Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: VZDP9dp9B2s9AgZItxNlGWKLsr7L3qVFs89SyJM50H0=
Subject key identifier: 1A:9C:F3:16:88:9C:78:8A:86:BC:78:17:8D:54:04:48:36:AF:BF:75
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 0195E12202CC72997E2CFCCF7F9F0DF42BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 020E
Signing time: Sat 29 Mar 2025 09:00:57 +0000
Manifest this update: Sat 29 Mar 2025 09:00:57 +0000
Manifest next update: Sun 30 Mar 2025 09:00:57 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: A8oD+W8/3KWkcpvUtqOnJSvfsl6GZTz3OHnGg9XQ0Ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:02:cc:72:99:7e:2c:fc:cf:7f:9f:0d:f4:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Mar 29 09:00:57 2025 GMT
Not After : Mar 30 09:00:57 2025 GMT
Subject: CN=1a9cf316889c788a86bc78178d54044836afbf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:54:11:7a:6e:9b:39:25:40:37:a3:e8:ce:
9f:a4:63:30:b6:0f:71:55:78:af:3d:7b:40:a7:07:
69:27:05:6a:aa:75:ec:85:1a:25:59:39:16:9c:54:
bb:3f:86:f8:0f:5a:1d:04:40:23:cd:3a:dd:6f:74:
1e:0f:13:d0:95:4f:3f:21:06:68:c0:f9:fd:4d:05:
3a:d2:38:14:f0:a8:62:2c:7a:db:4b:c6:b2:fb:1d:
b4:e0:28:a2:9c:96:e7:a8:fe:bf:7b:2e:35:27:68:
25:2c:e8:3b:62:4f:e9:b1:36:a2:de:da:40:a6:52:
c9:2d:35:9c:18:1c:36:31:a2:50:66:3d:64:e2:8e:
4c:2e:9d:9f:4d:fc:a0:61:6c:1e:ab:db:ff:74:90:
17:e2:61:20:a4:3c:47:81:80:10:3b:ce:20:35:6b:
16:56:89:41:61:a4:6b:10:c5:5d:12:de:58:1e:88:
8d:61:6e:50:d1:f9:cc:76:de:79:d1:4a:46:6d:3f:
28:5f:8b:49:4d:d9:29:f4:13:be:40:c8:10:e5:b7:
f7:ec:d5:da:58:60:fa:f1:3e:e0:b0:a4:8e:a7:f3:
1b:36:14:ff:9b:e9:55:82:94:38:cf:9b:1e:23:a9:
18:36:45:01:25:73:f4:da:00:fb:06:83:f8:22:11:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:F3:16:88:9C:78:8A:86:BC:78:17:8D:54:04:48:36:AF:BF:75
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:07:0a:ba:2e:0e:35:cb:e9:08:9b:55:1b:d8:7b:e2:96:
d7:4a:37:95:03:fc:9e:c8:5c:ea:95:9e:1f:68:be:66:58:27:
45:10:31:c9:6d:b3:ce:af:b2:10:6f:54:cd:59:74:e8:9e:07:
fb:d4:63:7e:b1:dc:2e:2d:f9:3e:41:51:f2:c2:d7:ab:67:54:
c5:07:3c:0f:22:a0:37:c4:40:cd:c6:04:5b:79:18:e8:21:c9:
bf:ce:f4:98:13:b5:54:e3:6b:c2:0d:7c:b7:f4:c1:8c:84:19:
d9:62:df:0f:40:54:40:aa:91:ef:fe:79:aa:86:bd:5e:b2:f1:
f9:11:bf:b3:7e:20:3b:b6:7b:93:19:b7:bf:8c:2e:e3:5d:f0:
ec:fa:d1:bf:0b:25:13:3e:80:24:f3:15:2e:06:b1:78:33:67:
f4:87:09:e9:c7:7d:27:bb:a4:1b:00:59:12:8a:98:ff:66:0d:
26:93:f9:14:74:fd:a3:18:8c:e7:8f:f6:86:fc:99:38:f4:2f:
19:39:c8:20:5a:d2:11:2b:8e:88:2a:9c:d9:2f:0b:61:a5:cd:
40:1b:f8:9e:9a:64:08:52:4d:23:eb:78:0a:5a:07:45:9c:03:
47:0b:23:0a:fb:59:6a:9b:89:98:34:ce:4c:3a:fe:de:56:0f:
88:3e:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:26 2025 by rpki-client