Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: IK2BSdiiSm93vCAiyi1dLLyUI8jUqAlKz5xV/e64gkI=
Subject key identifier: 85:34:DB:19:0C:6A:D8:67:8E:20:6F:5C:75:6F:4F:47:4D:77:E1:B8
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 0194BC72D9B7D5FF036C5EB0CA788F2465BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 034C
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: MvBePbjpWj7a1sHS8rQltYzB50TChx8pXFR0QH2N8+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d9:b7:d5:ff:03:6c:5e:b0:ca:78:8f:24:65:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=8534db190c6ad8678e206f5c756f4f474d77e1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:cc:cf:fb:60:03:ee:76:72:59:b0:0e:5a:
3d:7b:70:e3:df:fe:a9:b3:33:e8:fa:62:57:77:bd:
4b:e3:84:41:cd:fd:ad:f0:15:b4:ee:06:c1:0c:c3:
31:36:bf:84:cc:3a:9d:b5:6d:0d:7b:7b:cb:41:9e:
5d:71:20:d7:6c:55:7b:1f:7a:69:77:8c:cc:70:0d:
f5:96:63:7d:4c:6a:e9:dd:b1:59:47:b3:6c:e3:3b:
87:80:85:11:ab:c7:08:74:33:b7:bb:b1:01:ef:d0:
20:98:0f:74:49:09:2f:ff:d2:6e:d2:2f:cc:5f:9f:
8d:f7:8c:cc:0f:e1:be:d7:c4:b4:ae:7e:67:26:ce:
ea:eb:ac:82:4e:2a:fe:6f:61:ae:dd:a2:df:46:d0:
ae:11:21:68:31:9b:1e:ce:17:3d:3f:1c:52:7d:bf:
69:a9:b3:03:c3:32:f5:bd:50:e5:d0:82:5c:57:ff:
7e:75:80:3a:b0:16:40:e1:b1:44:05:cd:3b:44:68:
41:6e:2c:31:6c:8b:85:7f:4d:16:ae:02:87:c7:17:
10:7d:c6:00:4a:83:63:43:ee:eb:6f:59:e4:69:62:
72:61:9b:18:ac:73:a5:ee:5f:d5:78:22:eb:76:ad:
ed:db:4e:49:d0:82:b6:2f:bd:5e:94:69:f7:9b:bc:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:DB:19:0C:6A:D8:67:8E:20:6F:5C:75:6F:4F:47:4D:77:E1:B8
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:00:e5:ea:b9:86:1f:51:54:19:2f:53:83:3b:ad:2f:e8:38:
eb:ad:78:21:f5:11:8c:f2:8e:78:4f:30:51:3b:92:f0:67:2f:
38:e3:57:9c:0d:53:c5:21:58:31:0c:4b:1d:47:e4:28:38:de:
f7:1a:ef:c5:c0:f2:c6:d8:a2:a4:b7:48:2e:11:5b:c6:d9:97:
f1:af:29:e2:20:f9:c0:19:33:1d:4a:c2:55:ee:2f:58:89:d2:
bf:7d:77:aa:44:38:4b:1f:e2:b5:42:09:bd:4e:59:e7:3a:18:
66:5d:fa:69:d5:1a:65:36:dd:80:04:89:5d:9f:cc:5d:70:1d:
4d:13:58:d2:35:97:84:8c:26:bb:39:b2:85:27:88:67:37:f9:
4d:f3:54:21:0c:1e:33:e3:9d:d2:36:c2:be:89:a6:ba:39:11:
8b:4d:37:f8:06:03:87:2e:4b:11:b9:67:19:d5:32:b3:ed:92:
ac:28:ac:b7:e8:94:8d:04:4c:98:94:70:21:3c:50:13:4d:b8:
b5:49:b4:f0:7f:09:a3:2b:ac:3a:82:4a:2b:a5:f6:e1:46:70:
67:0f:99:0a:77:5f:b3:fc:d7:d5:a2:cf:69:87:ca:6a:68:d2:
6a:e4:c6:5d:13:29:82:99:de:ff:e8:bc:98:94:fc:70:27:f6:
eb:a2:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:45 2025 by rpki-client