Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: JVYVxhsYidg5qvPNg+8NaJdIZvVuTZX5p+i2Hxgmk+A=
Subject key identifier: 25:8C:9C:01:95:B8:24:03:3D:06:1D:0E:68:9B:D6:69:FA:25:13:3A
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 0194BCA9FD64FA1575FAE607AFF8100477D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 0504
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: 1anF3E61Vdyl7Da7uEb3FmD0wQ+9VjL6pGXGp3oI1jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fd:64:fa:15:75:fa:e6:07:af:f8:10:04:77:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=258c9c0195b824033d061d0e689bd669fa25133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:6c:33:56:03:85:a9:c7:7a:1d:bc:05:1a:
1b:28:f0:45:4c:a5:a6:5c:e9:26:55:0b:e9:d6:c9:
33:cb:09:ed:31:27:18:32:44:16:a0:b7:12:ff:e7:
ec:b3:af:e2:33:d3:16:38:f1:44:41:3d:d6:62:91:
7f:a9:df:18:9b:bc:c1:ec:38:c4:0e:ed:d6:74:db:
aa:1d:a1:05:42:85:3c:a5:dc:15:b0:00:9f:0d:e4:
62:d7:c1:e9:40:fb:03:9f:75:2e:2f:34:f0:87:2e:
41:31:c7:67:ca:e8:f6:28:16:e2:7b:f3:86:38:a2:
8b:a1:d8:a0:f7:f1:f5:6e:a0:4b:dd:8b:37:ad:d5:
6b:00:87:76:d4:eb:dc:df:1f:85:43:9a:e4:32:4a:
5b:27:30:a4:e1:d9:dd:20:e7:0a:cc:50:08:a6:c2:
c1:a9:08:f8:2d:95:50:0b:c2:51:51:9a:89:fd:f8:
90:74:34:dd:c4:30:b6:10:1f:f1:42:2f:2f:43:cb:
da:4e:af:eb:44:b4:9d:a8:92:3f:81:d9:cf:ae:c1:
8b:1a:5d:8e:f8:33:91:13:16:69:1d:f8:9f:57:09:
12:66:32:a3:42:b9:10:bb:e9:c9:ae:d8:a4:3c:5c:
d8:39:bd:2a:10:2f:23:d3:7d:c3:4b:68:06:b3:d6:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8C:9C:01:95:B8:24:03:3D:06:1D:0E:68:9B:D6:69:FA:25:13:3A
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0a:61:17:5a:9f:7d:3a:13:a6:cd:93:b8:a1:97:2d:d3:3d:
d7:f5:be:ee:e3:58:4e:8d:e9:6b:11:54:df:c9:85:8b:70:21:
99:70:68:c9:c4:be:52:4f:b3:bd:18:dc:4f:8e:ed:d2:7d:8c:
8f:64:b7:6f:13:ed:c4:26:40:7a:84:74:1b:b6:fa:68:58:41:
11:5f:d0:fa:5e:f1:d5:f7:ae:3b:51:4e:62:7d:e1:60:e2:c7:
63:e7:61:30:22:a4:56:89:90:2d:3a:a3:be:9b:da:d9:68:50:
97:c8:84:a0:d2:56:d8:c7:16:d8:dc:4a:9b:bd:bb:bc:da:dc:
9c:60:36:0f:c8:d3:47:49:cd:31:36:c2:3a:0f:7f:ee:bd:5f:
60:ac:06:c5:ee:a1:c0:99:e4:90:71:e9:7a:da:81:a5:54:d0:
c0:77:cb:b2:38:b8:6a:19:55:85:f6:e4:8e:32:29:8e:6d:cd:
6a:eb:d2:4b:bb:6e:da:36:a0:dd:e0:1e:88:ff:7f:50:5e:a7:
41:e6:7b:12:3f:51:a5:dc:c9:4a:66:f4:8f:ea:26:ca:ef:4d:
b1:fd:2c:3b:81:ea:dc:4f:a7:36:dc:14:e7:43:ec:01:66:9a:
aa:23:e2:44:50:1b:b6:4e:23:01:af:b9:92:bd:1f:19:05:7e:
41:26:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:50 2025 by rpki-client