Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
File: SXoXzvuUeLbK6PZdWfsepdB2LWg.mft (raw, json)
Hash identifier: KmrIIeTT63GAXCewzOpP+blvbXxExl5NeIGiQJMJwSM=
Subject key identifier: D2:5F:09:34:CB:2F:C6:8C:5F:C9:6C:87:59:8D:6D:8E:D1:A4:C8:8C
Authority key identifier: 49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
Certificate issuer: /CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Certificate serial: 0194BBCE915335809D101EF9312D7DE41797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
Manifest number: 0865
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: SXoXzvuUeLbK6PZdWfsepdB2LWg.crl (hash: gOlvqZ36QEdzDG3GSWy6NFleVSQZ1h8pDME0tkXpKNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:91:53:35:80:9d:10:1e:f9:31:2d:7d:e4:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=d25f0934cb2fc68c5fc96c87598d6d8ed1a4c88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:25:56:b9:bd:5f:f2:63:b4:08:e4:7d:a1:
e8:99:6f:79:b0:ed:07:a2:5c:01:e4:4d:9d:0e:cc:
6e:be:34:8a:f4:ac:a7:99:05:82:57:a0:23:15:c8:
3e:a8:89:d1:3f:33:d1:60:03:a5:40:e5:a3:43:2c:
d6:9c:d6:58:0d:d5:41:2e:bf:64:97:68:e2:11:64:
03:48:c9:f9:bb:ae:3c:45:ed:2f:11:ca:c5:a3:3b:
f2:00:b2:23:46:eb:c5:6d:8a:98:07:8b:c4:28:a8:
d4:9b:f7:ae:f8:b6:78:a5:0d:ee:c2:76:33:31:fc:
36:95:51:c7:3c:4f:8d:ca:dc:2a:7f:b1:6e:ed:e7:
6f:d0:ae:e9:8a:44:8d:69:cd:b9:1a:e2:76:9c:ab:
45:bd:f7:f6:60:c9:98:1e:a8:77:1c:cd:18:9e:25:
22:c7:31:e2:e1:bc:99:eb:0f:7a:a6:db:0b:09:5e:
95:35:03:26:91:48:43:8d:f3:9f:81:23:c5:cc:44:
f3:e8:8f:47:77:ad:06:be:27:cc:0d:1f:e2:52:fe:
27:99:25:6b:74:11:89:4d:9c:78:49:d8:28:b5:32:
d6:d3:b9:c2:fe:fa:81:a1:d5:59:a5:1a:ef:aa:13:
b6:a4:9f:b2:0a:66:45:6a:f7:5a:43:d1:e8:41:1c:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5F:09:34:CB:2F:C6:8C:5F:C9:6C:87:59:8D:6D:8E:D1:A4:C8:8C
X509v3 Authority Key Identifier:
keyid:49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fc:23:30:c8:c7:0d:ac:42:a7:51:e9:cd:6b:4b:d6:ae:26:
09:c0:3f:3c:65:e6:98:8c:17:a2:34:3d:16:1f:de:59:0e:ab:
d5:83:fc:5d:98:42:7e:92:52:1c:cb:45:a3:54:2b:d5:47:0c:
e8:0a:74:f1:22:96:b3:a6:fb:94:6f:56:d1:fc:20:72:84:45:
62:00:b0:d0:5e:33:2e:4a:27:49:01:42:84:86:31:fb:71:65:
92:c6:db:cd:ec:b3:45:3c:d7:f3:d7:16:16:9d:9c:8a:90:d4:
70:a8:fe:f2:16:a7:b7:a2:55:15:e3:d3:b9:62:18:75:d5:62:
e3:9f:52:35:76:0d:35:9e:39:9e:34:5d:59:f1:90:37:1a:0b:
57:9e:de:3d:ca:af:43:0c:68:69:d3:e1:a5:85:5d:cf:01:32:
70:62:8d:85:0a:ff:d8:02:0f:37:86:67:7e:08:21:73:a5:b3:
91:7f:73:a7:d0:6b:9b:de:fa:59:6e:44:65:06:0e:60:8f:f2:
dd:f7:39:0e:b4:32:43:c9:b1:d1:02:10:9a:d3:1d:55:3e:45:
02:33:c0:b7:ee:dc:52:45:e6:34:2c:cd:06:26:8d:a3:12:27:
80:a8:e4:2e:a3:5d:27:81:70:11:3a:af:93:d9:5b:0a:70:e7:
4c:f8:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:27 2025 by rpki-client