Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
File: X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json)
Hash identifier: enVWV+H4w1sOFfD+Z7OyesfmUxq0b8GJXfIGrmqRbv0=
Subject key identifier: 48:24:F1:97:21:4A:1D:63:F2:D8:54:20:8C:9B:FB:71:9B:A4:8A:3C
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 0194BBCE5DEA8EF67D83E146DAD9DE9595EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: +Y/3Am+rsWBOvuO7912ATKmF0bnYCRvTsQyG3LaLadA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5d:ea:8e:f6:7d:83:e1:46:da:d9:de:95:95:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=4824f197214a1d63f2d854208c9bfb719ba48a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:71:bc:e3:cc:e5:3f:9b:ca:e2:2e:72:82:
b8:a1:d8:07:72:fd:14:c5:5c:01:42:cb:79:5a:9e:
f4:90:1b:fe:61:b3:66:84:44:5e:d0:1d:e7:78:d8:
ec:41:c3:b4:90:2c:d8:86:99:b3:51:4d:75:de:4f:
54:b1:bd:ce:10:47:70:88:31:27:83:9e:16:07:4a:
9e:0e:99:52:ce:aa:36:33:41:cb:b2:9d:c2:27:e0:
eb:86:b3:e6:d5:3e:18:9c:1c:7d:44:ab:6c:a9:e4:
67:fc:81:2b:ec:f3:90:de:59:03:1a:d5:fd:7d:11:
40:39:cc:4f:b2:8f:34:71:9a:f1:56:4f:3d:d7:02:
d1:da:76:61:76:96:42:42:68:f3:ce:98:ea:b3:64:
8f:b8:96:b6:1b:62:9e:4d:ce:fa:1d:9b:f3:b8:64:
7c:ee:27:52:5b:4f:ff:07:ec:fe:25:2e:3a:fa:89:
3c:58:c8:9c:a8:86:f7:f4:a4:5d:36:d0:97:f0:5b:
7a:da:30:50:da:e7:96:6b:af:ce:a1:19:3e:15:5c:
1c:8b:e6:9e:fb:a4:7b:f4:e6:8a:e0:a6:77:ca:fe:
6a:3d:35:02:cc:ce:bb:1b:0f:21:2b:bc:a9:01:50:
50:e7:ad:97:40:5a:e7:65:dd:b2:66:1a:3b:99:41:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:F1:97:21:4A:1D:63:F2:D8:54:20:8C:9B:FB:71:9B:A4:8A:3C
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8c:81:9c:9c:a6:d7:47:b0:7a:27:68:e9:e8:e4:a5:eb:d8:
f1:31:f9:96:44:74:65:5f:f0:f5:d6:d2:2f:8d:41:e2:3a:d0:
f2:2e:86:15:87:4e:c8:ed:2f:c8:16:52:d8:b7:08:da:d0:34:
d5:f9:c6:68:0e:6a:6a:32:e3:9b:4f:fb:b3:e8:0a:70:95:da:
f4:0a:40:50:8e:53:6e:c5:3a:a1:73:1a:3a:eb:4c:33:62:c3:
f1:bd:14:f3:8e:f0:72:2b:48:0a:60:71:20:00:93:6a:4a:9d:
d0:31:a1:6f:26:0e:35:44:81:d3:c5:5e:e6:ac:ee:12:d0:e7:
f4:81:39:87:74:d7:c3:d9:4c:16:0a:f8:1a:9d:13:24:d7:3f:
1a:21:ed:83:17:f1:48:12:8f:a4:db:f9:b1:da:b0:11:b6:6b:
7b:da:21:1c:c1:ad:30:68:80:64:cd:da:28:a2:59:30:87:62:
dc:76:46:a3:c7:79:49:0b:64:28:da:e0:cc:fa:35:76:43:96:
6a:05:c9:0a:50:ad:76:8b:88:98:cb:a0:58:da:3c:a4:6a:b5:
54:29:df:db:d6:d0:69:41:ba:87:f7:ad:85:3c:c0:e4:aa:90:
8e:a0:cd:00:64:ea:61:98:85:4d:5a:6e:d5:73:aa:c7:a2:6a:
86:5a:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:44 2025 by rpki-client