Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: ZcdunJE8MtAho1hJwANQRH8GZzuIksQppqvezDAXtaE=
Subject key identifier: C2:84:AB:51:D8:8B:EE:25:42:86:FD:6D:06:3F:3D:78:13:A5:09:59
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 0194BBCE3395034B928A26E5DFE83138A463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 0F03
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: IfNbUEddgpeAee8QOdN7OTBNEXSwWxUuc7vpwkdBlxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:33:95:03:4b:92:8a:26:e5:df:e8:31:38:a4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=c284ab51d88bee254286fd6d063f3d7813a50959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:a8:8a:62:b8:a5:03:9c:67:99:49:a1:b0:
2e:c6:cf:cd:83:d5:a7:f9:10:c8:10:5f:69:91:a0:
f6:2a:af:b6:d5:f3:ce:8a:21:00:8f:e0:ec:9e:12:
bf:7c:1c:27:cd:7a:48:5a:b9:07:27:75:17:88:82:
d1:43:b4:0c:12:0a:e7:1d:ec:63:54:b6:e8:39:02:
b3:4f:c7:c0:69:14:44:fc:35:e9:00:81:bc:01:91:
4c:bd:ce:b9:e7:88:6a:df:3b:a8:fa:1f:7c:94:fe:
74:92:20:ef:2a:e3:62:eb:18:d9:01:26:4b:1a:d9:
6c:2a:aa:90:73:db:97:42:3c:d1:83:f0:6a:5e:6b:
c7:83:68:7b:57:6b:ae:f6:21:40:8e:7e:7c:bf:b7:
3a:d4:f1:c9:52:f8:af:f2:ff:f8:ce:cb:55:43:da:
e7:30:34:77:d6:41:4a:bf:8c:65:c1:ad:88:14:ba:
c6:1e:88:5e:35:d1:a1:25:14:52:31:58:5a:9d:f4:
8a:8d:35:c4:a0:66:1c:f3:51:75:a5:3e:14:0c:50:
9f:fc:d4:98:f8:ca:69:3b:0e:ec:e7:a9:97:2f:e6:
ca:f3:8e:73:68:b2:f2:c3:92:c0:16:4f:3b:94:d1:
a2:be:2a:4b:d8:43:0a:82:b0:c1:24:55:f9:a3:ec:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:84:AB:51:D8:8B:EE:25:42:86:FD:6D:06:3F:3D:78:13:A5:09:59
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e2:2b:fd:d2:d3:74:0d:c7:d0:88:32:a8:65:b8:c3:fb:45:
7c:de:2b:c3:29:74:c6:96:4c:4a:8b:1b:4e:f2:be:28:85:c2:
8b:70:55:bf:4a:69:44:0b:79:87:7e:7e:a9:4b:e3:84:cb:75:
06:c8:c4:20:06:ae:c3:f7:46:9c:ff:d9:09:2f:e5:fc:0c:fe:
af:8b:b7:0a:de:97:70:a2:70:dc:fe:e4:ff:b6:81:ab:f7:9c:
d7:80:d0:11:24:0a:d7:14:7c:04:53:2e:10:9c:d5:85:b9:26:
7f:7d:45:be:f2:bd:9f:bf:aa:a1:b4:37:39:aa:c4:17:b1:3a:
1e:df:06:47:43:d3:98:11:81:53:60:a5:91:87:cb:67:78:96:
21:a8:1e:23:18:4f:43:78:69:90:b4:1b:a1:c3:ae:7f:94:37:
02:f0:05:08:46:ea:cc:64:e7:6e:bf:8b:fc:93:ba:c0:3a:66:
3d:78:f1:49:83:40:8a:50:88:ec:96:cd:5f:54:f6:c5:15:ad:
f9:e4:df:f2:7f:6c:94:53:31:49:8b:5d:30:e0:0d:ad:49:de:
4e:c3:d7:b5:f4:2b:54:f4:77:06:09:22:db:f4:91:54:c6:f4:
7e:b3:01:0f:e6:27:d7:1e:02:f2:1b:fa:6b:b2:07:e0:98:be:
e0:7e:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:12 2025 by rpki-client