Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: pSze7s2R5cI6w/Gbv3zuRtWKs3T6GlTDo7bbjgNyyyo=
Subject key identifier: 66:92:59:A4:DD:9D:47:8D:02:63:C5:F7:E9:60:1B:E0:DC:C9:7C:E2
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 0194BD17A8789E8C05D4F2AD0A6BB8C1CB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: IpxvqZfzJzIh1lhc6UtiDfaHiBVVN4aWWKcNGu4at38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a8:78:9e:8c:05:d4:f2:ad:0a:6b:b8:c1:cb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=669259a4dd9d478d0263c5f7e9601be0dcc97ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9f:17:04:7e:7f:c2:19:74:5a:80:ca:31:d9:
66:7e:a2:e6:25:d4:02:77:86:45:d9:31:9e:f5:08:
f0:a9:b5:9e:11:8a:0e:42:2d:64:05:09:aa:d2:2b:
89:23:53:be:d7:7c:4f:c9:bd:82:dc:87:9b:d0:3d:
41:4e:ad:d6:45:10:e3:83:a8:7e:d0:c4:95:83:3a:
fa:7d:69:b6:33:62:e9:c6:e8:19:ba:84:1a:74:e3:
6e:07:be:e9:13:e1:ca:51:0f:b3:e4:56:e4:1a:29:
8a:83:a6:73:b3:35:9f:5e:71:28:fd:d0:94:80:97:
c4:e6:d9:b3:77:8a:e5:ea:5a:e5:87:e0:9c:6c:ac:
db:64:a8:de:fd:9a:fb:24:2b:fb:40:e4:74:02:52:
ff:fc:5e:39:66:73:23:c5:4a:80:e9:38:d1:bc:18:
eb:d3:5b:78:19:48:6c:48:e6:78:bf:39:58:e3:c9:
5e:27:c0:4b:a6:7d:33:37:9e:54:28:54:e2:6a:65:
22:b1:93:0f:bc:7a:c4:be:71:40:7a:75:e0:03:53:
1d:06:e7:ec:82:03:d0:d3:fa:a3:3b:71:98:08:ba:
e9:81:48:96:e2:81:11:a2:3a:e8:5d:ba:cf:ed:e4:
93:3b:21:48:eb:58:ae:7b:32:6c:96:f0:ac:d4:6f:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:59:A4:DD:9D:47:8D:02:63:C5:F7:E9:60:1B:E0:DC:C9:7C:E2
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0b:12:e1:ad:6d:04:df:a7:a5:ba:99:63:b0:8d:9a:28:ac:
c7:91:a9:9a:93:61:dd:af:1f:c0:e7:2b:e3:18:5d:c2:5a:5e:
49:79:f7:73:9b:ad:8b:85:20:c2:56:69:29:00:b2:20:b7:b2:
30:11:89:22:ba:6a:cb:0a:81:13:fa:23:7c:22:6c:bc:f4:96:
e4:58:87:dd:af:71:6d:70:c4:e1:e8:aa:a6:11:52:d3:83:26:
52:e4:94:44:a4:2b:c1:0b:d5:88:49:f5:8c:6f:76:c1:24:0a:
c9:6e:9f:11:c3:2c:90:a8:c2:c1:ef:22:13:9d:da:23:8c:bb:
aa:fa:97:20:79:e2:72:d2:3b:72:55:c0:0b:b9:9c:b8:8b:48:
10:88:37:41:97:72:c7:7e:f9:26:e9:7d:99:ed:d2:d8:15:bd:
56:85:83:b8:56:60:96:a0:47:81:1d:f4:86:bd:89:e4:26:47:
c5:e7:2f:23:08:d5:22:b1:35:aa:7d:4d:a3:db:7f:2d:ad:d0:
85:7a:0b:92:f2:1e:51:fc:68:73:28:d3:40:d5:f4:6c:e1:c5:
f4:d0:84:31:24:3c:05:7e:f8:69:b1:a5:09:46:7f:7b:ae:ce:
21:93:d3:57:aa:5c:d0:99:82:25:d0:41:6a:4d:9c:ba:f3:1e:
47:1e:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:45 2025 by rpki-client