Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
File: xDzur3eV-33zSLBLIn5QpJoaG3w.mft (raw, json)
Hash identifier: UgItKf6qClxihYgKhZEj4Dbqw3rORrrV6bLkW2+iQ28=
Subject key identifier: 82:3C:E1:6C:F7:17:BE:A8:16:B3:DD:C6:64:49:75:5D:1F:08:65:26
Authority key identifier: C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
Certificate issuer: /CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Certificate serial: 0194BCA9B7D0FE3D30603AAA8FE2ADD1098A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
Manifest number: 1164
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: xDzur3eV-33zSLBLIn5QpJoaG3w.crl (hash: PMwp4f6k/LfN+VDYPAcPXWYu7lI+eo7Q2updFhaCK/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b7:d0:fe:3d:30:60:3a:aa:8f:e2:ad:d1:09:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=823ce16cf717bea816b3ddc66449755d1f086526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:86:9f:d9:fb:ea:a1:17:ea:b6:ee:2e:4d:
fd:5c:fe:59:72:ab:7b:88:0a:46:72:92:dc:f3:b9:
13:e9:56:2d:e3:6a:c2:c3:67:5a:8d:16:cd:00:99:
64:06:3a:54:2e:2b:f9:60:5e:f4:be:56:85:4d:cc:
14:78:4e:f5:c8:79:ab:e5:0e:8a:6c:08:55:b1:ed:
5c:5e:b5:c8:d7:d0:b6:71:65:9a:24:ac:f3:6b:e8:
93:c8:21:22:f7:38:48:70:6a:41:8d:7a:c4:e3:66:
b5:ca:52:b1:44:b3:10:5c:39:b5:6b:83:4b:f5:2f:
fe:01:08:7b:61:6c:f2:f6:1f:99:1f:c8:bf:4a:b2:
1b:e9:c9:f3:ad:3f:90:52:6f:77:97:37:82:a0:dd:
a1:55:d4:2a:51:3d:ab:51:a0:6b:f9:18:9f:44:36:
a8:ed:5b:f8:fa:53:8f:63:94:dc:81:58:02:12:d2:
21:5b:0a:f7:07:59:65:c6:c7:cd:2f:bc:a4:6c:15:
21:b3:20:82:ee:05:cb:53:b7:f9:35:d4:b0:6a:d3:
43:89:e1:6c:e8:27:76:f6:b1:58:33:ad:45:81:bb:
58:8b:b2:77:27:99:83:db:4f:83:3d:4a:12:ad:15:
0c:7e:b2:cb:14:bb:2b:b8:a9:78:2b:f8:1c:be:d7:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:E1:6C:F7:17:BE:A8:16:B3:DD:C6:64:49:75:5D:1F:08:65:26
X509v3 Authority Key Identifier:
keyid:C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:29:e1:ca:46:fd:97:47:bd:36:1f:ab:38:6d:86:b3:f2:e9:
c3:37:a3:93:cb:2d:b0:eb:c0:5f:b2:8a:d8:58:47:32:9a:c2:
a6:89:fc:d8:6d:0a:77:a3:63:89:f4:70:7a:e6:36:7b:16:af:
ee:af:78:bd:22:f9:a6:62:93:b0:16:58:1c:1c:78:a1:27:05:
67:fd:b0:ce:4f:d3:0b:83:64:b8:77:e9:a6:af:18:45:0a:59:
aa:be:c6:81:f6:1b:0f:b0:c8:89:87:49:30:0c:14:a4:db:8d:
3b:e9:84:eb:07:b1:07:e3:75:a2:b7:cd:e5:53:4b:16:eb:3d:
d7:6b:20:1d:4a:13:f6:e2:09:c8:b1:7d:67:c0:fa:b5:27:d6:
bb:58:36:20:2d:c8:d0:59:42:7b:0d:0c:4a:39:06:34:01:a5:
69:c5:a7:5c:28:2a:bb:22:74:fb:0a:c7:aa:de:28:6c:cc:28:
7b:dd:cc:fd:be:82:69:fc:93:67:e8:de:d6:da:36:48:b3:08:
f2:c2:4e:d1:96:88:98:d2:37:77:61:76:4e:1d:3f:e9:1e:e3:
1f:21:bc:f8:fd:66:ff:f2:ca:de:df:04:c8:93:ef:9d:2e:34:
13:23:ce:64:ea:c8:54:9a:57:28:61:3d:33:8e:c4:8f:0a:6a:
8a:3e:57:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:37 2025 by rpki-client