Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: Esqu3k98AghGR4hW5b7pSKUIFRmlQ43NlQO6xCS4eqM=
Subject key identifier: 1F:2B:09:DE:E6:62:9F:0E:7C:DC:EE:6A:EC:87:06:AA:EA:0E:16:E5
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 0194BBCDD0FA2093BDACA8CBD572E56CCE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 104A
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: 70iI6U/SuEWxM6j72+yyVSr/lFLaM7nUSCDkaOCi7ig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:fa:20:93:bd:ac:a8:cb:d5:72:e5:6c:ce:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=1f2b09dee6629f0e7cdcee6aec8706aaea0e16e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:58:64:98:96:12:9e:3c:17:87:e4:7f:c4:
15:6f:22:bf:77:21:99:53:0b:55:b3:51:9c:56:83:
e6:a9:c8:b3:e6:fd:ed:8c:b0:1e:78:68:43:d1:95:
dc:e6:1d:43:5e:af:89:29:49:31:c7:ca:b5:e9:36:
ec:59:8b:97:2d:5f:e1:a7:f8:36:06:98:0d:ba:24:
8a:bf:93:ad:49:0b:70:45:52:b6:72:55:f5:9e:96:
8a:73:58:04:76:2c:f8:a4:32:59:98:dd:05:14:b8:
74:de:2e:dd:f5:8f:02:5c:22:bf:14:83:49:f2:34:
0c:d1:45:c9:f3:9a:f8:d1:53:5d:d7:e7:15:27:ec:
25:ed:c5:fb:20:9c:58:e9:47:54:98:2c:89:1e:ef:
bc:11:9d:75:82:42:3f:74:f7:65:1e:bd:b4:3c:e1:
d1:1c:fd:f1:9f:fd:1d:d0:fc:3d:f9:ca:0b:57:3a:
db:89:38:54:bb:5a:3f:5f:bc:7a:ad:4b:95:bb:23:
84:b2:29:bd:6b:4d:d2:de:0f:42:cb:51:af:a8:6f:
b1:9a:7f:b4:d6:96:24:54:9e:d0:f8:48:96:d1:85:
e1:57:a8:12:13:b2:34:c6:8d:47:0e:20:0f:22:43:
16:4a:41:19:d9:a1:8d:5e:26:a0:96:14:9c:33:72:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:09:DE:E6:62:9F:0E:7C:DC:EE:6A:EC:87:06:AA:EA:0E:16:E5
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:63:1e:50:7a:7c:2e:ee:38:f3:90:9a:94:94:ee:00:75:ab:
5f:49:1f:49:e9:84:f9:71:ac:2b:ad:0c:1c:5a:22:66:09:d3:
2b:4c:0b:83:83:9f:24:61:60:3d:cf:57:14:7d:6a:6c:91:1a:
18:15:e3:ef:e4:63:0b:80:8a:94:38:c7:93:5e:c8:f5:f1:db:
48:d0:de:41:8c:54:1c:47:46:47:09:b9:75:10:24:41:bf:71:
ed:22:9e:b5:bd:4e:21:f4:6e:ff:c6:16:34:7a:24:a2:c1:ad:
49:00:85:af:39:61:ad:57:d6:c3:93:b2:e6:29:3d:4c:6a:d7:
ed:67:71:b6:4f:b9:5f:38:09:10:96:fb:8e:b5:23:fc:1d:d4:
9c:a6:22:2d:bd:64:15:95:7d:bc:b8:69:9f:a9:23:a0:5c:f2:
66:96:9d:3d:8c:fe:16:79:87:95:19:f2:b3:84:a6:b0:c6:ff:
f7:96:4b:bd:5e:89:ac:a7:7d:5f:8f:7b:d3:fe:e8:76:cf:02:
d1:f0:8e:6c:6a:56:7c:43:ec:af:8b:d6:e8:cc:4b:d9:7e:2b:
b7:96:56:7a:08:f2:64:39:73:2e:cd:7f:6b:c4:27:b7:3d:cc:
67:26:6d:35:bd:36:81:b9:42:20:66:e3:6d:26:2b:21:f1:82:
68:97:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:03 2025 by rpki-client