Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25ede0-4816-4e40-9aa2-4be7d35aa8b4/1/p1xdLcqycV28jhKflRzxW0LWhVc.mft
File: p1xdLcqycV28jhKflRzxW0LWhVc.mft (raw, json)
Hash identifier: prxEGrPo+uOwUzugQdkehzJxXZx4LgYKaMRIGC97s+U=
Subject key identifier: 22:5C:57:60:F1:3D:E8:4F:06:72:07:36:33:B9:95:6A:45:A0:DA:02
Authority key identifier: A7:5C:5D:2D:CA:B2:71:5D:BC:8E:12:9F:95:1C:F1:5B:42:D6:85:57
Certificate issuer: /CN=a75c5d2dcab2715dbc8e129f951cf15b42d68557
Certificate serial: 018D5AC343103186090769FE1C9758AC9E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1xdLcqycV28jhKflRzxW0LWhVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25ede0-4816-4e40-9aa2-4be7d35aa8b4/1/p1xdLcqycV28jhKflRzxW0LWhVc.mft
Manifest number: 01
Signing time: Tue 30 Jan 2024 14:26:02 +0000
Manifest this update: Tue 30 Jan 2024 14:26:02 +0000
Manifest next update: Wed 31 Jan 2024 14:26:02 +0000
Files and hashes: 1: p1xdLcqycV28jhKflRzxW0LWhVc.crl (hash: Ep3UKyOjtmA8azxTlm9ESyfypAa+anxgRk5aS3j1lI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:c3:43:10:31:86:09:07:69:fe:1c:97:58:ac:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75c5d2dcab2715dbc8e129f951cf15b42d68557
Validity
Not Before: Jan 30 14:26:02 2024 GMT
Not After : Jan 31 14:26:02 2024 GMT
Subject: CN=225c5760f13de84f0672073633b9956a45a0da02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:62:3a:87:e2:fc:01:de:bd:9b:2a:c6:2d:
50:68:50:fa:0a:49:33:32:15:05:b7:1d:79:0e:09:
97:de:72:98:46:f4:e5:ee:d0:1a:29:14:8d:61:07:
73:ff:29:74:31:ff:53:a4:bd:f4:8f:f0:a4:37:69:
5a:63:af:ac:66:e4:f5:7c:c4:6a:04:7e:ff:ee:6b:
55:cb:5c:50:77:a4:99:84:85:e0:c4:a9:3f:9c:1a:
5d:07:80:b3:66:7c:9c:d6:87:5d:28:78:fe:1f:29:
26:2f:7a:67:a3:fb:ab:3c:40:96:22:bd:ba:1e:a1:
47:bb:9e:89:47:7b:4b:b0:1d:cf:d1:d2:46:7b:9d:
54:7b:9b:48:77:8f:4b:b0:98:43:f0:d6:f5:36:1c:
3c:2c:20:d2:04:fc:85:ef:0e:fb:f2:e2:0a:7f:58:
23:f7:d6:b7:39:6b:a6:f9:a1:61:74:e8:24:d7:30:
7d:ad:e9:80:0a:3e:4a:dd:a7:a7:b1:2e:dc:d3:37:
07:1d:b3:08:bd:ef:81:fd:a6:64:63:ad:c0:a4:d6:
f6:1d:80:58:68:05:eb:77:86:aa:a1:6b:0e:66:f7:
88:ad:81:8d:7f:05:46:05:45:85:25:a8:77:73:e1:
a7:5d:76:01:09:34:09:75:35:fb:17:a1:f4:16:20:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:57:60:F1:3D:E8:4F:06:72:07:36:33:B9:95:6A:45:A0:DA:02
X509v3 Authority Key Identifier:
keyid:A7:5C:5D:2D:CA:B2:71:5D:BC:8E:12:9F:95:1C:F1:5B:42:D6:85:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1xdLcqycV28jhKflRzxW0LWhVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25ede0-4816-4e40-9aa2-4be7d35aa8b4/1/p1xdLcqycV28jhKflRzxW0LWhVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25ede0-4816-4e40-9aa2-4be7d35aa8b4/1/p1xdLcqycV28jhKflRzxW0LWhVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ae:cb:83:9a:33:d3:a8:91:4d:27:a3:c0:0f:ed:42:67:22:
09:01:67:05:6a:e3:e8:12:78:ca:64:5c:e6:61:11:b6:c0:d8:
4a:84:13:0c:5e:52:8e:c0:cf:57:e7:29:dd:d3:2c:84:31:01:
c7:c2:ef:04:46:2e:f1:de:c0:68:b1:a8:ac:34:8e:4d:be:42:
8d:26:4d:77:d4:59:4d:f3:97:85:3e:c7:b0:8b:6a:55:25:29:
5f:15:4d:bc:74:05:bc:39:5c:9b:8f:9d:95:0e:8e:a1:48:1a:
22:aa:86:09:b9:c3:6f:8a:3d:ec:46:d3:35:ad:70:89:9e:f7:
83:dd:16:ab:84:80:62:e4:af:26:74:43:2f:a5:0e:af:7d:8e:
44:3f:e9:3f:68:5b:5d:01:d0:cb:41:68:91:d0:6b:09:ef:fe:
38:72:5b:34:40:77:95:b6:9c:45:33:19:a9:c1:57:00:45:85:
6a:4e:e3:33:d3:37:0c:17:d2:88:1f:75:83:25:cc:6a:eb:3c:
87:ec:0d:72:0a:e8:1c:7d:83:13:96:2c:50:55:22:36:b0:e9:
3b:ce:3f:66:13:b8:b4:ce:13:c3:85:4e:63:04:b4:64:6c:ea:
f9:cf:49:d7:18:e1:f9:32:40:ce:0a:cc:86:df:f6:20:20:5d:
b6:56:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:57:48 2025 by rpki-client