Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
File: xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json)
Hash identifier: 6+EDnQiyvRuufCsIlP+mwEtP/5DxlyG70iKsmwcQjWI=
Subject key identifier: 1F:6D:D6:78:77:A3:50:53:9A:BF:64:55:35:77:B5:3F:8B:21:B4:8F
Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
Certificate issuer: /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Certificate serial: 0194BD175AB6AFD9464AE13C54982442BC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: j10h4W4yJgeFEQqI2lHLZEW5Gcvuwz+8MYUmtpi+KpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5a:b6:af:d9:46:4a:e1:3c:54:98:24:42:bc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=1f6dd67877a350539abf64553577b53f8b21b48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:00:35:dd:7a:3b:4f:3c:fe:5b:a9:1a:bf:
ca:16:2a:1b:ce:ca:f3:d7:66:dc:26:d2:66:c3:8b:
c2:3d:58:bb:13:bc:47:85:2c:f8:5c:7a:68:3e:bf:
28:fa:48:1a:63:b5:1d:23:d9:d0:54:e2:7d:1d:bd:
45:f8:fe:88:f4:1d:d8:5b:5b:6d:ca:21:27:52:02:
24:54:a2:cf:a6:f8:ed:e9:2f:b8:1b:c3:68:86:5c:
70:2a:56:52:87:30:f8:de:b2:56:4b:33:b1:e2:3c:
9d:ca:c1:12:1f:a3:71:61:77:e9:13:aa:c8:bc:09:
8a:15:90:a0:22:d5:dc:56:2c:75:f9:13:bc:c7:cc:
d4:e4:df:8f:16:0b:29:b7:c6:4c:95:c2:22:3b:db:
37:bc:12:c9:a9:1c:9c:51:e7:e3:65:e1:08:a6:3e:
ca:dd:b3:5c:85:b3:f8:9c:94:b7:61:3a:47:b6:fb:
2f:60:7e:2f:c0:de:85:9b:4e:1a:bc:99:b4:45:11:
db:e0:b0:8f:1e:eb:f3:37:e2:26:27:00:ad:a1:8e:
e1:d8:d3:de:22:9b:95:c2:25:e0:70:6a:99:7d:7b:
31:b5:6c:94:99:a2:6c:32:45:e8:e9:f5:1b:ef:22:
64:eb:9f:be:e9:e7:6e:50:c5:d3:ae:2f:05:96:c1:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6D:D6:78:77:A3:50:53:9A:BF:64:55:35:77:B5:3F:8B:21:B4:8F
X509v3 Authority Key Identifier:
keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:00:80:c5:87:5a:a1:20:ff:a9:58:88:83:20:dc:59:4a:27:
c1:d8:00:44:ec:89:f0:b5:48:fc:63:c4:2d:88:08:c9:48:f5:
0d:11:e9:b1:df:76:b7:52:12:7e:72:e2:e5:4c:3b:5e:72:88:
8f:90:12:85:6c:cf:a6:4a:46:e8:bf:a5:e7:dc:23:b3:2f:98:
8d:c1:f6:4c:14:2a:6f:78:1a:9c:c5:a5:00:f7:f2:81:0e:d6:
f0:2b:f0:54:0a:39:d1:54:ef:31:12:41:de:77:59:9e:96:d8:
e1:fd:f5:6a:df:35:50:81:11:f4:5c:d7:cc:ce:96:11:f6:da:
8e:55:04:df:bb:dc:f6:d7:42:ae:5e:bf:64:2f:0e:0d:4f:bf:
be:e3:01:d0:ab:bf:5b:eb:ff:6a:3e:64:c3:24:02:0e:91:b4:
fc:ac:a0:d2:49:41:65:f3:5d:65:73:a2:a7:7f:29:77:d7:e1:
f3:a6:d0:7e:5a:c7:2f:24:b2:34:09:37:7f:ae:8c:89:de:50:
1f:42:e2:45:49:a7:77:20:55:95:a3:af:40:8d:56:2b:a0:b4:
db:8b:9f:b4:0f:7c:c9:8e:8f:c7:0d:81:63:4e:91:20:ca:f6:
52:db:9e:b4:b2:66:78:87:65:87:14:87:70:dd:65:af:fc:1a:
ce:85:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:52 2025 by rpki-client