Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: FbH0k+NavNoMMyuhxX8ScqSAzs1g+wsNsokLJ5+N7PY=
Subject key identifier: 5D:50:E3:00:F4:3A:4C:23:BB:38:4B:7B:A1:57:05:F9:0D:C0:28:34
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 0194BCAA2ADC5789DF08DF13BD6B93C96C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 0691
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: WnMKVy37NePl9IzuZgmzUOuZipA9L1d0tZk91igdZcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:dc:57:89:df:08:df:13:bd:6b:93:c9:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=5d50e300f43a4c23bb384b7ba15705f90dc02834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:4f:a4:d3:6e:5b:1f:17:a1:a6:1f:7c:66:
9d:56:0e:0d:14:27:de:01:3c:69:20:3d:22:b5:ad:
2b:52:b3:ee:4a:3b:c1:f0:47:66:8e:35:42:2c:72:
95:45:5a:d7:8c:0f:d2:2c:0a:51:96:9e:e1:67:47:
5d:b5:9e:ce:7a:1a:e8:85:dd:7a:4a:29:25:0d:00:
b1:c8:2b:c8:6c:b2:02:89:ce:e7:22:4c:07:f6:93:
68:9b:01:b3:ea:1e:d0:56:86:5c:85:09:55:45:a8:
b7:f7:31:e3:2c:0a:a9:e9:46:64:70:4a:e1:51:c8:
74:41:05:09:cc:d9:b4:14:d9:fb:8f:fe:b0:f3:13:
f7:00:96:c4:57:4c:91:3f:79:7e:85:56:f9:b7:dc:
75:14:64:4d:98:d9:29:5c:16:b1:e2:29:32:3b:80:
00:58:dd:f7:bb:09:d7:0b:6f:a0:2e:bb:f9:4f:7e:
5a:ce:78:07:ff:2d:f6:20:f2:84:5e:e6:da:62:74:
6d:67:c2:4e:e8:62:7a:d3:a6:e8:df:e8:55:1f:e0:
f7:50:c3:d7:ea:a0:ff:b4:20:06:cb:93:b5:48:a0:
3c:b4:ca:a0:e3:1b:92:f9:52:92:7c:c5:22:90:d7:
3f:4a:b5:72:bc:37:23:95:d3:bb:0f:73:dd:e4:5c:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:50:E3:00:F4:3A:4C:23:BB:38:4B:7B:A1:57:05:F9:0D:C0:28:34
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cf:95:07:d7:31:f6:fd:ef:e0:14:fb:d8:8c:d1:1f:a8:53:
9c:8b:9a:d6:32:71:ab:4a:30:e3:b1:91:de:8d:74:f4:5b:9f:
43:13:1c:51:dc:91:0e:d9:4e:c1:94:6d:f8:38:90:89:27:a6:
98:bb:ba:fd:51:73:1a:5c:58:dd:0c:37:61:c0:85:5d:13:d8:
d7:c5:45:3a:01:6f:66:08:21:aa:5d:28:92:88:45:17:ce:ba:
a0:93:84:f0:1c:7f:3a:ed:ec:cc:fe:e8:31:9d:47:92:b7:f4:
5c:da:99:74:9b:1d:dd:37:e1:e2:4e:55:32:1e:7f:8a:8c:c5:
ab:c1:c9:f3:4b:af:cc:0a:1f:14:ac:3c:84:48:9b:05:69:f5:
80:a9:26:5a:a7:cc:bb:49:55:fb:d9:e9:b6:99:fe:ef:ce:7b:
33:40:f8:f8:c6:5e:ea:9f:89:17:98:53:35:0c:d0:2c:6e:72:
80:a3:15:cf:b5:f8:86:24:1a:48:70:c4:2d:8b:d7:18:17:81:
e7:4c:be:0e:a1:cd:b0:36:4f:f3:c3:7b:61:24:3e:18:4e:db:
10:c4:0a:4a:b3:98:a3:a5:6d:bb:c5:80:b2:d8:ff:ca:57:ea:
9e:5e:1e:e0:26:2a:bf:23:7a:67:b7:93:94:31:05:23:31:95:
cc:da:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:06 2025 by rpki-client