Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
File: XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft (raw, json)
Hash identifier: abB+3k9VCNMBsil5S3a306hS5HMmTRqjYOfZofe19UQ=
Subject key identifier: DE:80:96:0F:FB:F0:5B:9D:80:15:B2:1C:52:15:78:E5:93:F1:FB:A1
Authority key identifier: 5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E
Certificate issuer: /CN=5ccf12899f358d1c341a207fde21d43c70a6945e
Certificate serial: 0194BD1787D7CA89B5BEBBC6A5743374BCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
Manifest number: 72
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl (hash: 9zL/dA6I2W3OlO/MbRLiCNUxm4c7+bwv7tt70Jk+Cgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:87:d7:ca:89:b5:be:bb:c6:a5:74:33:74:bc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf12899f358d1c341a207fde21d43c70a6945e
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=de80960ffbf05b9d8015b21c521578e593f1fba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:01:0f:b7:51:ff:99:c4:e1:7a:d7:93:c6:
97:06:6c:24:93:79:e3:17:b9:da:0a:00:f9:68:2f:
26:84:9e:28:34:69:38:c3:01:20:a3:a2:e1:73:4c:
46:5b:f9:33:52:d5:67:5e:97:d2:9d:a2:02:64:32:
7e:4c:fe:a4:ee:f7:51:2a:6c:40:42:7b:d2:3d:f0:
23:73:e8:cd:04:83:a9:b5:3f:3a:d7:e4:fc:44:9a:
72:c4:0b:4c:6a:c3:d8:b9:75:30:7c:53:0f:a3:47:
89:28:b9:85:4c:cc:93:fb:8a:87:b4:95:d2:ce:15:
95:76:97:ee:1a:39:00:3d:46:cc:3f:dd:4a:75:77:
ae:96:25:00:68:f5:d1:c7:32:5d:0a:30:92:0d:2a:
af:76:af:8a:3d:17:6b:62:64:cd:f4:be:bb:78:9d:
1d:56:39:90:b4:23:58:8e:dc:e7:94:91:c2:c9:f4:
b7:93:78:8f:93:9c:a7:6c:6e:ea:7b:6c:54:f4:26:
fd:be:e3:1a:dd:f4:6d:4b:b5:2d:98:35:fc:04:35:
b1:d7:eb:b7:dc:bd:23:b1:6f:f9:48:70:06:8b:61:
7c:5c:b6:a8:06:a7:1b:0b:62:b5:68:79:cf:e5:74:
32:13:4f:74:de:af:2d:e7:50:04:19:04:be:d9:9b:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:96:0F:FB:F0:5B:9D:80:15:B2:1C:52:15:78:E5:93:F1:FB:A1
X509v3 Authority Key Identifier:
keyid:5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c6:2f:f1:db:60:34:c3:d7:f7:ad:11:0a:ed:af:2a:4c:0a:
66:81:ab:2e:cf:99:34:c9:d4:0a:3e:0a:12:5f:f5:6c:c6:a9:
15:82:da:9e:20:26:43:5c:86:f1:3f:6e:5d:5d:9d:9d:3b:29:
e5:22:57:35:1d:18:e9:64:17:0b:f5:60:03:b7:ba:93:8e:e3:
0b:f4:97:13:67:e7:b9:9a:a3:f1:0f:ed:d9:0d:12:4f:64:94:
d3:20:c8:87:64:39:08:88:70:e2:5b:2b:b9:76:a8:d2:e1:1a:
3b:3e:f6:97:56:7a:66:a6:e6:3b:8c:20:b2:69:43:e0:ac:4b:
7f:70:4c:5b:1a:ac:07:17:2b:9c:f8:0d:9d:25:4f:37:db:36:
bd:ef:94:93:32:7b:ce:ad:42:82:52:4c:07:6e:5e:37:4f:1e:
88:b6:7d:55:15:49:33:31:dd:60:9b:20:e9:9a:10:f0:12:3e:
da:f2:a4:99:64:2f:77:11:00:a7:d6:06:e2:7b:3c:c4:b4:d2:
ed:3f:2a:28:74:af:6f:53:58:c3:a5:bc:0c:67:d6:8a:dd:37:
35:21:bf:ec:a5:01:b9:72:8a:a1:9c:13:4b:0f:f8:22:d0:c1:
75:4c:9e:7d:17:de:b9:88:da:70:a3:34:b9:48:55:73:2f:6f:
ac:4b:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:28 2025 by rpki-client