Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: pI4oSvv1miL9eJioddL0AS03hXhsIE8zXYRgBp6hoQg=
Subject key identifier: 61:23:82:71:C5:0D:90:D0:63:17:E1:BC:C1:A2:E5:EA:5A:B1:B3:21
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 0194BC3C14A18CD550E2455C415EA2BEE4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 0C54
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: 9rxnmLvHzFRLl7rd5FskA24a5d0X76jeVXCk7FmcmA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:14:a1:8c:d5:50:e2:45:5c:41:5e:a2:be:e4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=61238271c50d90d06317e1bcc1a2e5ea5ab1b321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:bb:e8:56:58:f3:ce:52:36:95:d4:1e:06:
02:e2:40:7d:1e:be:e2:45:94:16:4e:32:8d:50:c8:
30:6b:cd:28:66:ae:a2:35:b8:78:82:bf:66:f7:3f:
c4:25:44:2a:74:42:5c:55:fd:c1:01:3d:1a:40:ff:
ab:6b:3a:4a:ac:71:a5:00:0d:aa:44:39:74:1b:b7:
5f:2d:92:06:93:ff:13:ca:b1:c7:5c:db:ae:04:a3:
52:c1:ec:1d:ba:16:79:90:20:9f:58:a7:ad:b4:ad:
5f:99:23:98:2b:7a:c4:c4:ce:53:f6:cc:94:ed:bf:
8f:4c:3a:f7:18:d7:73:63:38:4b:5b:2f:40:c5:6e:
45:9a:26:5f:37:e6:c6:7f:6f:31:52:c1:c1:65:c2:
16:eb:0c:0a:fc:41:b9:1f:55:b6:dd:a1:54:db:6e:
de:f0:ee:70:6a:08:d1:67:2f:52:9a:cb:e7:59:77:
fb:8c:ae:01:60:ec:7e:51:d2:16:f7:87:13:00:d4:
9b:75:2a:e8:86:68:32:cb:49:25:69:bf:a4:ae:bd:
07:bc:17:3e:aa:27:9c:90:a1:e6:9d:6f:f2:a7:9f:
34:f4:76:a6:dc:8b:31:65:56:ff:92:fa:ee:79:a8:
a7:63:94:27:4d:97:77:83:8a:b0:35:10:0c:42:b5:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:23:82:71:C5:0D:90:D0:63:17:E1:BC:C1:A2:E5:EA:5A:B1:B3:21
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3b:42:a2:03:07:65:13:55:81:5a:99:5f:a2:f4:c8:fa:cb:
0f:d2:4c:d4:37:ab:2a:d6:70:5f:72:6e:61:df:63:af:2e:c8:
4e:82:57:f1:69:5d:61:b4:36:2e:f6:5f:8d:c8:f5:c1:0a:04:
f2:a6:f0:e1:39:6e:2b:58:34:ba:b5:e7:5c:dc:c9:53:6d:b5:
b4:f5:47:e4:4f:1e:4c:88:09:47:54:d4:ce:6f:73:f8:48:53:
0d:23:e7:1d:9d:65:47:ed:8a:85:e9:7b:82:a2:2e:f1:29:18:
38:1d:d6:c9:7b:fa:0f:e4:d1:18:88:20:5f:31:cc:65:e6:49:
30:71:58:66:23:54:c8:1e:b8:d5:58:bd:12:05:36:b6:4a:66:
f2:1b:db:c7:8f:3b:94:c6:1c:cb:5d:9f:2c:cf:f1:8f:3f:c8:
85:84:bd:61:d5:de:28:17:8c:61:1b:a5:7e:1a:9e:7a:e9:09:
a4:ad:68:99:b0:1e:46:4e:25:43:fa:ac:7d:7d:82:d2:d3:93:
cd:2a:b8:9e:31:32:35:60:1c:c1:81:36:ba:ce:55:6c:97:a7:
ef:b1:87:dc:64:f0:32:37:bf:2d:fe:b5:57:cb:d7:8c:b1:76:
42:09:64:94:96:77:89:8d:e2:b5:99:16:2a:35:22:42:e1:bf:
7a:bc:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:32:25 2025 by rpki-client