Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: vbQkS6rbeXhRVA83J1f9Se40XUFWqYPd3rWz4ITfMKY=
Subject key identifier: 03:8F:A6:83:9D:95:91:E1:09:C2:64:31:B5:DD:D4:C9:DB:20:43:D7
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 0194BC3C369EFD666FE067923092B1365D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 0144
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: GiLOJqhY/AKrRqUoL6H3eFmTep2dX6j01O3EXYq5f0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:36:9e:fd:66:6f:e0:67:92:30:92:b1:36:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=038fa6839d9591e109c26431b5ddd4c9db2043d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:27:50:73:7f:2c:c8:b4:fe:8b:6d:9e:9a:
ec:02:38:fe:9d:b1:c7:a3:c1:ff:b7:7a:4d:cd:72:
37:ce:62:a2:d9:34:c7:af:87:9b:0a:47:11:52:e6:
08:f3:c6:89:ae:9e:ca:f1:38:e4:ad:51:f7:af:97:
75:e3:44:17:49:2d:d7:c3:26:6a:8c:12:d3:74:46:
e4:ae:c9:78:07:ce:0a:51:43:5c:e3:bb:21:e0:b2:
a0:c7:11:a0:eb:ed:1a:4f:82:b2:d7:33:0b:8c:e8:
cf:c8:61:1b:66:31:0a:59:29:dc:8e:03:a5:62:10:
23:58:c3:2e:55:5b:9b:1a:42:d3:e6:92:ba:7b:fa:
ef:96:5e:53:0f:8b:b8:8c:f6:01:12:0d:e5:3c:a7:
87:8e:d9:e4:19:e5:80:f8:61:5b:4e:28:b4:e0:df:
b7:4a:b3:7c:74:ce:f1:d1:00:27:80:96:c8:ee:c3:
b7:67:0d:c5:30:82:fb:0e:ce:69:a9:77:94:f5:f8:
f7:c5:92:bd:93:32:92:f7:0f:f5:83:c0:07:44:08:
ea:c7:3f:cd:11:93:2a:47:e5:a9:32:c0:03:83:bc:
29:81:eb:44:c2:ca:bc:b0:bb:10:ae:c7:16:44:db:
3e:7f:9c:ff:fd:ba:35:8a:3e:89:c4:11:77:7d:44:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:A6:83:9D:95:91:E1:09:C2:64:31:B5:DD:D4:C9:DB:20:43:D7
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:cb:d4:a5:7a:f2:b8:a5:77:63:f6:31:1d:77:23:e0:dd:10:
b6:b3:85:ce:8e:b0:5f:2d:eb:17:f1:77:52:a5:ba:ac:ab:fe:
c5:d6:a4:90:89:6e:e8:ba:d8:2d:78:de:53:96:53:b7:5b:39:
eb:c4:81:dd:f2:e0:0a:0d:fd:d0:9b:34:15:eb:98:0c:ff:ec:
78:d8:dc:1f:69:a7:61:9b:d3:7a:c4:91:91:08:2c:9c:02:91:
11:d9:c3:9d:12:64:89:2f:c5:f3:07:27:08:63:54:65:14:90:
65:42:76:37:bf:2e:17:d3:88:2f:ba:21:9d:3f:ae:f5:65:b2:
2a:27:17:d7:dc:a7:69:f5:91:7b:5d:97:01:2e:cf:21:c3:d4:
07:21:f7:97:ee:11:48:f7:25:a7:ed:a1:8f:62:db:d8:02:b6:
c0:22:f3:32:06:a5:b3:d5:3a:33:f4:8b:6f:17:2d:eb:42:55:
44:7a:c1:27:59:2a:34:e2:75:23:69:85:27:f6:c3:e6:8f:f1:
da:cc:22:03:18:f4:52:34:82:4d:6e:50:6b:d8:c6:16:01:94:
97:09:b7:89:ac:54:02:af:09:eb:e1:35:5d:ca:d4:26:d0:ec:
0e:9f:99:93:c9:91:52:87:5a:b9:c8:e0:f4:ce:a8:b0:34:20:
69:0c:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:14 2025 by rpki-client