Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
File: xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft (raw, json)
Hash identifier: pI89AY7qUCwbF1YKk+I+bVxV5lywhs1x0+68S65cBEs=
Subject key identifier: 2C:EC:9E:7E:5D:DB:0A:7F:2E:F3:AE:CA:C7:7D:B1:29:B1:EB:9F:15
Authority key identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
Certificate issuer: /CN=c596785476efbae77f961d23057057fa036fb27f
Certificate serial: 0194BCA96BB450BE39BA9860C4E76F2B3ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
Manifest number: 12D6
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl (hash: Lq4X6dakbLMSETclP+ikyZHPyIotLSgV5sLLCZItnYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:b4:50:be:39:ba:98:60:c4:e7:6f:2b:3e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c596785476efbae77f961d23057057fa036fb27f
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=2cec9e7e5ddb0a7f2ef3aecac77db129b1eb9f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:a9:ae:10:6d:fb:4d:a3:14:db:7e:34:98:
4d:61:43:6b:77:ff:f2:34:79:14:ea:b9:ac:04:d4:
23:10:4c:8a:f8:29:53:a8:02:a1:e2:53:64:41:fa:
03:f9:86:1e:35:5e:84:2b:1c:d7:58:e5:93:3d:63:
00:22:ff:c2:d4:05:e1:e2:7e:3b:fb:21:92:e1:c5:
10:2c:b6:40:58:ec:bb:9a:2d:93:9e:27:95:28:79:
64:40:36:cf:c8:d6:43:d5:9c:99:4b:ac:bb:98:12:
44:ad:0c:13:3f:60:6d:fa:58:84:41:6e:72:ed:8d:
bc:66:5e:38:d6:e1:9c:8e:d3:2c:fd:bd:a3:63:3b:
16:79:13:e8:a1:2a:40:d8:b5:b8:4c:aa:b2:a8:54:
a3:50:3f:76:7d:50:ab:66:bf:36:99:0d:8d:90:d4:
8f:8d:42:78:cc:ce:9e:8d:42:59:c6:5c:45:40:82:
88:25:b6:a8:25:76:9a:85:0c:c5:5c:df:b2:cd:6a:
6b:81:29:b2:e4:e1:6c:32:0b:43:1c:fe:a1:01:52:
8b:1f:f9:4f:7b:d2:05:95:6b:c6:39:b9:22:e2:0d:
f2:bd:e9:85:55:d7:c0:6a:66:f9:b1:f6:95:de:86:
4d:51:1c:17:a8:0e:8b:98:68:7e:b2:39:85:cb:0b:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:9E:7E:5D:DB:0A:7F:2E:F3:AE:CA:C7:7D:B1:29:B1:EB:9F:15
X509v3 Authority Key Identifier:
keyid:C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:ad:02:26:e1:0c:9c:7f:f8:9b:33:31:c2:78:7d:34:df:
56:c8:23:e1:9e:dd:12:e6:ab:b6:04:04:cd:b3:51:b3:52:7d:
f0:13:f9:07:e3:d3:33:b1:fd:02:31:2c:d2:e5:9e:c1:2b:90:
b5:3c:06:5d:2c:a6:ec:1b:72:ba:f5:fc:5e:33:aa:8a:92:f4:
17:34:5a:b6:a9:42:76:32:ac:25:bf:3c:76:08:0c:f1:12:fa:
32:c6:d3:1b:47:c8:e3:67:22:f7:ac:c0:37:7c:13:3a:58:f3:
ab:d2:ea:f6:1c:53:fa:6d:ee:ae:32:27:b1:c9:1f:10:62:2f:
ff:81:02:2b:f9:7e:00:c6:0d:59:97:22:a1:a1:41:ac:ad:77:
03:39:27:93:24:b1:e2:82:57:9a:83:8d:6a:b9:4a:84:27:88:
7f:52:35:7a:72:46:95:ab:65:a0:e4:fa:4f:b1:8d:5f:df:b7:
e2:b1:0a:54:68:93:05:1a:aa:63:77:d5:e8:1f:68:f8:df:79:
56:8c:49:13:d5:05:18:30:5e:07:30:e7:6a:40:f3:d5:8b:60:
bc:14:14:e7:a1:73:cb:72:f4:2c:d9:ce:c6:fa:e8:da:9d:e0:
01:ab:e0:ed:ae:0a:58:bc:dc:a2:44:29:9e:b0:ef:55:fa:20:
73:ef:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:59 2025 by rpki-client