Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.mft
File: XwMtciPxNqdVKSTWUPV8X9HXzc0.mft (raw, json)
Hash identifier: 2jzXTsJwy23Ts2erckwumaQUUxRvVNg/2inMC5U1iNE=
Subject key identifier: 73:20:AB:E8:0B:7A:48:A6:E8:15:00:1B:7F:DE:CA:73:4B:06:DB:D2
Authority key identifier: 5F:03:2D:72:23:F1:36:A7:55:29:24:D6:50:F5:7C:5F:D1:D7:CD:CD
Certificate issuer: /CN=5f032d7223f136a7552924d650f57c5fd1d7cdcd
Certificate serial: 0194BBCE0900BDEB3785C8336B032D7DE830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwMtciPxNqdVKSTWUPV8X9HXzc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.mft
Manifest number: 07D7
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: XwMtciPxNqdVKSTWUPV8X9HXzc0.crl (hash: qj9AUnE11j0rqfZyHlK1cqcxlapQB1HPQrY1Crdpf7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:00:bd:eb:37:85:c8:33:6b:03:2d:7d:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f032d7223f136a7552924d650f57c5fd1d7cdcd
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=7320abe80b7a48a6e815001b7fdeca734b06dbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:ad:dd:4c:b5:02:cd:d7:d4:7f:20:ab:91:
19:c0:05:88:5c:58:ad:5e:4d:af:b0:03:9a:55:61:
57:6f:c9:2b:a4:af:47:42:33:1d:7e:e8:23:42:69:
2f:a5:f9:3d:d0:fc:d3:4b:26:84:20:8f:50:58:0f:
63:15:3f:14:f3:d4:ab:4e:8d:81:fc:e8:64:45:bf:
cb:6f:52:94:4b:02:a9:50:91:14:2c:91:0a:4c:35:
e4:f8:31:5f:f0:6c:f9:e7:da:57:ac:f3:ba:5e:b3:
ab:e4:1a:3a:3c:fd:99:cd:d8:81:41:ce:a7:e2:f9:
8a:2c:0d:d5:a8:df:a5:2d:39:fe:fe:ab:92:b5:55:
b6:9b:90:14:0f:a2:1e:03:5e:3e:ae:3c:e2:c9:b3:
55:89:e5:0a:3f:ee:41:27:ab:b5:0c:2a:ac:5b:c8:
4f:19:fa:64:ed:2d:85:4c:a8:e2:e0:8d:30:6d:fc:
95:f4:e7:f3:9b:bc:43:11:ab:41:19:e3:fe:1b:61:
7b:09:48:10:ae:bc:5f:cd:f9:0f:46:6b:60:d8:fc:
54:87:51:0c:7e:77:3d:1a:0b:a8:38:0a:00:bd:de:
dc:c6:79:ab:2b:10:6f:59:90:78:bd:3b:d5:23:f3:
27:0c:2e:90:4e:e1:e1:e3:f9:ae:46:0a:27:a0:e7:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:AB:E8:0B:7A:48:A6:E8:15:00:1B:7F:DE:CA:73:4B:06:DB:D2
X509v3 Authority Key Identifier:
keyid:5F:03:2D:72:23:F1:36:A7:55:29:24:D6:50:F5:7C:5F:D1:D7:CD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwMtciPxNqdVKSTWUPV8X9HXzc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e8:2a:fb:09:b0:19:95:e9:01:13:e1:a4:37:da:d7:09:95:
a0:dc:0a:68:f5:d8:36:c6:d8:5b:c6:37:8f:9d:d1:65:34:ee:
83:d2:7d:35:03:fe:2b:2a:46:48:ed:6d:74:13:d8:7e:f6:9f:
28:e6:18:f4:bd:06:ea:e1:5c:6f:a7:7a:0e:fd:82:ed:47:3d:
65:ba:52:7e:ae:76:2a:39:b9:dd:ee:d1:2e:0d:b5:b8:67:18:
1b:42:e7:1a:84:c1:af:94:92:9d:b3:99:ad:89:3c:1e:85:c7:
13:6a:12:0b:cb:94:4e:7c:96:1c:b2:b1:02:31:23:d0:13:95:
76:3f:04:62:e6:0e:4a:6e:69:73:43:da:f6:5b:64:cb:67:b8:
c7:ca:cc:0c:84:fa:eb:8e:34:4a:31:cb:88:d1:15:bf:ed:38:
e0:b3:c2:6d:ab:70:28:59:04:7e:f6:c1:43:a2:87:ac:cf:d6:
40:ed:30:22:23:68:f2:0a:16:7a:7b:fd:0b:4b:be:07:eb:b3:
10:3b:be:ab:d7:cb:57:9d:20:9c:6f:65:d2:be:24:bd:09:1c:
0e:c5:36:83:2c:6e:c6:ec:79:08:40:c8:cf:0f:0a:59:95:99:
29:7a:e8:9e:47:90:b3:60:9f:8b:a1:bd:72:80:3a:62:32:a1:
39:e1:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:12 2025 by rpki-client