Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
File: X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft (raw, json)
Hash identifier: ZSqyWwdMhp4f4Q+KKHIVrcYVq/b/wTe5hCuYmKj8Lec=
Subject key identifier: 5C:7E:03:72:60:6E:B6:0B:A8:3E:E8:38:76:D1:7E:56:95:F2:E4:AF
Authority key identifier: 5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50
Certificate issuer: /CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
Certificate serial: 0195CB3EF416BDFBA07625DFEF9369543041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
Manifest number: 0746
Signing time: Tue 25 Mar 2025 03:00:55 +0000
Manifest this update: Tue 25 Mar 2025 03:00:55 +0000
Manifest next update: Wed 26 Mar 2025 03:00:55 +0000
Files and hashes: 1: X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl (hash: YvH12WwWXKEx+UAc4YS82lCGBomHcs581/6N3C5/6hU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cb:3e:f4:16:bd:fb:a0:76:25:df:ef:93:69:54:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
Validity
Not Before: Mar 25 03:00:55 2025 GMT
Not After : Mar 26 03:00:55 2025 GMT
Subject: CN=5c7e0372606eb60ba83ee83876d17e5695f2e4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:d3:2f:c9:8b:a9:f9:26:d5:c0:89:67:25:
9e:e0:f4:fd:68:e9:a9:dd:fa:ab:42:27:c6:30:cf:
08:0c:e7:b0:53:db:be:d3:d6:3a:5f:59:ec:c7:d7:
85:45:df:fd:9d:cb:7b:26:cb:fd:5a:0c:80:c5:59:
ec:25:5a:e0:e2:ac:6f:93:f5:c6:55:d0:7f:a1:6f:
ea:e3:38:ca:d7:66:90:54:f5:03:0b:06:3c:68:12:
3c:39:09:e2:66:ef:09:60:71:04:8f:93:d7:a1:fc:
f0:93:57:91:f2:f2:ce:cb:cc:c0:2c:0c:4d:99:aa:
9a:7d:05:c9:ab:c6:d8:37:f3:32:6c:19:4c:f8:6b:
a9:4c:da:7f:ea:a8:b3:61:2d:e2:5b:f5:20:dc:3f:
e8:5e:39:2f:50:47:40:64:6a:f0:65:29:ab:d1:84:
d0:96:4f:8b:83:05:32:f2:26:8f:d5:31:cb:ff:5e:
d2:18:bc:41:a0:39:42:b4:be:51:c9:d6:ba:93:6b:
6f:9a:db:21:70:c7:84:bb:75:4b:1e:d0:df:de:c9:
0e:4c:dd:a3:6f:6e:b8:a7:71:57:61:df:21:94:d3:
1a:87:22:c5:9e:3e:9e:5a:42:2f:a8:a0:98:3b:24:
de:1b:99:ad:8b:52:4e:88:88:9d:49:f6:56:fd:2e:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:03:72:60:6E:B6:0B:A8:3E:E8:38:76:D1:7E:56:95:F2:E4:AF
X509v3 Authority Key Identifier:
keyid:5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1b:3f:95:94:8b:d0:f5:8f:96:69:82:58:0b:99:a3:78:c1:
c9:59:5d:2d:22:bd:0e:1b:8e:40:66:82:7f:2b:00:77:91:46:
d8:e5:71:e0:08:9c:4f:fe:c5:8c:c9:57:c9:d7:df:2b:ce:b0:
7c:63:6c:fa:84:2f:96:84:67:a5:1f:3c:19:8a:63:56:84:77:
de:29:c6:ad:9f:ff:ba:93:b7:61:8a:e2:f5:00:1f:1a:09:12:
26:9b:9b:6a:f3:56:eb:29:a9:c1:c9:90:ae:6d:a4:13:c3:0e:
d4:c7:4f:38:90:45:22:c2:27:35:2a:db:bc:e9:2a:3c:d5:45:
43:29:63:77:e1:fb:47:b5:16:56:30:2e:f3:4d:3b:7b:2c:2e:
02:17:0e:b7:1c:67:62:5c:c3:aa:14:49:63:40:70:3f:87:22:
3f:23:f1:e7:01:67:fc:4f:41:e9:2f:72:c4:63:2b:df:55:8a:
37:9d:2a:ed:37:09:33:d2:19:64:19:65:11:e9:3c:9d:6f:d0:
0c:58:91:19:af:89:31:8b:8c:12:0b:e5:27:91:15:93:21:80:
1e:07:5f:3c:01:ea:e5:f7:7a:41:24:fd:8f:9b:e1:a7:14:40:
f4:13:a0:e3:9b:ab:fc:98:49:86:04:9b:3a:c3:60:dd:13:d1:
e6:d5:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:00:52 2025 by rpki-client