Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
File: XbomMhShFwVRmA7pFxn42Ixia14.mft (raw, json)
Hash identifier: +hfbOa7aZptyc3B0a7UI5s69+Spi/DK0e8hAqtnbDgI=
Subject key identifier: A3:AB:D0:E1:5E:63:2A:1A:78:BB:66:8B:AF:9C:43:65:D9:7F:A1:B2
Authority key identifier: 5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E
Certificate issuer: /CN=5dba263214a1170551980ee91719f8d88c626b5e
Certificate serial: 0194BCA9EA7DB71CB797854F426E438CB0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
Manifest number: 0F95
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: XbomMhShFwVRmA7pFxn42Ixia14.crl (hash: BMOSTPeNSrOMrZXNIP8sl0PlyFJIrn3l+SJ+zlQOdkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ea:7d:b7:1c:b7:97:85:4f:42:6e:43:8c:b0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dba263214a1170551980ee91719f8d88c626b5e
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=a3abd0e15e632a1a78bb668baf9c4365d97fa1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:24:fb:3c:35:6e:52:8a:0e:cb:af:43:e9:
6c:d8:16:06:5d:bf:30:ea:92:16:49:c9:af:00:c5:
fd:cd:39:73:df:7d:d8:48:0a:37:55:60:9d:ca:79:
3c:cd:6a:9e:ba:49:3a:63:ad:a4:43:42:2d:20:ac:
12:be:37:b4:b3:7a:c7:c5:ff:a2:45:c9:ec:93:79:
6d:19:80:ee:66:dd:2b:3e:6b:a9:ec:48:c1:92:12:
73:36:0a:d7:e3:cf:63:d9:7c:9c:5b:84:63:31:83:
0f:70:48:d3:58:28:ee:89:7d:81:f5:fe:68:52:24:
03:6a:a2:d3:8a:e9:1a:f3:b3:fe:09:6d:1c:92:31:
a3:50:7a:0b:ba:69:71:cb:09:33:e1:e1:5e:5d:2e:
1f:9a:43:38:ad:85:75:a3:6e:cb:ca:83:d7:e2:4b:
74:69:08:46:d4:c0:eb:26:04:ed:74:d5:2b:9f:55:
e6:4b:ea:34:9a:fb:4d:25:98:39:26:18:5b:8f:a4:
3e:00:b6:a3:f0:56:a7:d4:fa:af:4d:ad:43:72:dc:
89:e7:95:a4:ec:47:e1:2b:27:a8:c6:70:28:46:1a:
a2:e4:d2:3a:4b:89:7d:16:41:da:8b:eb:37:6e:99:
08:49:53:83:fb:96:87:36:83:b2:dc:fd:db:0c:07:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:D0:E1:5E:63:2A:1A:78:BB:66:8B:AF:9C:43:65:D9:7F:A1:B2
X509v3 Authority Key Identifier:
keyid:5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6d:09:e3:bb:21:85:8b:fd:80:57:cc:9e:ca:58:33:e3:5b:
a1:1c:de:78:3a:3a:95:98:bd:77:32:27:dc:1c:5f:6e:c1:f8:
49:e4:c3:09:b3:f9:f0:99:ad:62:ad:37:a4:ec:1d:26:dd:2d:
a9:79:14:f1:3b:eb:6d:40:1a:12:0b:14:41:d7:24:78:f0:bc:
4e:ad:f6:d2:38:b5:a7:14:0f:90:13:bc:45:b6:db:bc:b4:2b:
68:53:21:d9:19:18:3b:c9:cb:82:85:06:dc:f7:c1:ca:7b:9a:
78:e2:93:76:b9:9a:2f:bc:a1:e8:32:a4:a5:c7:16:6a:d9:b0:
97:70:cc:55:34:b4:dc:b1:ac:43:09:14:2f:3f:1e:c6:7d:01:
ab:71:38:84:9c:89:31:87:55:48:ac:f8:05:5e:27:c7:16:5f:
d7:73:23:4f:bd:fc:4a:ac:ec:42:5f:b3:54:74:da:78:6b:89:
c5:b8:75:65:d5:2c:d0:a7:96:13:ca:9b:89:09:2b:0b:29:e6:
c6:f6:26:78:b0:ed:9d:5c:40:1b:0f:e1:1d:1e:b7:a2:a9:e6:
25:6d:4c:98:04:33:79:d3:12:64:89:c7:c0:f9:03:d7:52:21:
31:dd:cb:c9:70:4f:d2:a7:d4:86:02:0b:10:4a:ba:df:f6:64:
98:f7:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:01 2025 by rpki-client