Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
File: XnKDhygnB8uQxfqebs30S2IGJdg.mft (raw, json)
Hash identifier: un1AbZp4YGWc3Oeo0nd2rHKKr/8YjE8LxXf+01/kuXM=
Subject key identifier: 9E:BB:45:AD:5D:F2:C0:6A:52:85:9F:49:68:D8:85:4A:75:EB:D1:47
Authority key identifier: 5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
Certificate issuer: /CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Certificate serial: 0194BD17D51578468F3C3E624094467FD63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
Manifest number: 0620
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: XnKDhygnB8uQxfqebs30S2IGJdg.crl (hash: NCl/Poxv2ZUmmXbX2spwf+BzqYKPFaAEw6me8EGU+9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d5:15:78:46:8f:3c:3e:62:40:94:46:7f:d6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=9ebb45ad5df2c06a52859f4968d8854a75ebd147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:02:f6:06:0f:5b:1b:08:00:22:b9:42:d1:
fe:da:e4:96:fc:a6:e2:eb:09:14:2f:97:44:31:c9:
75:bd:b4:e6:3c:2e:dc:96:6b:32:7b:d0:97:b4:79:
46:96:c0:be:3c:75:4a:e9:ac:b8:17:30:9d:2c:c1:
49:aa:2c:95:df:ec:29:84:93:76:87:fb:31:e8:43:
db:23:35:82:fb:be:4d:54:f8:77:59:64:88:ad:e8:
0c:33:24:f2:c9:65:bd:94:12:68:71:f7:e5:38:d1:
cb:ef:3f:06:3d:d4:e7:22:d1:58:8e:80:ca:a3:70:
22:2b:d9:19:8c:28:f9:c1:8d:f5:5f:da:4b:a0:3e:
f1:04:5b:13:81:24:d2:eb:03:17:6f:a1:b6:1b:7e:
ab:df:4c:a0:20:7d:91:1c:59:9f:2e:12:ba:11:9b:
ef:7c:c8:1d:96:f3:f6:c2:58:ec:b0:a2:fd:c0:a7:
b9:96:83:1e:cf:65:f7:3f:10:40:a5:41:e3:fb:8e:
e1:16:5f:58:fe:f1:07:5f:e5:5b:cf:0e:db:92:f4:
bd:b5:cb:78:9c:25:01:9d:ab:59:a2:46:73:c3:25:
7c:f5:1c:4a:bd:e5:78:33:cb:30:39:75:37:68:21:
7b:d1:77:df:dd:b3:5e:7b:14:1e:24:1c:b4:f5:1c:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:45:AD:5D:F2:C0:6A:52:85:9F:49:68:D8:85:4A:75:EB:D1:47
X509v3 Authority Key Identifier:
keyid:5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1d:53:22:3c:2b:c9:c1:e6:b1:a9:fd:55:51:2b:66:c9:b0:
b4:dd:b7:0e:20:70:f1:28:f8:1e:e8:b8:3c:e2:dd:e2:a1:47:
22:f7:fd:af:76:79:31:93:99:f8:3b:5b:0c:ce:bb:98:79:d2:
f8:84:95:74:15:53:3d:a8:0e:b3:a8:27:f0:62:d0:f5:b5:59:
06:33:eb:95:42:70:43:cb:a3:55:ae:ff:40:59:3f:b0:5a:cf:
a3:98:08:87:e1:5e:35:01:1e:55:a7:7d:8d:51:89:34:0f:2e:
d0:94:59:56:65:0e:74:e4:82:a0:d9:a0:ec:d8:0f:36:7b:28:
76:55:a8:ef:90:b3:f6:da:35:90:bf:4f:6a:a5:19:c4:e7:9e:
17:e7:c6:75:53:f2:5a:39:6d:0c:22:e8:f9:2d:84:02:f1:8e:
69:25:b8:be:eb:68:d7:d4:4b:e4:b2:ea:c2:66:41:37:4f:1b:
0b:bf:7c:4f:15:c9:38:0e:63:9b:99:cb:8a:f3:8f:db:67:78:
7e:3d:c9:d1:72:6c:cc:a2:cb:9d:08:c9:d6:ea:43:d7:31:c7:
6c:81:2a:3d:8d:1f:1d:95:ba:53:5c:78:1e:7d:ba:96:0a:cf:
99:79:da:b6:0b:b3:0f:ac:d9:29:5e:09:95:f4:64:b4:9f:f5:
62:34:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:55 2025 by rpki-client