Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
File: XeHEMjIqoQWMPm_lf2N0qSlgacE.mft (raw, json)
Hash identifier: XVgGHM8V4PBkSMHBBqtRFWBL73ABJNrZgJKiIfRwXb4=
Subject key identifier: 04:23:98:EA:41:9D:A1:A9:F6:09:C7:CB:A0:ED:91:A3:B5:97:91:32
Authority key identifier: 5D:E1:C4:32:32:2A:A1:05:8C:3E:6F:E5:7F:63:74:A9:29:60:69:C1
Certificate issuer: /CN=5de1c432322aa1058c3e6fe57f6374a9296069c1
Certificate serial: 0194BD17DEBE8F67B24BF7444546AD0DA805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeHEMjIqoQWMPm_lf2N0qSlgacE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
Manifest number: 090D
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: XeHEMjIqoQWMPm_lf2N0qSlgacE.crl (hash: uEEKrMmITXUaGPbNlBk/JPx3U6CCPICUQl48yTBGqak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:de:be:8f:67:b2:4b:f7:44:45:46:ad:0d:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de1c432322aa1058c3e6fe57f6374a9296069c1
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=042398ea419da1a9f609c7cba0ed91a3b5979132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:bb:9d:74:10:c8:72:6b:dc:8b:ee:fb:0b:
e5:95:88:b8:e0:a7:41:db:b2:fa:43:64:e3:46:92:
b5:ba:70:30:f8:44:84:c4:ca:b8:16:bb:7f:35:d3:
e2:8a:c9:11:07:7a:90:8c:68:e9:59:63:e9:c1:c9:
cd:23:55:e7:ae:cc:2c:16:dc:28:33:15:17:6b:7f:
d8:fb:f6:d6:ea:5f:d2:c5:d2:ec:39:9c:da:a8:ef:
a7:c7:c7:a4:e6:df:a9:3f:01:5d:8c:a2:1e:67:ac:
db:58:e5:8c:e4:77:2b:06:c7:76:ad:fb:77:82:9f:
1e:0a:1f:67:04:1a:40:57:21:1a:06:b3:8b:f4:13:
dd:d9:29:57:d4:40:a6:75:90:aa:54:31:ae:1e:62:
2a:b5:13:d1:2f:e4:cf:14:54:0b:3b:67:87:7d:c7:
77:c8:66:b7:5f:74:49:19:bc:50:1f:d1:5c:46:0d:
d9:07:2a:48:14:19:97:09:2f:fa:ca:33:37:89:75:
d8:e3:76:37:c4:b8:fe:ef:d8:af:59:f2:e2:74:9f:
af:df:cd:24:58:37:9a:23:09:82:f9:08:c0:d1:b3:
ab:03:97:9b:99:fd:5e:e6:8b:a9:2a:f1:9e:65:27:
1f:f5:21:ce:04:30:79:4b:97:7c:9f:44:af:03:05:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:23:98:EA:41:9D:A1:A9:F6:09:C7:CB:A0:ED:91:A3:B5:97:91:32
X509v3 Authority Key Identifier:
keyid:5D:E1:C4:32:32:2A:A1:05:8C:3E:6F:E5:7F:63:74:A9:29:60:69:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeHEMjIqoQWMPm_lf2N0qSlgacE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c0:85:b3:d7:0f:b8:81:0e:2c:34:42:a4:eb:80:6b:3a:ee:
d6:08:95:54:1b:64:e2:2c:7e:ee:db:a2:ff:ec:fd:85:8f:03:
7d:5b:ec:f7:07:04:14:ca:6c:9b:b8:7d:8f:51:11:79:fe:83:
bd:e4:ff:b3:89:eb:19:1d:d4:2a:57:46:b8:8d:da:79:21:c1:
18:6a:fe:60:49:19:40:6e:03:73:c3:24:94:90:ee:eb:b1:88:
60:cf:bf:04:cb:84:9e:06:88:ee:66:c9:e8:5a:71:5e:50:b2:
1a:ad:83:57:95:ab:a7:5d:a1:3c:5c:07:13:e9:e9:ef:88:25:
57:5f:97:1c:ce:dc:32:cb:ac:af:e2:33:99:c8:be:3e:8a:f2:
cf:28:69:a7:e3:e0:ec:a9:cc:7a:77:8a:20:c2:05:3c:7f:24:
0c:ab:40:7a:5f:5f:81:b8:ac:f9:96:e5:0e:19:f0:d7:ef:07:
b4:38:34:67:0d:8e:72:10:96:88:16:4c:c0:1a:7e:1d:12:0f:
c2:ac:34:a5:4a:c7:db:a7:4e:37:45:43:67:35:08:19:59:b8:
84:45:75:1d:dc:24:aa:18:c9:a3:2d:af:a4:a1:b1:11:69:3e:
b9:af:d5:16:b2:a0:57:16:41:fe:7c:4c:1f:93:72:42:13:d5:
af:0b:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:56 2025 by rpki-client