Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
File: XOackdRTOWv6Fm8FG_jwbAOghcs.mft (raw, json)
Hash identifier: hRvWlUTJeyYH4f6V5sf6kpTMU9eep4e8kLM80TNk69k=
Subject key identifier: 66:A1:E2:6C:05:E2:45:BC:12:E9:60:0D:67:F0:FA:25:FD:5F:1D:99
Authority key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
Certificate issuer: /CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Certificate serial: 0194BBCE718273D8C5241462AFAC4BD8786D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
Manifest number: 0936
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: XOackdRTOWv6Fm8FG_jwbAOghcs.crl (hash: H6FtRH9QO1twg2PQpys9H4NhuVjzjyI16Ifx1i4HUyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:82:73:d8:c5:24:14:62:af:ac:4b:d8:78:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=66a1e26c05e245bc12e9600d67f0fa25fd5f1d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:01:6d:f1:8e:06:f0:ed:8c:94:a1:3e:d5:
3f:8d:36:7e:e0:54:28:d2:0d:92:6c:f8:f8:f0:c8:
19:2c:9b:89:3a:eb:9f:89:16:99:32:7b:3e:12:37:
1a:8a:bd:cd:8d:11:2a:ec:6f:dd:fb:f0:04:af:55:
b0:f5:89:40:09:39:a9:8c:30:e6:ec:1b:3e:7c:d6:
49:2e:f1:7a:77:4d:ab:0f:91:fa:ae:92:9c:5f:a0:
64:fd:9b:18:b5:a0:9a:50:5f:cb:44:92:eb:b7:52:
d4:50:5a:80:70:ad:b6:c4:0b:08:78:c5:b3:af:91:
39:4e:ff:8b:ea:2b:53:e0:44:af:67:6e:ea:ac:7b:
f5:fe:04:0a:2c:ac:fb:9e:0f:9f:99:da:2d:cb:96:
16:9a:dd:a5:e3:4c:06:c2:7c:e2:2b:b1:a4:7b:9c:
d0:9d:06:1f:d7:61:c5:c5:2d:b1:1e:1d:6c:f7:49:
a6:39:48:4b:5f:31:24:24:87:79:35:a2:55:a1:c0:
34:72:4b:55:5d:b1:5c:37:70:60:eb:f2:a9:cb:0b:
82:31:37:60:69:70:49:86:6e:12:bd:7c:c7:b6:36:
77:f8:0f:16:98:5e:c0:14:26:a9:2c:fa:b5:bb:96:
85:da:d9:4e:30:81:72:4e:0c:50:da:c6:05:4d:bf:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A1:E2:6C:05:E2:45:BC:12:E9:60:0D:67:F0:FA:25:FD:5F:1D:99
X509v3 Authority Key Identifier:
keyid:5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:58:2c:0a:23:fc:90:a3:88:e6:bf:f7:88:1c:97:fc:c9:5f:
a8:90:0b:5b:a4:4a:1f:1b:3a:a7:39:e2:e2:65:78:02:06:12:
1d:4c:09:5a:99:83:49:66:9b:10:95:b8:a9:9a:6b:dc:eb:72:
9d:ec:ec:20:c3:67:df:34:ec:f2:10:3e:ee:42:71:ae:7f:eb:
29:42:df:b3:89:42:99:06:c0:0e:cd:2c:87:2d:2d:7f:46:62:
63:f8:c1:9d:14:de:b2:79:23:62:44:b7:df:ca:9e:7a:e0:34:
13:84:05:7f:d7:96:2e:3a:7c:e1:76:06:07:4c:fa:c1:5a:76:
eb:d6:20:8b:fe:18:76:dd:13:8f:f4:50:af:44:fc:e6:0b:ea:
40:b2:8e:86:89:70:e8:fb:ba:72:4c:c2:fb:33:50:ff:61:ef:
ca:42:a1:25:b4:93:36:2d:8c:03:dd:c0:fc:28:e2:3c:1c:52:
f0:f6:42:a4:80:c1:8b:34:cf:d6:f6:23:87:a1:95:f8:8b:f8:
a8:07:4e:4b:66:0f:6b:ce:51:b2:b8:62:84:34:90:31:27:61:
4f:1d:50:0b:59:8c:f5:ee:d8:2e:c4:83:0e:3f:4b:52:2a:68:
46:e8:7a:7e:b2:b3:9b:be:38:62:77:18:4a:fd:2f:5a:be:65:
cf:f5:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:13 2025 by rpki-client