Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: gItNfPdO9ptETfd5BrJOrsO2AsfYXVcUuRtghb3L+xE=
Subject key identifier: 51:65:93:F9:70:9A:6A:04:17:4E:F3:57:DC:41:35:AD:57:BB:4B:6E
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 0194BC7315689643629C2E12F278DBB5709B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0B36
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: x/6vtrbfWGNnJSWIbMNB/cExsvxHGs2vJCGn09zgKbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:15:68:96:43:62:9c:2e:12:f2:78:db:b5:70:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=516593f9709a6a04174ef357dc4135ad57bb4b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:ee:0f:d7:b3:28:c0:a5:10:79:c8:6c:80:
d4:ac:94:0c:09:72:11:8a:c8:90:2c:e4:43:4d:16:
39:a3:84:88:e3:db:f4:4b:1d:b7:21:45:3b:68:fb:
13:d6:11:32:dd:0d:8f:7c:71:99:70:69:80:09:c7:
65:55:88:39:7c:34:16:4c:07:4b:0e:8a:c2:4e:78:
88:c8:89:43:52:ec:81:79:09:03:d7:52:7a:8f:c8:
70:7f:8a:bb:d4:07:d6:00:dd:ff:be:88:f7:c4:86:
2f:58:22:e2:1f:ed:fe:2f:30:df:78:f5:16:2b:73:
0b:30:7b:62:6b:9c:d7:26:24:1d:65:98:1e:1c:2c:
db:ed:da:92:56:67:1a:ed:85:0d:f2:b4:10:dd:cb:
ae:6e:84:84:ed:0c:d1:10:73:e0:79:a4:5c:9e:b3:
e0:44:bc:e6:67:ac:49:3d:22:f3:a3:6a:95:4b:67:
7b:8c:8d:2e:f4:2a:6e:ca:86:6d:4f:46:f3:7c:cd:
82:9d:25:cb:92:bb:44:34:b0:e2:1d:e1:08:ed:bd:
2a:de:91:55:29:5e:7b:33:5f:8e:3d:6f:48:73:99:
d3:af:9f:f2:2c:51:71:f5:50:4e:b2:eb:b3:40:75:
b2:27:3a:a1:dc:c6:09:63:62:0f:97:87:60:08:79:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:93:F9:70:9A:6A:04:17:4E:F3:57:DC:41:35:AD:57:BB:4B:6E
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:f5:6c:c5:c0:86:27:fc:79:af:02:0c:58:31:04:9b:c4:
d0:66:66:3a:b8:37:29:e9:fd:2c:7b:d1:3f:3e:3a:45:e7:a6:
d4:dc:14:01:9e:7b:3c:57:03:a5:9b:81:7f:35:8f:f6:5f:f3:
29:99:6d:d9:a1:2c:10:3f:5a:af:a9:ea:bb:7e:d1:6d:47:20:
72:31:b5:9e:a5:ef:27:5b:de:73:d5:81:40:e8:12:31:97:dd:
41:9b:fb:da:cb:b3:ae:a9:48:55:36:45:d4:4f:9f:f4:c4:2a:
bf:bc:a9:dc:26:a2:8c:79:99:4d:8a:25:7f:88:69:da:12:8c:
48:d2:f3:a3:b7:3d:46:ea:51:5c:71:1d:fb:f6:17:d6:cf:6c:
25:a9:8f:2f:fe:fd:32:df:e4:79:6b:c3:19:1e:ff:44:dd:de:
68:15:14:cf:1d:57:e6:4b:74:79:cf:55:a6:0b:5d:15:da:1f:
52:6c:cb:90:d3:92:ae:66:36:f0:53:7d:46:86:29:f0:19:c4:
4a:f7:5a:20:e9:95:7f:a6:12:8e:de:31:1c:c8:87:c9:2d:38:
83:26:ce:b2:2e:f6:25:32:b1:a6:9a:ff:c0:0c:ed:13:c4:04:
a8:23:70:a2:fe:f9:e1:da:36:31:c0:46:45:13:30:c5:77:85:
03:ff:ab:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client