Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
File: X06OdhPaoX6FqhB4yOwlXPGNQio.mft (raw, json)
Hash identifier: lyZbDtL/GXoxIzLP9Jrhd0USfY9q4PbDBndbylDrasg=
Subject key identifier: 08:21:FE:66:21:13:20:AE:C9:10:E3:2C:9F:69:67:8E:EA:71:E5:D0
Authority key identifier: 5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
Certificate issuer: /CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
Certificate serial: 0194BBCDD00BF9F547317260F95C5AD3A7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
Manifest number: 0B55
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: X06OdhPaoX6FqhB4yOwlXPGNQio.crl (hash: l4djCn297ubuG/IZbpEchqweDxj6Qn59c7+pL+vtJYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:0b:f9:f5:47:31:72:60:f9:5c:5a:d3:a7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=0821fe66211320aec910e32c9f69678eea71e5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:f1:b9:c7:95:9e:99:4b:69:d0:e6:06:30:
1c:fc:3a:74:9f:79:d1:5b:cf:8d:59:e5:41:bc:e3:
69:5c:25:fb:8a:7e:df:77:fb:05:1c:97:91:76:1a:
e0:9e:c1:9b:f6:fb:a9:39:28:22:2f:b1:bc:4b:10:
5a:96:28:fc:7f:b7:76:de:38:5d:4c:27:12:07:7d:
bd:66:10:37:9c:31:b8:92:d8:5e:c3:da:6e:9d:3a:
94:bd:b2:08:fd:83:9a:e7:a8:23:c4:ae:a8:8e:bb:
a3:c9:04:3c:bd:f5:80:5d:6e:3c:00:a1:7a:2d:d3:
46:d9:71:fa:f6:ef:25:04:71:21:ec:5b:6f:c3:06:
d3:9c:ce:16:48:cd:53:be:30:42:e3:e4:18:68:56:
b2:10:a8:e2:0f:96:84:ad:74:f3:13:7f:0e:fd:4b:
f9:38:99:6d:a0:e7:5c:bd:19:80:44:c3:bc:a9:d2:
c8:c0:90:cc:00:71:ee:a4:a3:2b:12:1f:87:99:57:
5a:3c:03:7a:6a:4c:d6:1a:85:66:72:6a:2b:70:ff:
6c:1d:cf:6c:c5:ea:5d:d5:ff:64:ef:dc:f1:d1:79:
07:9b:ce:ca:b5:52:61:07:74:0b:17:da:e5:f3:b5:
85:35:08:28:ed:9f:14:b1:1a:ae:0d:1d:5b:ec:49:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:FE:66:21:13:20:AE:C9:10:E3:2C:9F:69:67:8E:EA:71:E5:D0
X509v3 Authority Key Identifier:
keyid:5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a0:01:6a:9d:e6:90:46:76:58:43:d4:dd:77:2f:9a:ee:c0:
36:c7:d9:ca:9d:87:3f:b8:38:d8:39:bc:d2:90:d1:54:14:d2:
12:7d:0f:d6:82:38:fa:61:ec:86:ed:76:24:14:ed:a9:1a:90:
c6:ff:bd:78:a1:6d:e7:69:71:8a:f0:0e:04:87:cc:76:7d:d6:
0d:60:9b:3f:b0:8a:fc:ee:73:79:a9:2c:d9:bd:0c:9d:af:de:
73:64:77:b1:7d:12:9d:a2:1e:e1:f2:35:53:af:c4:1f:52:f9:
3f:45:33:78:1d:ad:09:2d:f1:99:c3:5e:f2:05:0b:72:90:f0:
b7:25:4a:a0:57:52:1a:3a:a8:db:b7:06:09:8f:f1:87:76:a2:
97:1c:55:b8:fc:79:ac:82:44:77:94:12:0a:21:e8:03:c5:7e:
52:46:83:7f:d8:ee:68:df:25:b9:20:72:99:9f:fd:03:5a:fb:
d4:54:1c:ca:c4:2f:6b:1e:86:a8:99:92:1d:07:60:f2:5e:8e:
47:a6:12:61:33:18:c9:e9:7a:3a:38:90:9b:d8:67:cc:41:4b:
35:b2:46:65:a1:75:ce:9b:5b:ee:a1:de:d2:1c:ae:24:18:d3:
6a:aa:80:cd:c7:3b:de:de:63:b6:e1:0e:af:3e:78:bd:ad:17:
1a:9b:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:44 2025 by rpki-client