Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: ylDPKrbylRMk+jdw6ZtCKxkTAZM17yC71wkKKjsoq2E=
Subject key identifier: C5:50:3D:44:7F:CD:64:C2:0E:53:EC:2C:89:1B:FE:28:3F:DD:3F:7E
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 0194BD1773BE5D5D53957EA1911955A68850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: 6PCZi4NkKw+e9iEHxNaT51iMYt9/GWUrD+6MkqpmCsg=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:73:be:5d:5d:53:95:7e:a1:91:19:55:a6:88:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=c5503d447fcd64c20e53ec2c891bfe283fdd3f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:d3:a2:97:fd:cb:ae:e5:02:23:bf:85:17:
47:cc:65:8e:59:5b:6d:72:cd:85:a0:8b:39:b0:f9:
c9:62:a6:df:32:05:1b:93:36:53:e2:ce:dd:a0:cf:
95:95:98:64:d2:d0:e0:7e:c3:10:70:06:49:19:0b:
02:0c:4f:45:b3:28:20:d2:9c:c0:8f:0f:44:27:a5:
da:26:87:5a:2a:9a:fe:60:87:ff:fa:f8:34:98:64:
2e:cd:e2:47:94:4b:bb:f4:64:13:61:6b:b4:d7:07:
2d:70:12:be:01:ca:07:91:9b:5e:af:7d:d6:b1:6a:
30:d3:95:eb:23:8e:24:2e:20:92:f3:28:16:84:2d:
8e:cb:cc:e2:28:a4:8b:db:5e:74:cf:68:af:d9:d8:
6c:0f:d6:96:ea:da:99:f6:cd:0d:41:4d:b5:f0:68:
6c:6b:ed:4f:b8:4b:b0:3c:b1:09:67:60:1b:2d:bf:
a4:d8:e3:18:4f:cc:6a:59:7f:b3:c7:68:3d:9d:ba:
84:7f:0c:dc:07:27:ce:13:b3:d3:e7:c0:ee:fa:dd:
aa:bd:ae:d5:45:1b:0d:ed:0d:32:08:66:07:c9:7a:
d4:09:d6:6d:34:f5:09:39:ad:ec:fa:92:78:f6:1d:
80:c0:4f:f2:3e:40:3d:fe:35:19:15:8c:f9:f7:b1:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:50:3D:44:7F:CD:64:C2:0E:53:EC:2C:89:1B:FE:28:3F:DD:3F:7E
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:02:57:43:26:74:fd:a4:60:64:27:3b:82:64:bf:09:85:08:
80:4f:46:55:1a:60:53:24:3d:24:a9:ce:41:a8:40:04:8b:d1:
aa:cf:e2:78:23:24:34:33:a2:ec:7b:bc:80:0e:62:3d:6a:41:
35:16:82:ba:a5:e4:43:b3:59:98:b6:b7:52:7f:b3:13:ed:ee:
b7:06:a0:7b:c8:0a:cd:b1:68:eb:d8:c9:f0:d0:31:5f:2f:2a:
ff:f7:28:c7:a8:ae:ce:cb:33:d5:14:80:ed:5f:f4:e1:09:0c:
18:f6:d6:f9:89:16:44:4c:6e:e9:e8:97:a6:f1:48:24:7e:54:
b9:6b:0c:dd:34:03:e5:c7:b8:21:92:88:e6:e6:08:a3:0f:51:
88:f7:71:40:87:f4:fa:ee:54:ca:51:3d:42:ef:f5:86:f1:50:
d2:6c:33:e6:0d:04:ef:13:d6:12:66:99:0a:c8:68:d5:0a:dc:
e8:e2:cd:18:e2:e2:70:96:dc:ff:3f:74:2e:95:eb:04:72:8c:
63:6f:23:49:78:87:8d:12:66:28:66:3a:21:24:91:f5:88:96:
66:c4:b2:b2:ac:d3:7e:e0:7b:6e:f9:88:69:54:64:d4:4b:ae:
f1:7f:93:5e:7a:2b:e9:a6:1a:54:62:4c:f3:c6:95:68:2f:1a:
94:bc:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:36 2025 by rpki-client