Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier: a55OEv56db/doQPiG+7VH11PyJF/RaOXtU3pLfiooUo=
Subject key identifier: 1B:E3:91:6C:D5:98:D5:68:E0:C9:01:A8:B3:06:12:DE:C5:51:32:C7
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial: 0194BCA9C47690D88EFCEF5F57F05AC964E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: TJUwLjrLK7B1hCGeLCq7K3bVFFNN8o1zC48oFtfaic4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:76:90:d8:8e:fc:ef:5f:57:f0:5a:c9:64:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=1be3916cd598d568e0c901a8b30612dec55132c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:ec:67:e8:0c:11:da:66:a1:92:0a:d2:ac:
19:d2:b0:56:18:00:99:1a:d5:ae:a1:e0:d1:74:b3:
21:37:2b:b4:71:6e:6a:80:62:f2:06:b5:83:49:69:
81:8e:a4:cb:9f:92:95:22:de:02:18:4b:05:95:22:
ca:01:23:34:03:3c:fb:bd:b6:f1:28:00:21:8f:6b:
ea:00:2e:90:76:7e:40:1e:33:2d:0c:28:aa:53:a3:
ea:9f:7d:00:62:1c:c9:61:ed:1c:28:45:d9:95:54:
15:85:8c:e8:7a:7f:1c:6a:8b:31:a6:65:1a:b0:7d:
92:39:c0:5a:8d:7f:a0:7e:32:e4:94:56:6e:ce:e0:
0b:84:20:4e:b5:6e:63:e6:58:ae:05:43:e5:e0:f5:
7b:32:09:d8:4a:3f:d3:51:3b:fe:9a:16:a4:28:1a:
12:9b:cf:00:b7:8c:c6:b7:f4:dd:43:4b:4b:ef:c9:
34:9f:90:94:d8:77:79:77:c0:e7:85:9e:9a:53:15:
c1:4d:7c:a8:ff:0d:01:62:e4:2d:b6:d0:02:0b:29:
17:88:39:c2:8c:4a:77:40:2a:1a:25:2c:14:8d:37:
5d:ab:41:26:ad:23:05:87:d3:3c:42:2a:4c:a2:e3:
b8:0b:d1:9f:c4:c5:c5:f7:4f:cb:28:57:51:42:73:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E3:91:6C:D5:98:D5:68:E0:C9:01:A8:B3:06:12:DE:C5:51:32:C7
X509v3 Authority Key Identifier:
keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5b:6e:f4:97:9d:09:48:1b:1a:9f:10:a4:45:3b:1d:de:6c:
bc:f4:1e:90:de:3f:75:62:de:b9:d1:e8:da:2c:12:b7:aa:3f:
9c:85:5f:99:bd:9f:52:14:64:b4:a6:5a:03:79:14:a9:6f:c7:
dc:c3:77:ed:46:04:98:22:4b:04:46:ea:30:b6:df:24:70:45:
8e:02:76:3b:6f:1c:a8:b9:c2:3f:da:1f:af:70:ca:c6:09:d5:
55:3a:2b:b7:b8:6c:1b:2e:82:de:f8:3f:8f:85:bc:f3:a8:93:
12:a0:96:ef:b5:8d:31:e9:69:36:9b:de:47:7b:64:59:18:01:
f5:31:df:e2:55:8f:da:8a:9c:00:de:ca:fa:39:6b:a1:2d:7d:
8d:a7:de:d9:e9:f3:e4:8c:a8:a6:1f:f6:9d:47:5d:25:49:4c:
1a:89:de:07:8a:1f:7e:2e:70:60:7b:23:ad:4e:2d:e3:b3:5c:
d5:a3:ee:2c:f0:6c:e4:2c:9b:82:78:85:e3:9b:47:af:6f:81:
cf:22:1d:72:a1:63:74:f7:45:08:e6:2f:69:05:8e:63:e0:ed:
5b:a7:a1:87:ce:4e:1a:fb:19:1f:9f:fc:43:d4:b3:19:b6:90:
5a:13:d6:d7:0b:28:3d:bd:db:e4:54:1e:cb:23:b4:d9:6d:91:
fb:f7:16:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:08 2025 by rpki-client