Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
File: XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft (raw, json)
Hash identifier: 1M2IhNPSguKJHh2DzY258JFSj8nnhRwHEIL3YfhW9uI=
Subject key identifier: FE:8A:F4:A7:74:20:5B:59:15:BE:6F:48:B6:FC:C1:F0:62:B5:A3:62
Authority key identifier: 5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
Certificate issuer: /CN=5e55afde34211bcee6a7fd992488a24927b46947
Certificate serial: 0194BD1798D827E7FF23426FC9FF4F10E76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
Manifest number: 74
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl (hash: HR8w1aJZImSGFrgZCfpKPzHtRxkD3uVeTLe+pqm8ax4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:98:d8:27:e7:ff:23:42:6f:c9:ff:4f:10:e7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e55afde34211bcee6a7fd992488a24927b46947
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=fe8af4a774205b5915be6f48b6fcc1f062b5a362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7b:a3:a2:02:64:e8:57:55:ae:60:4d:3b:49:
64:77:49:5c:f8:fd:e4:1a:0a:d3:95:13:63:31:bb:
3f:6b:eb:30:40:01:7e:1f:a3:66:97:b4:96:a6:63:
81:6c:6c:f5:36:24:09:e8:d1:69:f3:f0:29:b2:d6:
4d:7e:61:d8:18:0a:96:a6:be:0e:cd:a7:b9:9a:f3:
cf:5e:a5:46:fb:be:89:da:64:13:1f:47:dc:81:41:
d1:20:08:db:ef:d0:17:3e:ec:6c:da:ed:7a:ad:08:
e6:47:06:37:38:28:30:b2:cd:7f:25:f5:23:d8:20:
44:ce:e4:b1:73:e8:be:55:0f:7a:71:d0:49:a5:c8:
2d:f4:f1:88:34:ad:3c:87:b8:99:d6:dc:3d:c3:8d:
b4:bd:a1:6e:5b:30:f8:6f:6d:fe:6a:b0:15:fc:0a:
b6:13:06:bb:d4:9b:bd:90:7e:fe:e0:59:3d:06:7b:
44:75:1d:9e:ff:9e:e2:86:b6:17:ae:40:31:e5:49:
a7:38:7f:12:51:6a:6a:75:3c:03:64:cf:56:03:b2:
4c:5c:a6:87:81:3c:7c:73:4f:28:d7:56:cc:a2:20:
c5:ff:86:46:aa:07:30:3a:94:35:5d:99:aa:1a:f5:
c3:8d:f4:f1:da:95:3c:df:8c:e1:3e:1b:c6:6d:ad:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:F4:A7:74:20:5B:59:15:BE:6F:48:B6:FC:C1:F0:62:B5:A3:62
X509v3 Authority Key Identifier:
keyid:5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c0:cf:9f:7d:35:a1:58:f7:e4:d9:49:18:50:f8:8c:43:bc:
e7:cd:7d:d8:a9:8f:2d:12:69:f8:c8:a1:6c:7c:c4:55:7a:6c:
8e:3d:60:19:c6:27:bc:f7:a4:41:f9:c7:d6:ea:55:a4:cf:bd:
63:7b:31:d6:9b:7b:33:4f:03:4e:06:6f:cd:fb:b6:7f:61:7c:
34:6d:23:83:78:85:e5:b8:7e:f4:33:93:c5:8a:31:2c:df:15:
0f:74:d8:7e:d7:27:15:f9:d2:b2:b6:3c:14:b7:62:13:6b:b7:
f8:3e:6b:d8:5c:54:1e:e1:29:e8:fc:85:07:69:42:07:29:e6:
35:11:4c:21:69:de:f0:85:01:0f:1b:6b:31:94:21:9e:56:d4:
cf:19:c8:72:b4:35:9d:27:cd:dd:07:24:72:c2:97:09:1d:2c:
95:34:96:35:92:0f:28:8a:2c:cf:80:53:85:a5:bf:45:56:0f:
f7:f5:90:ee:dc:08:26:48:4d:86:f3:4f:ba:7a:e1:54:2b:5b:
6c:bf:42:a3:0b:34:3a:17:cd:18:df:ca:31:1d:ad:7e:7e:93:
07:0c:44:1d:d2:71:b2:97:66:fe:ce:46:4f:38:d9:87:ea:59:
81:f3:51:2e:34:ad:cf:58:f5:6c:b1:6d:cf:53:31:46:8f:bf:
08:42:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:18 2025 by rpki-client