Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
File: XGl5JYB9FsulLpLpIs_dXsB4hBg.mft (raw, json)
Hash identifier: 8EPcPoJ5VzpV8sipWzDipFZjwQj1aIOAVjsceyzTZtI=
Subject key identifier: 15:49:AF:6D:B2:16:B4:02:F8:5B:CF:4A:08:94:D9:9B:D5:47:AC:2F
Authority key identifier: 5C:69:79:25:80:7D:16:CB:A5:2E:92:E9:22:CF:DD:5E:C0:78:84:18
Certificate issuer: /CN=5c697925807d16cba52e92e922cfdd5ec0788418
Certificate serial: 0195A7D783E6A49DBF8DADAA5D2EC0378D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
Manifest number: 0CA3
Signing time: Tue 18 Mar 2025 06:01:13 +0000
Manifest this update: Tue 18 Mar 2025 06:01:13 +0000
Manifest next update: Wed 19 Mar 2025 06:01:13 +0000
Files and hashes: 1: XGl5JYB9FsulLpLpIs_dXsB4hBg.crl (hash: LUCRArcPAusr5XIz7MRKgIGVOrLH3wwul+MdlpiqdQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a7:d7:83:e6:a4:9d:bf:8d:ad:aa:5d:2e:c0:37:8d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c697925807d16cba52e92e922cfdd5ec0788418
Validity
Not Before: Mar 18 06:01:13 2025 GMT
Not After : Mar 19 06:01:13 2025 GMT
Subject: CN=1549af6db216b402f85bcf4a0894d99bd547ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4e:2a:e6:b8:86:d3:02:65:76:8a:51:14:9b:
c1:a2:ab:2d:af:90:78:fd:33:38:a4:f1:7d:a1:39:
2c:97:a4:da:92:11:70:f8:ce:08:c1:bf:cb:8e:8e:
99:e7:4b:7c:41:fc:1a:69:b5:c3:da:eb:66:46:73:
52:70:28:62:6a:43:7e:cd:00:0c:ea:aa:e6:cb:bf:
94:12:5f:ce:77:fc:26:99:87:ee:29:af:4e:26:01:
c4:f5:f1:63:7e:15:c0:83:21:60:74:18:1b:fc:d9:
72:97:11:75:8d:cb:5e:84:3e:e3:c8:c9:99:63:29:
73:5d:a3:b7:06:90:99:f3:d3:02:14:21:6c:bb:f9:
af:1a:fc:3e:bd:1a:13:67:34:84:ae:52:a6:af:53:
c1:d3:cf:23:5f:37:39:20:93:e3:41:8f:de:85:db:
96:9e:91:7a:d4:ec:4a:69:32:d8:9a:47:c7:40:3c:
c2:28:3f:ed:62:f1:49:1f:73:37:a4:88:54:a6:05:
f7:04:4b:a6:d9:cc:7e:0b:74:f6:c3:92:6c:4f:3f:
bb:91:75:69:4d:a1:1d:90:be:1e:74:2e:c9:4c:a5:
36:32:1d:fd:de:99:00:d1:ae:0e:c9:9e:7b:17:0e:
ce:f6:2a:56:2c:1c:11:ce:d7:b1:bf:c4:27:27:f5:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:AF:6D:B2:16:B4:02:F8:5B:CF:4A:08:94:D9:9B:D5:47:AC:2F
X509v3 Authority Key Identifier:
keyid:5C:69:79:25:80:7D:16:CB:A5:2E:92:E9:22:CF:DD:5E:C0:78:84:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:38:40:a5:88:0d:74:19:b3:77:8f:55:85:f2:6e:81:ce:2f:
be:c9:98:22:4c:11:98:f7:80:c7:81:ba:89:36:e0:ad:15:fe:
f6:3f:d6:67:96:e8:a3:68:ae:d5:c4:26:cb:54:87:01:45:c2:
64:a9:1b:9f:0b:40:56:36:18:97:0f:ef:4e:db:57:3e:e8:44:
5e:bc:ae:7f:8c:b8:09:ab:81:7c:d3:9a:b2:a0:12:51:3e:15:
2a:55:80:ae:08:4a:c4:f4:9b:a6:c5:3a:ac:4a:19:ed:c9:80:
0a:44:e8:1e:cb:35:1d:34:43:6b:39:9f:55:38:a9:fa:2c:d9:
1b:1f:e9:27:bb:65:5d:ad:05:64:be:7e:71:8d:28:01:15:81:
34:1a:e7:46:1b:2a:c8:83:0b:ee:4e:8d:fa:21:48:cb:ed:d2:
da:24:41:3f:10:69:db:88:15:20:31:b6:e8:01:68:99:cc:82:
60:b5:e6:74:c2:2e:ab:74:61:ab:b4:c5:0d:10:0e:07:45:3c:
74:e0:52:ce:39:2e:a9:17:a3:99:e8:bf:69:f7:12:d2:41:5f:
33:2c:b8:76:7c:69:77:9f:9c:8f:f2:5b:6e:61:15:00:2f:b5:
a0:98:26:7f:9a:1e:80:93:d5:bd:08:0c:01:60:99:d0:9e:fa:
18:9c:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:37:18 2025 by rpki-client