:92:79:6e:96:
c5:61:18:6c:df:9f:53:69:f0:5c:bb:e2:82:b6:7a:
fc:b5:d9:1c:8f:e0:de:41:85:71:0a:ce:5a:d1:a0:
8b:fb:7f:cd:63:9a:26:48:05:3e:4d:e6:19:18:49:
90:eb:8b:40:be:5f:57:84:95:39:5a:38:e6:80:23:
01:98:ec:a2:08:d8:67:3a:0f:d0:c4:80:08:10:eb:
89:58:b6:f1:3a:c9:03:cb:31:dc:5e:6e:b0:de:3d:
af:67:64:b8:0d:77:86:07:d9:d3:60:16:31:5a:3e:
e0:3a:4d:a2:09:b7:b0:f5:9b:af:34:cd:2d:e6:28:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:6B:DE:4B:B9:55:49:6D:5E:B6:F8:A3:BB:05:0C:B6:E2:AD:12
X509v3 Authority Key Identifier:
keyid:C6:B6:70:22:2E:B9:05:E5:2A:F9:F9:D7:A0:DE:2B:E9:DF:6E:19:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrZwIi65BeUq-fnXoN4r6d9uGUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:32:c1:f7:6d:02:30:1d:bd:3e:c5:d7:2e:83:cc:3d:2e:05:
ed:22:eb:cc:82:a9:19:28:c5:e1:1f:ce:39:03:b5:74:c9:d1:
87:e3:93:7a:28:30:e8:e1:8e:4a:bd:f7:b8:f3:1a:0f:d7:e4:
80:30:9d:ed:e3:39:d5:3b:07:7a:a2:35:48:34:ee:e8:23:81:
42:7f:c7:7d:d9:95:fd:76:0b:03:fb:14:6a:90:f7:51:9a:57:
d0:68:58:5e:dd:df:6e:d9:d9:89:36:39:d4:9b:39:d3:1f:65:
20:26:9a:05:c7:9d:94:20:78:6c:17:af:73:a6:af:75:55:89:
72:96:2b:fd:ce:57:68:fb:44:df:85:ff:13:25:c8:90:d2:6f:
e2:58:20:70:ec:bf:47:16:5a:a7:30:e4:ed:ab:58:36:7b:c4:
d9:f6:13:fa:68:f5:ec:88:06:9d:d4:5b:e2:62:80:f8:31:99:
ca:e7:b0:22:4e:02:de:80:6e:e6:6d:5f:1d:84:eb:8f:e8:57:
3b:93:a5:06:89:0c:5e:65:61:ee:0b:cc:97:98:15:67:6a:0d:
28:4a:37:35:5c:40:96:f8:4b:1f:d2:a9:69:f0:6a:e1:27:3b:
25:43:33:6e:34:c5:9f:99:9d:af:28:a2:64:cf:0a:89:c3:11:
12:f8:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:55 2025 by rpki-client