
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
File: XmRDFeVulrFTtP_eTXDay6oVzpI.mft (raw, json)
Hash identifier: 1p82y0+4zuwGyvhMzp11yc6P99v/Sm6/O1Qh8EUxQeU=
Subject key identifier: AE:1E:80:16:59:6D:56:50:43:87:66:C0:95:E9:EC:41:A9:89:94:B1
Authority key identifier: 5E:64:43:15:E5:6E:96:B1:53:B4:FF:DE:4D:70:DA:CB:AA:15:CE:92
Certificate issuer: /CN=5e644315e56e96b153b4ffde4d70dacbaa15ce92
Certificate serial: 0194BD4EA591E9C34DF0DEABBC867F7CEB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmRDFeVulrFTtP_eTXDay6oVzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
Manifest number: 039B
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: XmRDFeVulrFTtP_eTXDay6oVzpI.crl (hash: a9rkLYJFbpK46Pb8PMHGVPwIglu3oKqFg6RjKrftBxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a5:91:e9:c3:4d:f0:de:ab:bc:86:7f:7c:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e644315e56e96b153b4ffde4d70dacbaa15ce92
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=ae1e8016596d5650438766c095e9ec41a98994b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:30:27:0e:f6:62:46:05:e8:54:29:72:db:
2c:f2:f2:f1:e2:c6:92:ef:37:a8:bd:74:c8:22:4e:
9e:6d:e5:b2:5d:23:05:7a:df:31:43:9e:99:fc:b6:
4f:8f:ec:eb:83:e3:f3:a5:23:40:7d:b0:94:34:94:
0e:f2:5f:38:e1:9b:20:90:10:5b:dd:d0:31:eb:8d:
8a:a8:1e:e6:c1:cf:12:24:6b:78:ff:58:85:05:2b:
6d:17:e0:2f:f8:30:61:1c:a3:83:d2:b3:1e:85:ac:
20:34:05:ad:2a:76:89:8a:f8:04:42:6d:85:a1:3d:
10:7d:f4:ef:78:28:95:2a:c9:71:34:cc:09:47:19:
26:a8:25:4e:7e:f5:70:a7:28:4b:b4:4a:b3:fb:1d:
fa:5d:8e:59:26:ea:f2:cc:78:95:17:4b:c8:08:fb:
63:17:69:55:d8:3d:62:63:31:4a:56:54:19:dd:e2:
81:a5:a8:fe:05:71:21:db:18:46:bc:e3:fb:d9:db:
c4:4a:c7:1e:cf:83:31:bb:d4:53:7a:fe:79:51:0a:
b3:b7:e1:ed:17:bf:99:17:a8:b9:62:f4:36:f1:3f:
d6:35:06:ad:41:55:ed:86:2a:c4:d6:84:33:07:50:
7d:5a:28:06:e4:9f:c8:10:45:77:ab:76:c1:02:60:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:80:16:59:6D:56:50:43:87:66:C0:95:E9:EC:41:A9:89:94:B1
X509v3 Authority Key Identifier:
keyid:5E:64:43:15:E5:6E:96:B1:53:B4:FF:DE:4D:70:DA:CB:AA:15:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmRDFeVulrFTtP_eTXDay6oVzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:50:61:6d:4c:70:1c:33:fb:ac:38:14:3f:c6:3e:30:87:
8b:1a:b9:71:9b:30:7f:c9:18:b5:cf:98:05:14:bb:ab:db:fd:
c8:71:84:79:cf:25:19:fb:22:3f:f2:d7:db:26:9e:8d:f6:0c:
45:e6:d4:f5:04:f0:4b:ff:d8:08:24:fd:bd:60:f1:ec:89:6d:
54:af:a0:7d:06:8a:5e:77:a4:bb:4a:0b:7f:5d:56:d1:64:e6:
bd:ae:12:be:b0:e4:93:cc:97:63:16:6e:de:18:b2:12:e0:ed:
b8:9e:f7:5e:cc:24:3b:98:11:e6:4b:4b:2b:91:33:9a:e9:95:
64:c1:1c:ca:7c:1d:cf:f0:b6:84:93:f6:94:26:38:87:0e:cb:
88:98:9c:97:24:30:cf:07:94:73:c3:04:30:ed:0d:81:f4:a8:
3d:ac:56:09:4c:9b:2d:b5:4d:1e:8a:a6:ba:0c:cc:7b:12:ef:
18:dd:24:ad:63:31:f0:05:0d:03:75:c1:66:29:b0:6d:23:c7:
1b:ac:f4:79:ba:d2:ff:1b:d0:ce:9c:fb:3f:01:9a:ab:21:09:
0d:c2:fb:fc:e1:63:83:8c:22:eb:e9:e6:37:5f:f2:c0:34:5b:
7e:25:7f:dd:ee:73:eb:58:86:b6:aa:ce:d7:dc:cf:b4:39:f9:
da:94:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:02 2025 by rpki-client