Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
File: X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft (raw, json)
Hash identifier: mZCbUDM+sHWNzOwPwUFkChM35+LKpgZbCdWfNbifAWk=
Subject key identifier: 06:A5:8B:58:80:A7:CA:36:84:DA:4D:34:A8:05:E3:09:AB:9A:3B:50
Authority key identifier: 5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
Certificate issuer: /CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Certificate serial: 0194BBCE5FED9EFA64A4EF9CC3DD3541CE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl (hash: T32c+OzlMVL0shYZRzsLzmfzSymcqy74NcD7c3hDI9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:ed:9e:fa:64:a4:ef:9c:c3:dd:35:41:ce:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=06a58b5880a7ca3684da4d34a805e309ab9a3b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:dc:1c:02:0d:d7:cc:8a:c2:45:a3:40:55:
10:98:1d:f2:89:52:05:7a:d0:5e:87:76:c2:42:fb:
48:f0:ba:d9:f4:cd:60:d7:cb:3e:cb:25:18:77:0b:
fe:4c:72:7a:4e:45:43:2f:50:1e:7c:91:58:61:5a:
e3:f5:85:bf:9e:bd:44:6f:fa:04:0a:9f:06:dc:57:
e7:13:55:05:c7:b9:28:9d:22:4d:a9:3e:0b:da:3d:
af:da:ea:e4:99:54:36:5c:54:cd:df:6d:41:59:66:
e3:cb:ac:1c:b0:d2:ed:5d:e6:98:c9:63:5f:c1:5b:
f1:79:a3:71:d5:25:e6:bf:4b:20:38:e3:ad:c4:50:
d7:4e:24:11:02:e5:e3:ca:29:01:88:28:b4:3b:66:
69:7d:61:d9:86:4e:ea:0a:63:79:19:69:fc:84:a9:
ee:b6:c3:9d:46:20:66:a9:9f:e1:d4:00:01:cc:95:
df:34:ea:6a:f1:80:7f:63:aa:74:23:bb:56:1a:42:
10:38:41:e4:c0:06:8e:a8:8a:a5:d3:80:fa:12:43:
3c:25:5e:53:7a:37:0b:53:c9:43:31:36:9d:56:e2:
29:b6:0a:aa:34:3f:e3:33:8a:0d:4d:9c:bd:2f:7f:
38:77:f8:8a:69:19:fb:7b:ff:c3:9c:a7:e8:70:43:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:8B:58:80:A7:CA:36:84:DA:4D:34:A8:05:E3:09:AB:9A:3B:50
X509v3 Authority Key Identifier:
keyid:5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d3:08:61:b0:40:e5:79:20:2a:f1:a1:38:88:c6:b5:d4:eb:
91:45:da:e5:6e:4d:a1:69:8e:ea:5d:3f:97:e3:5f:12:d8:5e:
f9:11:74:ba:c7:b9:62:fb:c6:ff:11:56:f4:3f:3e:85:4f:01:
6e:08:5d:ed:94:56:ec:30:19:20:7c:7d:1a:74:4c:30:b6:e9:
a9:50:5f:3a:88:4e:b5:4f:32:88:f1:c1:3c:1d:61:3a:21:18:
aa:74:78:e1:0d:08:c2:5d:f6:4b:a3:9c:82:24:0b:f4:a5:98:
fe:98:70:0b:e0:e5:10:8e:84:bb:11:9b:93:6f:61:9f:c4:5b:
02:51:a5:30:d2:c3:90:9a:c5:3f:ac:25:0d:e4:7c:e3:ec:49:
83:d5:37:b3:48:44:ac:96:d9:f7:94:b9:23:05:2d:b0:e2:35:
cd:84:e6:6b:f0:df:73:15:81:26:7e:2b:06:4b:af:f1:e7:07:
bf:84:f7:3c:4e:e9:93:fa:d3:0f:c3:da:91:de:e6:cf:32:c9:
c0:55:46:76:23:5c:68:54:96:32:a1:4d:26:64:90:de:08:58:
d9:3f:28:18:48:f0:6a:60:7f:4e:74:45:e9:e9:85:b2:c6:2e:
64:3e:d9:52:c4:e8:da:68:09:b6:ef:c0:17:8a:bf:e1:fc:09:
a7:4f:68:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:01 2025 by rpki-client