Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: we8GI93N+b+FCuijzsynWi3oYM57NWPjSMGMIaKEugI=
Subject key identifier: D8:B3:84:60:EC:A8:6C:33:FD:C5:67:8C:3E:F3:53:50:51:E8:01:F0
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 0194BCA98E0DD18B3A3957CE8A568AFBAB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 0F2B
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: LuGbJm9ee1JE4NND/+LsYI3LY4zXgfDva15g0vK/b0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:0d:d1:8b:3a:39:57:ce:8a:56:8a:fb:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=d8b38460eca86c33fdc5678c3ef3535051e801f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:51:06:4b:ca:ec:81:cd:3a:c8:46:60:14:
9f:d2:53:3e:24:87:4c:cc:d0:21:bc:5b:b8:ce:fa:
72:d2:4f:f1:b2:8d:7f:90:44:1a:3d:fe:76:7c:99:
d4:53:b4:8a:bf:0d:f4:02:0f:fd:7c:ac:e3:ea:fa:
8e:e6:33:42:99:0d:16:b8:80:5d:41:e4:91:7b:a7:
5e:5d:81:f6:99:9e:a3:fc:49:c9:1b:92:d4:e8:34:
61:cc:2b:55:15:2c:d9:f0:98:63:17:0f:71:44:3a:
30:a8:bf:f1:1c:9f:67:6d:72:92:f2:78:fd:73:a6:
cf:35:f5:5d:17:96:f4:3c:5d:9b:39:21:a6:40:62:
7d:62:04:ae:f6:5a:cd:04:3b:bb:63:a7:df:d9:47:
5f:59:2f:3e:7b:fb:51:4a:07:ae:8e:e5:84:88:2a:
03:33:ca:36:d2:b8:9e:8c:cb:64:b7:f4:34:9f:ae:
0b:40:6d:ec:45:89:38:9f:5f:f9:85:69:07:96:13:
7a:40:42:0d:87:43:94:63:6e:92:6a:53:00:11:7c:
01:69:e3:ab:5c:2e:84:fe:07:73:92:99:3c:ed:4e:
1f:58:ed:b2:d5:78:1d:d8:b5:b2:57:e5:67:d6:23:
f4:6b:45:b2:35:ed:63:5f:70:4c:47:51:45:82:3f:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:84:60:EC:A8:6C:33:FD:C5:67:8C:3E:F3:53:50:51:E8:01:F0
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:46:c4:45:db:c1:df:e4:fe:0b:ea:89:36:fd:31:99:5e:0b:
e1:e2:a7:3e:a6:35:90:ce:d0:4d:27:8a:4d:d6:16:0e:6f:34:
f6:03:24:e3:6f:b5:e0:77:7a:9a:9e:a7:11:a5:25:bf:cc:0b:
bf:74:0a:d1:7b:74:d6:db:22:5d:f9:5e:af:e4:57:76:53:92:
39:97:b6:83:fd:70:11:fb:79:6f:b9:42:e5:2f:0d:10:b2:1f:
f9:d0:ed:32:ad:9c:19:9d:c7:66:4d:67:e5:d2:8a:a9:13:76:
1f:a1:b5:a8:e2:72:91:c4:5f:b7:11:23:64:9e:a2:ab:93:00:
0f:6f:4b:0d:01:f4:65:06:f9:16:31:e4:ff:20:0f:c7:4b:83:
76:ae:65:84:f8:e4:c2:92:91:31:13:19:bf:19:c7:77:ea:77:
60:4f:62:bf:22:c6:4f:26:94:e7:c0:35:92:9f:5d:c3:1f:c5:
9d:5b:12:f8:a1:f8:85:ca:90:4c:ee:b6:88:be:03:f4:18:44:
69:b4:62:40:9e:d1:17:4a:1e:3c:2d:19:7e:85:9a:cf:56:b8:
92:5d:80:35:c3:e3:1a:12:e8:6e:e5:c2:c4:13:5b:1e:0f:cd:
98:02:e0:76:a7:ec:3d:13:46:1a:5b:49:a8:e0:1a:c4:a0:67:
d9:99:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:08 2025 by rpki-client