Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier: sjxNeCVhUHh5Qg0Z9kXOKxM39Z81Noo0t5gbzPqQQag=
Subject key identifier: 40:A5:CF:30:EC:CD:A7:99:49:2A:94:88:3A:95:89:D8:53:F8:4E:E7
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial: 0194BCA9C2964E8393F15CA31636670527B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: iGFdj7mlfgbXqG92ZurEFAC91aoLUfO0+YdmxDHEs9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:96:4e:83:93:f1:5c:a3:16:36:67:05:27:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=40a5cf30eccda799492a94883a9589d853f84ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:44:19:72:5e:90:f1:d2:3e:00:5c:ce:42:
bb:45:85:46:1c:f8:e0:7e:8a:3c:2a:b0:8a:1a:ce:
72:e2:1e:92:dd:0a:a6:db:83:35:57:b0:fe:ff:26:
a7:3e:d1:d3:f1:05:95:45:47:d5:f9:8f:ef:aa:bb:
c4:6e:d6:ad:e2:d2:2f:2a:ae:0c:cb:6b:c5:64:f7:
e7:73:82:4b:eb:92:b6:0f:b3:7b:4c:8e:ec:8f:46:
83:19:fc:77:c9:9f:c1:7a:a5:6a:c9:90:80:05:8e:
dc:fb:1f:54:71:a5:a1:a5:df:db:f9:1e:57:ec:2c:
09:2d:20:fb:90:5b:5b:25:c2:6b:5b:af:76:a9:9f:
3b:a6:ca:b5:a8:6e:b8:75:65:9a:94:b0:64:16:36:
9a:93:2c:42:f1:c0:15:a0:68:ac:f2:2f:d2:ee:e9:
3c:0a:3e:ce:8b:e5:54:e2:d3:89:b2:ad:4d:1b:4e:
84:9f:d7:3d:61:df:5e:7a:ca:06:43:39:9a:66:d9:
4d:63:61:a3:70:2f:c7:2d:8f:43:8d:a5:f5:5b:65:
40:52:ce:50:93:79:7c:f8:a0:2b:3b:e1:22:d9:c8:
c1:42:e3:36:1f:df:f4:6f:48:aa:86:e5:09:7d:bc:
cd:91:5f:5a:a0:9d:f5:f2:55:be:39:dd:6c:50:b8:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:CF:30:EC:CD:A7:99:49:2A:94:88:3A:95:89:D8:53:F8:4E:E7
X509v3 Authority Key Identifier:
keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:f2:75:da:83:ba:42:48:57:7b:0a:6c:b2:e3:cf:11:3b:
e4:ce:69:01:7e:46:6b:2b:15:4c:e8:28:50:48:12:26:52:90:
21:30:8d:7a:bd:0b:c9:c3:60:23:4b:01:f8:eb:c0:60:e5:d0:
9a:58:46:31:51:cf:44:ae:f8:1f:fc:2c:12:5d:6d:68:c3:8a:
e3:72:ba:4a:95:5f:ef:3a:6c:50:08:8d:52:dd:60:4a:4d:86:
28:b9:d6:44:c8:cd:57:ae:0f:1b:43:25:41:16:a2:38:f3:12:
b8:ca:b7:0e:a0:c6:73:fa:53:c3:9b:39:45:cd:5a:54:45:0e:
f2:fc:8e:f7:6b:b0:ca:16:68:a4:68:8d:36:c2:54:4e:b7:93:
85:c0:d7:6a:1e:b0:13:43:e4:ba:32:79:fb:18:35:8d:c6:9c:
fb:70:66:b5:96:28:1e:8a:89:65:9c:15:1e:f0:25:e5:8c:cd:
cd:0e:be:23:e2:38:65:4e:9e:bf:df:c3:0e:1d:75:15:98:36:
b4:2d:cb:8c:36:d9:b8:8d:00:8a:ba:f9:ce:85:0c:a9:02:d2:
d0:3f:15:19:dd:e0:86:c6:16:f0:4a:cd:ee:94:d9:bc:92:6d:
53:43:c8:2f:d5:f0:7a:8f:ca:ea:0a:4d:8e:a0:ea:06:ff:6c:
b7:16:64:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:25 2025 by rpki-client