Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
File: Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft (raw, json)
Hash identifier: cLQdvzEjMuJLwhUwUfrvzPE3Xp6jvSlC6KWKnAjaFo0=
Subject key identifier: F2:E5:38:F2:64:18:53:FD:77:FC:DD:C8:D5:5A:3B:91:E1:22:75:4E
Authority key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
Certificate issuer: /CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Certificate serial: 0194BC72FCFC739366CADF8B5C5602D73051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
Manifest number: 1239
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl (hash: BEshQlZUXSBUTQou5QWvcu/OVy71boh05dljFCM6s+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fc:fc:73:93:66:ca:df:8b:5c:56:02:d7:30:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=f2e538f2641853fd77fcddc8d55a3b91e122754e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:f7:57:16:29:87:7f:a3:e6:44:5b:79:fc:
79:05:52:f3:4c:e7:11:40:b1:11:9d:cd:8a:30:58:
47:c4:b7:fb:6c:53:fc:da:32:46:8f:b6:42:86:8f:
43:9c:12:13:e8:b7:05:45:0e:d6:f5:2d:4c:e8:0d:
18:77:c0:4b:fe:47:f3:59:b9:aa:81:d2:70:3e:86:
a9:86:06:c4:56:02:86:4d:65:b4:6f:6e:42:02:2c:
fe:44:98:15:e8:e9:ce:89:80:d0:e5:4f:6b:44:ee:
c5:a7:07:66:c2:ca:12:45:dd:65:82:35:9e:a1:54:
37:44:e4:d1:d0:dd:03:0a:20:07:2b:08:9b:dc:45:
bf:99:6c:85:47:e8:dd:ad:c3:e0:61:4e:75:c7:9e:
42:bd:b3:6c:d6:ff:b7:31:fb:9f:17:75:b6:bd:37:
a6:96:96:59:8a:60:6a:92:aa:01:9e:b2:09:10:f7:
ab:09:0b:e3:0d:b4:7c:d5:ec:69:48:0b:a9:ec:73:
76:6c:86:3c:13:f1:89:4f:ab:74:37:57:71:73:65:
c1:3c:da:bb:08:17:a7:b4:48:b4:9a:e5:16:b5:be:
82:ee:6f:3a:b6:9e:4b:d7:d2:3e:6a:63:76:f9:d2:
c0:21:ac:57:ad:4b:3d:40:5f:45:ea:9b:83:e0:87:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E5:38:F2:64:18:53:FD:77:FC:DD:C8:D5:5A:3B:91:E1:22:75:4E
X509v3 Authority Key Identifier:
keyid:5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:47:d9:b1:54:93:18:93:ef:67:ec:98:88:c4:e9:56:e6:da:
0c:ec:2b:af:53:62:14:f4:dd:71:71:c0:58:48:b3:af:4b:71:
63:01:8f:93:14:6f:dd:bd:30:20:01:e6:19:91:4d:47:df:cf:
92:df:c1:71:a3:95:82:6d:ab:51:7c:4b:f1:04:cb:c7:3c:14:
c2:e5:f2:fd:13:2e:e0:8e:b0:d2:95:49:3d:54:c0:ad:3c:63:
95:32:ed:2c:ed:fc:3f:fd:31:9b:5a:4e:3e:96:10:1b:7b:b7:
b3:92:f8:a0:9e:eb:8b:7f:17:42:26:1d:4f:3f:c4:8e:ba:ec:
2a:20:5b:c1:66:ec:96:8f:d0:ca:13:da:00:21:61:1a:68:53:
a7:d0:bd:a9:89:29:e6:77:8c:55:19:8c:55:e4:65:9c:3d:49:
a8:e2:b9:32:71:94:de:85:1b:9c:d9:d8:9e:38:97:0a:93:b2:
ea:70:33:85:da:6c:ef:30:b8:31:35:55:fe:83:3c:89:1a:14:
3a:24:d7:63:c2:82:70:74:8e:7d:23:88:08:16:d3:da:47:d1:
7b:57:00:a1:4e:ce:bc:5a:c7:6c:ff:91:a2:37:f3:95:d9:95:
cc:25:d7:8f:ed:84:74:14:69:30:c5:18:bb:26:22:c7:83:7a:
b0:ce:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:52 2025 by rpki-client