Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: 1zpEHvb8zmaT1Q5mflUUqunZcJkyJPb7pWxWEtK/HW8=
Subject key identifier: 41:87:08:58:B9:49:B4:58:1C:5F:A0:23:20:F9:4C:E9:F4:10:18:05
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 0194BBCDC13B8337373F2C7C60067B25FC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 079D
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: 8ZRtBr2X1hyQHwHJNiWkhqs6sfAwGhGRJRtGTaIlbLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c1:3b:83:37:37:3f:2c:7c:60:06:7b:25:fc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=41870858b949b4581c5fa02320f94ce9f4101805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:22:f1:80:2b:ee:cb:b3:ae:a5:99:69:f7:
12:87:58:0f:e9:d6:fa:16:82:eb:39:4a:b8:aa:1a:
ec:96:73:29:0c:7d:c5:20:7a:2a:85:9d:0e:6c:41:
32:22:cf:56:24:3e:fa:e8:01:22:40:aa:ba:a3:86:
8d:13:48:4e:65:dc:88:c0:8a:ae:b8:10:4c:58:f0:
c0:90:f4:75:c8:04:e8:38:5f:b4:3c:3b:e6:b4:3b:
c7:cd:5b:1b:23:1f:4f:4c:0a:d1:17:4e:02:98:e6:
05:86:7f:e5:29:8a:9a:7d:90:f5:b8:10:23:4a:01:
4d:d9:e7:b4:98:bb:2e:82:c4:85:26:f7:a2:2f:8c:
38:43:7c:f8:09:db:7f:6f:ef:b4:5a:82:5f:af:fa:
3d:14:08:21:f9:ef:67:bc:d3:11:73:dd:79:d6:e3:
69:85:29:71:a4:1a:c5:ac:cf:e5:85:67:2c:e6:bb:
85:33:61:1f:a2:06:da:5e:0a:b4:a4:1a:6b:4a:4a:
bb:10:35:d5:43:96:a7:50:8b:4e:ec:ba:80:c6:ae:
f9:aa:7e:99:48:50:95:83:17:70:15:a0:c2:b6:af:
91:3c:e2:c9:10:58:c0:32:38:ad:f0:08:c1:f6:06:
c2:ab:93:32:97:f5:0d:e1:9e:c1:34:91:f7:a5:de:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:08:58:B9:49:B4:58:1C:5F:A0:23:20:F9:4C:E9:F4:10:18:05
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:28:a8:79:1e:fc:a7:f6:88:ba:87:dd:37:31:ae:6d:54:88:
02:5e:15:09:59:6d:bc:82:ae:b1:6e:22:7b:dd:0f:80:02:d3:
42:5c:ce:87:c5:68:cc:43:b9:51:67:87:53:c7:71:a1:b5:e1:
6c:1b:70:42:03:cf:9f:36:94:3d:21:0f:a3:9c:fd:84:b0:5d:
28:86:23:33:e5:7e:36:96:18:e1:e4:3d:8d:64:8f:4c:5c:66:
a0:93:8f:54:3a:d0:48:c2:1d:d3:db:5e:9a:73:27:18:29:37:
28:13:ad:1a:92:4b:b0:a2:73:da:aa:5d:0d:8b:70:00:e4:13:
1f:2e:cd:02:b5:ef:5d:19:be:5b:6a:ed:80:15:42:b6:15:d1:
28:cc:14:14:c0:5b:9c:98:41:16:77:81:83:2c:d9:94:c5:a4:
5e:18:07:df:4f:1a:03:4a:10:46:a9:2c:6e:09:cb:9c:51:cb:
a3:84:17:b9:eb:0e:b5:a7:d4:11:b5:66:75:04:26:df:50:19:
55:e9:0f:90:3e:87:94:a0:f6:18:0f:5f:12:14:08:6e:a8:3e:
41:0c:56:c9:3e:b0:16:aa:bc:e4:6c:05:bb:15:5b:c1:66:ae:
8d:ea:03:70:a0:95:f2:6b:d9:2f:85:d7:14:27:3e:0a:26:54:
a8:fb:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:42 2025 by rpki-client