Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: B7heKVyirFpyk7iOfvqvdCH0EcfNtjrdri8nHOKo1d8=
Subject key identifier: D7:FF:38:5F:FC:89:C4:2F:59:DB:BF:8C:78:07:AA:61:88:02:30:85
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 0194BBCED6D4D6F679D17901EEF1CE2E0FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: jzmYeJyjor8F6U+JeYDi7icy5gDfygMyIydfo30uN8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:d4:d6:f6:79:d1:79:01:ee:f1:ce:2e:0f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=d7ff385ffc89c42f59dbbf8c7807aa6188023085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:8f:ce:27:56:25:3c:14:2c:75:07:6c:3b:
90:5e:c9:6a:22:25:a0:f8:f9:0c:dd:2d:67:b1:0a:
e9:ce:36:6b:f8:f2:6c:ec:07:36:ce:c1:e7:51:9c:
5a:c0:ce:5e:55:4c:22:a5:af:d2:3d:65:31:0a:19:
12:5f:fd:34:9e:7f:fb:05:22:4c:34:a5:78:c8:38:
e7:a7:ea:d9:e0:8c:a3:18:64:a9:a6:fc:9d:75:c3:
f0:22:8f:dd:ca:81:95:33:c4:d6:02:14:03:a0:d8:
22:8d:10:94:53:b5:51:0a:0d:ae:3c:7c:be:31:7f:
a0:41:a1:26:ce:86:e1:e9:31:32:06:68:3f:18:c1:
f0:46:62:7a:39:b9:5f:ee:e6:30:96:6d:48:91:aa:
e6:09:61:21:7b:30:94:01:01:1f:0b:46:03:54:05:
ea:2b:b3:ac:99:3e:e0:da:18:2b:71:e5:55:f7:44:
6c:1b:93:7e:75:20:6a:c1:ee:6f:b3:98:d8:3c:be:
bf:3b:47:60:e0:28:64:1c:ca:b8:f5:3c:86:b4:06:
63:04:e3:05:30:de:0e:2a:97:e0:e2:4a:f2:a7:52:
d5:a5:20:72:0c:a6:1f:b0:28:a7:55:07:d0:77:29:
ed:00:f4:5b:bb:3f:72:e0:0f:bf:9d:99:86:57:19:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:38:5F:FC:89:C4:2F:59:DB:BF:8C:78:07:AA:61:88:02:30:85
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c1:65:1b:cb:29:f8:5d:6f:7a:cf:26:3d:be:12:1d:e4:2c:
e4:53:9d:f9:30:a6:c6:4e:a1:26:51:52:be:c6:8b:c5:a9:f6:
28:0b:59:3d:13:ec:ac:a6:bd:8d:d1:29:a5:60:a7:34:9a:33:
1b:41:e3:e4:69:ce:d9:36:91:ff:81:6f:3d:c5:70:81:d2:fe:
8f:01:38:6e:cb:9f:58:51:c1:13:f6:a8:46:d9:58:26:d0:88:
d7:c6:04:52:26:b7:55:70:86:b0:2a:de:62:0b:8a:b2:92:31:
06:d1:09:a1:92:23:17:22:96:c2:11:26:67:c5:7d:79:16:1f:
09:21:eb:fc:aa:a3:d3:e3:19:cc:ec:80:3c:2c:ab:7c:08:85:
3b:4c:61:6a:8c:3b:8d:2d:3f:d0:bf:ab:35:00:29:7c:a1:0d:
69:32:5a:0d:3a:3d:ee:fa:eb:1d:40:16:60:6d:80:c7:d2:cd:
bb:55:c5:b4:2a:4e:30:df:7c:2f:2a:ec:93:42:fe:5c:97:10:
aa:d4:58:2c:b6:5a:06:ee:54:fc:26:a6:e6:8f:43:f3:4c:28:
25:26:09:b9:36:0a:bd:04:31:0a:9a:dc:78:4f:31:20:b8:9e:
a6:1a:7e:7c:13:ac:b5:69:f1:0e:4c:2e:03:ca:eb:50:8b:3f:
84:d9:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:54 2025 by rpki-client