Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
File: 0XSpf-m-DvYs3ln0GppfCZGCkUc.mft (raw, json)
Hash identifier: 900XaUQHlmfB9kwA2Njasv4c4W/AMhoEEpMBGscPJ3I=
Subject key identifier: 19:1C:43:C0:36:09:1E:28:E2:4A:A8:11:60:E8:F4:DB:57:35:85:1B
Authority key identifier: D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
Certificate issuer: /CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Certificate serial: 0194BD17B3E241BF3F204D16B0B54A508596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
Manifest number: 1016
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: 0XSpf-m-DvYs3ln0GppfCZGCkUc.crl (hash: gyTrXk/kmYBTzuQ1NAozkn6Dz3lBGgS86P3xgnXAArI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b3:e2:41:bf:3f:20:4d:16:b0:b5:4a:50:85:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=191c43c036091e28e24aa81160e8f4db5735851b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:9c:52:10:52:a5:ed:62:9b:da:06:d8:c8:
7b:89:b4:99:ec:94:a2:1b:f6:41:a7:4f:8f:5f:f5:
97:c2:c9:84:45:b2:9d:dc:81:5d:6c:72:aa:3b:5c:
14:6e:54:96:31:53:aa:d2:77:81:c1:da:19:9a:bf:
4a:5e:91:38:a5:2d:75:34:63:70:b8:1c:a5:5d:ce:
3a:3f:fc:c1:d3:f1:2b:7c:8a:22:1b:fb:ce:d6:43:
c9:52:ff:26:73:1f:87:f7:aa:a0:ce:36:7f:ee:55:
7b:92:f6:0c:2e:f2:0b:c7:b8:55:db:ba:31:4b:62:
26:3b:bc:b5:96:69:70:a2:23:d2:d5:83:01:19:21:
08:13:cc:23:c4:2b:76:64:28:3c:7f:1c:49:4b:79:
9a:ab:e7:13:78:74:cc:ee:3d:45:f7:6e:d8:a0:7f:
a9:69:2c:88:1d:38:50:05:97:ae:46:7b:50:b9:5a:
7a:16:bc:c0:fe:de:62:36:ed:d0:e7:5a:74:de:de:
a1:24:d4:5d:05:e5:f1:39:7f:52:42:90:e8:98:35:
95:d3:fe:51:8b:a8:62:40:11:bb:5d:df:e9:81:ae:
a0:bb:91:f9:e8:c0:f4:ce:0d:a7:fa:81:e9:88:eb:
ff:aa:70:bb:28:67:d8:d6:d9:4a:c4:61:1f:26:d1:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1C:43:C0:36:09:1E:28:E2:4A:A8:11:60:E8:F4:DB:57:35:85:1B
X509v3 Authority Key Identifier:
keyid:D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:74:55:62:7f:30:15:b4:d9:65:0a:13:2f:a5:57:18:3b:95:
6c:b4:31:12:9c:a9:35:45:cc:84:1b:71:3e:a6:07:0f:aa:9a:
14:6c:78:a2:38:db:d0:07:58:08:ed:75:8d:e7:a3:7e:4a:00:
64:98:5a:27:85:7c:51:d9:86:01:31:71:0f:69:79:98:f0:46:
87:7f:ba:dc:a5:3c:4e:35:0c:43:ff:d8:10:0d:54:82:c1:11:
af:92:92:99:fa:40:f8:b4:c6:12:d7:07:81:c1:f9:29:99:ad:
9a:3c:7e:49:bf:ac:12:48:c3:e5:7a:4c:86:86:86:b6:3c:ad:
5b:05:c8:81:d6:e1:2b:08:80:b9:d5:5f:4e:93:72:83:91:f4:
05:8e:36:6c:15:b4:99:3a:fe:ce:c1:38:ce:86:20:ca:a3:06:
e4:51:b4:8e:bb:c9:f2:10:b8:64:86:d4:6f:ef:af:1b:e4:6d:
d1:46:58:55:ed:5c:76:54:44:7b:76:62:d9:87:8b:b3:6d:09:
40:ad:4d:36:1d:d9:96:bf:96:7e:dc:da:4a:6f:b1:dd:93:3e:
e1:4a:17:fc:73:4d:a0:75:6e:9b:fc:6a:d7:de:c7:75:c3:d0:
7f:fe:9c:6e:0a:2d:d9:31:31:ed:be:25:3b:c6:55:a3:bf:80:
0a:67:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:13 2025 by rpki-client