Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
File: xASkYSDKwffLHkNvWWnWxDaJoFA.mft (raw, json)
Hash identifier: b1ZLTWiHnFRnl+WVioaoG0GIpz3UYio8ZesXn2pkENw=
Subject key identifier: 99:2D:22:90:74:62:D7:A1:E4:27:1A:C3:CC:96:9A:04:4A:70:70:0C
Authority key identifier: C4:04:A4:61:20:CA:C1:F7:CB:1E:43:6F:59:69:D6:C4:36:89:A0:50
Certificate issuer: /CN=c404a46120cac1f7cb1e436f5969d6c43689a050
Certificate serial: 01955EAB428F4A3B09F43B2AFF82D0BFEF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
Manifest number: 10FF
Signing time: Tue 04 Mar 2025 01:00:36 +0000
Manifest this update: Tue 04 Mar 2025 01:00:36 +0000
Manifest next update: Wed 05 Mar 2025 01:00:36 +0000
Files and hashes: 1: xASkYSDKwffLHkNvWWnWxDaJoFA.crl (hash: tafTsNMA76hIj/u9sGcLCp+Lds5YOrpw8X+VAvlY/mw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5e:ab:42:8f:4a:3b:09:f4:3b:2a:ff:82:d0:bf:ef:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c404a46120cac1f7cb1e436f5969d6c43689a050
Validity
Not Before: Mar 4 01:00:36 2025 GMT
Not After : Mar 5 01:00:36 2025 GMT
Subject: CN=992d22907462d7a1e4271ac3cc969a044a70700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:85:17:3b:bf:05:9f:9e:ae:8b:07:2a:d1:
54:cd:e8:f8:2f:3b:7e:68:95:bf:ca:a3:d6:7b:13:
9d:9e:2b:55:ef:30:aa:a0:29:d2:86:28:96:33:09:
ea:ce:c3:cc:68:ee:3c:9a:99:10:26:d5:e9:e1:e9:
93:16:36:c5:1a:ad:ab:d0:74:ed:29:1a:f9:2d:2a:
66:41:aa:f6:e8:9b:ca:e2:2b:3f:69:24:13:eb:b9:
3b:36:50:59:0d:d5:34:d9:e4:ac:b6:f8:84:57:13:
a6:0d:12:a9:46:a1:6c:19:b1:74:e1:6c:79:6b:35:
2a:a3:48:6e:83:0e:27:04:85:38:a5:0d:ca:3b:57:
df:2b:e5:3f:43:b9:80:dc:f1:ab:1e:b1:38:b4:e8:
0e:18:31:4b:33:80:83:cb:08:2f:c5:d2:03:0b:6f:
18:f9:2c:ba:ac:ac:d6:f1:00:5c:40:c4:24:ef:c6:
7d:59:cf:54:e3:7c:a5:7f:bf:dd:16:a4:91:25:96:
20:53:4e:99:90:8a:02:ea:d2:25:2a:bc:30:f4:c5:
0b:c9:22:3e:5c:61:84:6f:27:2f:e3:bb:0c:a2:0e:
7b:30:a9:97:34:04:11:71:06:bd:7c:08:d4:ec:ff:
6d:0d:01:ca:0a:19:8f:a3:ee:d1:a0:60:ae:99:d7:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:22:90:74:62:D7:A1:E4:27:1A:C3:CC:96:9A:04:4A:70:70:0C
X509v3 Authority Key Identifier:
keyid:C4:04:A4:61:20:CA:C1:F7:CB:1E:43:6F:59:69:D6:C4:36:89:A0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:30:fd:8a:9c:db:67:6c:bc:be:02:4e:b3:21:e7:e6:a4:34:
36:7b:0e:3d:f0:45:c7:52:c8:ec:74:91:59:c5:a0:e8:9c:e2:
06:3a:a3:04:12:ed:7b:e4:73:c6:29:5f:d7:7c:cb:43:e9:c3:
59:c3:b0:2d:a5:ab:8f:b9:17:f1:a2:fe:58:03:ff:e7:69:9a:
a1:cd:d2:b2:88:e8:76:42:8a:92:7e:90:75:6f:69:48:07:a5:
3e:5b:fe:70:06:2b:68:39:1a:c9:ad:4a:a5:d5:8d:3b:f8:bb:
d1:fe:30:94:aa:5d:47:d1:43:7e:6b:5b:e5:e7:7d:6c:2c:07:
77:ff:a5:da:ed:62:3c:d1:b5:c8:92:9e:f9:48:98:f9:b8:68:
4b:bc:d1:26:20:6a:76:f2:ce:cc:30:69:24:96:5f:41:45:52:
3c:d0:90:d4:c2:f8:98:c0:95:24:8e:86:91:3d:a2:2d:ae:29:
75:72:43:d1:66:3a:d9:75:38:94:60:01:d0:ae:26:2f:7f:75:
2a:f4:0f:0d:c6:5c:2f:ed:d0:cb:66:95:ae:29:eb:38:b7:4c:
ad:c5:ca:c9:2d:4f:c4:ba:c0:3c:72:c7:da:7f:26:6a:6c:3b:
41:17:37:b5:c6:53:94:a5:2c:89:33:6a:44:b6:e6:46:8f:71:
06:b5:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:24:52 2025 by rpki-client