Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: 8e6PnevqQrA+fOC7ThtvBV4INCtWbjsOycDbtoCOLoc=
Subject key identifier: 15:74:46:AF:58:45:D4:74:8D:BD:6C:9F:9B:D2:14:CA:C8:A1:7E:B8
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 0194BC3C5CFEE86446BBEB0593AC05D85BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 0EEF
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: CsNgfi2Jq+XGNJE6vTibTzLE20M2CVu0a/5Twq70KRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5c:fe:e8:64:46:bb:eb:05:93:ac:05:d8:5b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=157446af5845d4748dbd6c9f9bd214cac8a17eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:e0:7c:6a:c0:32:03:2d:39:3e:4d:94:18:
02:cd:98:fa:74:38:55:13:c1:1f:42:82:1f:ff:f9:
9a:28:94:c5:d1:21:98:dc:ea:16:dc:b8:64:c1:fc:
f7:1b:9c:3c:27:b7:04:04:83:e2:b0:37:be:31:4a:
3b:8c:f0:c4:f4:43:1f:cc:ad:64:79:b4:a9:66:b1:
dc:6a:5a:cb:c9:42:90:a6:c6:bf:d8:f3:1a:0c:b1:
f1:de:a4:75:94:d7:2a:b3:82:b3:bf:1d:97:7e:94:
5b:f5:e2:9e:24:06:95:7b:02:b7:df:9e:a4:9d:64:
fd:a6:88:fd:ee:3a:11:12:b3:42:3c:08:10:c5:af:
b3:db:86:2d:a6:ab:e1:ce:10:75:9c:62:a8:72:f6:
f8:f2:66:ef:95:2e:82:c6:aa:72:b5:0d:2e:e5:1a:
e7:8c:c2:ba:79:9d:98:01:46:cc:73:a3:a3:c5:ef:
3e:18:6f:87:e4:1e:a1:d3:22:65:46:fb:3a:01:63:
5e:8f:5f:5e:7c:ac:9d:a7:bf:18:09:3f:17:bc:26:
56:7b:06:4d:4f:71:5b:79:d4:b0:ec:d3:e6:a2:17:
ea:2f:58:12:30:a0:14:1e:21:5f:a6:29:5c:85:21:
83:98:21:db:a2:a9:92:d1:a5:bf:e9:ef:36:ae:fd:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:74:46:AF:58:45:D4:74:8D:BD:6C:9F:9B:D2:14:CA:C8:A1:7E:B8
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:02:51:ec:cb:1d:8a:f2:98:2b:23:d7:45:f9:0f:1c:c6:42:
45:63:d3:fa:c6:e0:22:b6:ae:52:5d:e7:09:e5:d7:89:40:98:
3c:02:e7:2c:94:9e:25:60:f0:5b:81:aa:d2:e4:41:f1:0b:24:
3b:42:4e:a9:98:09:d5:2f:07:8b:75:fd:32:a4:b2:1b:0d:93:
e4:52:d4:8a:d5:bb:d6:a3:de:cd:12:e5:ee:48:69:17:77:36:
24:b2:70:96:62:a2:6e:e3:59:aa:57:5e:23:96:d0:6b:62:6c:
ae:82:7b:90:b6:93:81:89:b4:67:a7:06:2d:d2:93:5f:7b:31:
a6:0f:15:2f:88:fa:2e:5f:e8:28:62:1b:85:ff:a4:03:3e:40:
21:60:a1:d9:09:b7:4d:f4:6c:5a:53:57:14:d4:a0:ae:45:ea:
1c:7d:9b:3e:81:bc:20:d7:35:4e:7d:f8:c0:70:02:98:3f:5f:
2c:bf:e5:ad:9b:0e:8f:7a:e4:ad:cb:7c:7d:0a:c3:71:1e:eb:
dc:ff:f1:cf:e3:1c:dd:8e:7d:de:6d:5a:da:83:1f:cf:c8:9b:
77:8c:ff:28:ef:8f:07:e9:1c:b9:02:24:29:03:ef:8e:f9:11:
b6:ea:7a:52:7f:6d:0a:46:9f:bf:f2:3e:76:20:a5:f4:81:0a:
86:0c:38:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:02 2025 by rpki-client