Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: MQCEUyOsVR470zzW3ZxkjbapEq67eYny/ryGAe+gjbQ=
Subject key identifier: 5D:EE:4F:A7:0C:1E:A9:B6:EF:ED:AD:8A:F2:D5:77:83:05:54:7E:A6
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 0194BBCE2823E0BD108D9CD0234959AAC992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 063F
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: CsHb1BDSIi2jK25CqpbQ9bvBfbWFnYl78Z7mzX3q3Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:28:23:e0:bd:10:8d:9c:d0:23:49:59:aa:c9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=5dee4fa70c1ea9b6efedad8af2d5778305547ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:31:38:63:79:8d:a1:8b:da:0d:4c:ea:4d:
f3:a7:9e:4e:99:3b:0b:c7:35:47:e5:1b:ff:b7:ff:
86:b2:c3:f4:2d:b2:cb:e6:b4:37:7b:23:db:ff:06:
62:c0:9e:97:3a:fd:0e:da:99:d0:0f:49:c0:55:24:
45:f7:f5:31:72:a7:61:c1:97:c4:b1:2c:62:15:ce:
e2:7c:47:4d:0b:ae:2d:3e:18:a7:0b:94:4a:8b:4c:
a8:47:a4:0e:2f:79:b1:e6:e8:86:9a:6d:21:7f:ee:
38:16:4a:bc:6b:d5:6c:93:67:a2:51:17:5e:72:eb:
26:5e:cf:ce:65:5e:fa:72:5e:4e:9c:c0:31:3a:a9:
60:ec:f1:3c:a1:28:26:c3:85:82:a8:dc:c0:0b:74:
3c:41:bf:4c:8c:99:cf:72:99:ed:e4:60:a1:9c:9c:
d0:4a:cf:a5:04:7c:95:cc:b5:67:6f:05:ea:c4:d7:
f7:ad:52:ba:ae:69:bb:68:87:32:d8:2a:29:10:7a:
fe:32:40:e9:55:7b:54:4d:90:37:b1:4b:4a:a0:f4:
b1:9f:78:39:8c:00:05:cc:8e:d6:76:5a:16:a8:b5:
02:c7:9b:b6:52:94:2a:95:b5:16:bc:36:4c:e1:9c:
8b:be:80:3c:8e:61:03:79:e8:5e:76:fb:85:1d:25:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EE:4F:A7:0C:1E:A9:B6:EF:ED:AD:8A:F2:D5:77:83:05:54:7E:A6
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:0f:d1:3c:0f:fc:2c:5a:0a:d3:a2:a0:53:da:fb:54:05:
e2:c0:15:09:2a:1b:ac:ac:71:2c:1c:05:88:93:a8:45:dd:42:
2b:42:c3:65:07:f6:b2:36:04:a1:16:bb:cd:36:d4:e5:bb:bf:
66:f0:2f:b2:8c:f6:d9:62:b7:28:ed:09:4b:89:41:da:03:7c:
61:66:9a:6f:9f:5c:97:4a:24:45:0c:6a:83:73:67:66:c6:a7:
dc:45:12:df:31:d8:b8:62:1d:83:05:d9:49:9f:9e:14:16:eb:
92:c2:50:66:bd:1a:5b:e0:23:9b:16:3b:05:cc:2e:34:e5:12:
6b:00:81:c2:3c:1f:c0:d6:68:45:d7:84:b3:f1:8e:7d:0b:88:
ad:91:cc:20:c9:13:a7:54:dd:e4:44:9c:ca:66:2b:68:2d:87:
cc:77:0c:dd:e4:8d:c4:32:8c:f9:ce:d4:93:33:29:3d:ec:ea:
4c:e6:e1:a5:b2:2c:6c:d6:90:bd:d1:5e:af:29:a9:b1:46:b8:
cb:57:6e:68:f4:c5:3f:82:dc:14:65:bb:2b:5e:d9:c4:ab:c5:
7a:3d:6a:dd:2f:1d:2f:91:73:ba:d8:ea:4d:18:1b:74:55:3c:
7d:4f:fc:e5:5e:27:a4:3e:75:12:74:6e:4b:15:34:f5:60:36:
65:04:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:35 2025 by rpki-client