Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: XkLg8eLP6eSSr06T40k+TQq4DCesiRCEZrNBezHU/Tw=
Subject key identifier: F0:E8:95:50:63:17:F6:75:39:99:E8:CE:EA:3C:70:70:A8:8E:15:F9
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 0194BBCDB6D6C82E9658CDE2E1150C891180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 06B8
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: qCrrdV2OTzcryhcA4bXSaUp3hkit7lCx4T95CVLhPEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:d6:c8:2e:96:58:cd:e2:e1:15:0c:89:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=f0e895506317f6753999e8ceea3c7070a88e15f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:46:fd:79:4b:ac:ad:ef:f5:1f:05:f4:20:
20:e0:a4:0c:06:87:34:15:b3:be:e0:c5:52:c0:3f:
99:d2:63:13:6f:60:d9:da:e1:93:75:37:6e:7e:a3:
87:f6:35:c7:93:63:c7:46:6d:3a:13:e7:a1:cf:8a:
d2:32:0d:74:aa:3a:32:54:43:79:b8:4c:51:86:a4:
12:6b:e1:bd:d1:6d:eb:ae:33:a8:df:06:95:ca:06:
ad:17:db:a6:71:ec:04:12:58:df:aa:93:17:f4:ad:
f1:33:c4:b7:29:64:91:4f:da:bc:4e:2a:73:d8:7c:
69:3d:3d:2f:10:09:8a:fa:60:5d:0a:c1:26:2e:7b:
dd:42:a1:33:5d:71:50:81:a3:ec:73:38:ea:93:f4:
ea:26:0d:f7:2b:56:a8:0b:39:2a:9f:74:d7:46:56:
3e:84:eb:f1:f7:e1:f9:6c:fa:dd:99:5c:7e:ec:5a:
9c:56:96:77:d1:21:b6:6c:7e:75:6c:ea:85:ca:3b:
61:e7:35:a8:f5:9f:ff:80:83:b7:ef:d8:54:b9:2d:
78:7f:6c:06:55:7a:67:b9:c3:a3:fa:78:6e:43:35:
cc:57:ef:d5:b5:2a:df:39:29:fa:ab:88:ed:69:1f:
54:26:2c:8b:c0:a1:31:d9:df:f9:20:46:35:18:76:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E8:95:50:63:17:F6:75:39:99:E8:CE:EA:3C:70:70:A8:8E:15:F9
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fd:11:bb:a4:eb:73:52:9c:08:b7:c0:1b:34:44:e8:2a:50:
94:e5:66:f6:9c:d0:4b:1d:16:c0:96:89:99:92:af:9d:58:83:
8c:d6:29:ea:66:96:ae:28:57:58:20:4a:20:2f:1c:27:54:37:
6f:15:1b:6f:2a:f3:77:8e:db:63:52:36:9a:c7:c3:a1:e6:b5:
6a:1d:7f:5a:78:5b:7d:7f:d7:8d:11:db:21:97:86:9a:32:f5:
4e:7d:58:0e:d0:c7:3e:9c:1e:79:4c:ff:39:1f:ab:87:93:85:
a6:89:35:ad:ff:e1:0c:37:79:37:99:30:29:79:d9:b0:d2:35:
44:e9:78:16:09:01:8c:6e:ad:eb:de:ba:26:a1:ad:5b:05:3c:
87:bd:95:58:46:12:0f:f6:e6:9b:6f:ae:c1:61:55:6d:51:b2:
75:42:2b:ef:05:53:55:76:20:dc:6c:ee:7c:20:a3:46:0f:1e:
a1:c2:92:f4:86:cc:9f:70:bf:47:78:c0:44:da:fd:22:f0:32:
40:82:c7:21:f6:e9:80:9c:ac:f0:17:c6:74:9f:c1:70:37:97:
da:b6:0a:99:50:4b:ff:63:99:55:73:0d:e2:a8:d5:57:2e:cb:
a7:87:9a:8a:a4:58:8a:31:17:db:af:97:6f:8e:c8:90:01:d7:
50:da:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:20 2025 by rpki-client