Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: 64PMoXMpKXAA+g/I17tZbI9RXvZspqko1KsV+7JXaIw=
Subject key identifier: B8:00:C6:7C:D6:72:3A:9A:CA:8A:C2:BA:00:7C:F7:32:D5:97:B3:F0
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 0194BCA997AD20E7082C03B351567B28C55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 0105
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: VGl8xmp0hj3ozEbWNFyb1ODlCeDAiHKM4jdsJzBIlZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:97:ad:20:e7:08:2c:03:b3:51:56:7b:28:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=b800c67cd6723a9aca8ac2ba007cf732d597b3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:ff:46:80:55:41:6e:a1:63:34:da:f6:42:
ef:ee:ee:bc:ec:79:fe:cf:8b:fb:a2:a6:eb:bd:ba:
31:b0:36:80:2a:83:ca:a3:81:84:1c:1d:80:3b:08:
3a:a3:91:ec:2a:9a:db:8d:7a:a8:c9:40:17:32:e7:
81:01:92:a0:23:9d:aa:05:90:1e:b9:c9:2f:f3:da:
57:db:96:b3:8f:2c:e6:05:ec:cd:33:55:66:73:13:
69:23:2d:b1:1c:36:87:3d:6c:54:2b:71:42:c4:e3:
1c:74:58:49:28:03:99:76:be:3f:3c:2a:d5:b9:3b:
b3:e5:61:ca:fb:72:b4:7c:d8:ba:0d:cc:26:cf:ba:
f6:fc:04:a5:48:de:df:18:18:70:a9:95:2b:75:f1:
d7:02:cd:ac:db:fa:71:35:1e:59:d5:7a:48:8c:f2:
0e:64:fc:0f:32:47:ca:3e:56:87:ce:83:4d:83:8f:
bd:db:2c:3e:66:13:7d:9d:15:0d:aa:22:e0:fd:77:
6c:7a:e1:d5:2e:a2:5f:85:25:6c:7f:a2:09:61:a4:
25:22:06:70:b9:de:4d:d4:84:fc:95:ef:d8:d3:a4:
1c:0b:fa:b0:24:f8:73:08:01:2d:31:1f:09:8f:33:
93:98:c5:af:75:2d:77:f4:4c:64:43:19:08:8c:e3:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:00:C6:7C:D6:72:3A:9A:CA:8A:C2:BA:00:7C:F7:32:D5:97:B3:F0
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5c:fb:dc:f4:59:f1:bf:62:5e:90:c3:33:a3:e4:87:d6:27:
76:02:f6:41:df:61:fa:d4:9a:25:64:1b:37:23:1c:a2:7c:32:
05:79:4c:9b:f6:76:42:14:00:82:e9:17:6e:a5:e8:78:19:b5:
b3:b7:9a:e4:55:d7:34:05:e5:a3:85:9d:87:6c:71:0b:c0:f5:
5f:cb:0c:bc:8e:59:36:6c:b2:f6:dc:09:4b:3e:f9:da:12:12:
5e:93:17:b1:03:2e:37:cd:e9:db:57:e4:c4:dd:52:2f:45:c8:
bb:15:10:02:05:34:ef:4b:61:1d:97:c0:48:fd:10:f5:f0:10:
a9:83:f3:d8:83:59:31:3e:04:0e:c7:c0:e1:77:29:af:cd:3d:
87:ef:03:f3:6c:8d:b8:10:41:f5:27:3e:27:ca:1a:c2:5d:53:
15:4b:57:e5:58:c3:4f:4f:17:42:df:c6:1b:93:fa:bf:4e:cb:
fd:4f:78:1a:66:65:06:43:64:39:61:9d:7c:ab:a0:e7:bf:56:
70:26:76:b6:fc:87:2f:5d:5c:9e:7a:fa:ca:7f:da:05:09:e3:
a8:87:73:17:01:c0:0e:31:ff:56:49:29:ba:43:a8:76:dc:e8:
ac:40:65:37:62:f7:cc:6d:db:06:a3:2c:af:25:b9:12:e8:57:
54:d4:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:08 2025 by rpki-client