Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: s4ZLK5Uu1GhVaI4LoAbntiFRVZCdyG0a5hA4+gwDO3E=
Subject key identifier: 86:22:EE:11:78:BC:5F:E3:A2:E3:BC:65:4C:25:B4:52:E5:D8:FA:3D
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 0194BC3BDB534ED5F5C94CC0B59E6DA40F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 01B4
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: R2Zta2vlNaTVfq4lZ3e2YDlRob8aCXUF3HKQLSBJxd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:53:4e:d5:f5:c9:4c:c0:b5:9e:6d:a4:0f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=8622ee1178bc5fe3a2e3bc654c25b452e5d8fa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:ab:3d:cf:af:a6:e5:ac:7b:07:a1:7d:e3:
fa:ce:51:04:ff:47:57:d2:27:e6:b9:0a:c5:0e:dd:
18:4b:05:85:dc:9d:78:c3:8c:56:a8:a1:34:c2:28:
2f:7a:13:c9:3b:26:52:40:a4:74:39:8b:09:e7:06:
04:d6:64:c7:24:8a:df:66:1d:fb:ea:7f:79:64:bc:
c9:a7:02:66:b1:86:64:9e:af:70:27:87:e9:b9:1f:
8a:43:02:30:13:54:ca:fd:d5:41:62:de:60:16:2a:
f9:29:25:26:b7:b0:d3:09:8a:40:9a:d3:bb:2f:c2:
b4:8c:b0:be:b8:56:ee:9b:7c:da:a5:7c:93:11:1b:
42:28:b7:9a:79:10:ca:8d:b7:ac:d3:9b:06:3c:d0:
95:a4:bc:72:6f:12:ec:4a:0d:d9:65:54:59:09:d9:
be:41:2e:18:37:de:07:50:c8:be:31:4c:7a:b5:ae:
5c:cf:79:77:d2:32:54:cd:a9:38:b4:4c:ee:5b:22:
da:1f:29:ae:89:02:2f:1b:e3:68:7e:ad:38:4a:1f:
bd:72:df:2b:f7:0e:3e:ea:0b:d3:7e:aa:2b:21:d2:
5b:36:ab:79:b5:3d:fb:3a:8a:19:28:c2:c7:b9:06:
32:af:13:8b:50:a7:bf:ac:a5:0a:ef:c8:fc:87:9f:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:EE:11:78:BC:5F:E3:A2:E3:BC:65:4C:25:B4:52:E5:D8:FA:3D
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b7:b8:8b:9a:37:8f:80:c2:a2:ab:5c:db:ad:65:cf:b6:08:
fb:07:99:b8:a1:ba:72:d7:14:6f:85:e4:fd:f8:50:9e:00:fe:
ae:02:d4:17:4e:a9:c1:18:e6:97:d3:12:3e:2d:84:ea:3d:f0:
20:4d:e7:48:ca:c0:97:d4:9b:b4:98:9f:84:86:92:bf:e7:e2:
ac:45:79:8d:3e:ae:6c:c4:1c:56:f8:9a:91:fb:1a:2f:c8:50:
11:9f:67:6a:2a:25:3c:0b:ca:68:c5:48:f2:bf:6a:d2:a1:49:
93:74:34:fc:1c:8c:e3:6a:ea:e2:9c:36:48:30:00:e0:c7:52:
0a:9d:ac:da:c8:ed:06:0e:49:5f:4b:1e:71:4e:5a:dc:60:89:
63:3c:3c:44:c6:16:cd:aa:cf:7a:69:86:8d:ee:f2:7a:ef:88:
27:f0:8b:b9:5c:62:a9:73:14:83:e6:e8:89:97:62:da:c3:73:
d4:39:19:18:21:3c:88:9b:ca:21:11:71:38:76:8a:b0:ea:7a:
bd:f5:05:53:3e:1e:bf:99:eb:d4:8e:98:5c:cc:a4:92:cb:8e:
e6:75:21:7f:f8:ad:96:df:7c:7f:30:6f:f9:e2:79:9c:2a:fe:
15:b6:8e:33:48:bf:0f:fb:ad:74:20:b9:7e:8d:d4:9b:73:ea:
ca:2f:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:42 2025 by rpki-client