Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier: sY5wjQSrMno3aCuAbjGiucNXH/ZfKxN5YOUuD7yfvTc=
Subject key identifier: C9:CA:3A:8F:64:FA:81:F2:02:61:DD:12:BF:C2:7A:3B:E3:34:9C:DA
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer: /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial: 0194BBCE94746D16D0264F34ECA6C0E6C665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: K3gGVmWhHe7OtYGtzLpylBqS14RRhR/K4IFTACOUlaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:74:6d:16:d0:26:4f:34:ec:a6:c0:e6:c6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=c9ca3a8f64fa81f20261dd12bfc27a3be3349cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:84:a4:32:62:71:ac:3c:6f:94:af:ea:3b:
e7:33:6d:b9:c5:01:52:61:9b:00:9c:66:8b:13:78:
5d:4e:e7:f9:bf:b6:e3:b9:0e:25:e9:80:9c:99:f6:
a6:51:e9:1d:9a:4e:01:18:91:6b:9e:52:10:99:87:
59:26:b5:1c:ca:ca:3c:38:af:ca:76:4a:e8:05:48:
95:e1:08:0b:a2:cd:63:99:08:81:b8:0e:db:2c:2e:
fb:c4:a1:fc:5f:05:3a:14:e0:90:c2:9a:10:af:f2:
f3:5d:ee:88:d6:09:76:e7:ea:98:c2:ff:82:41:dc:
05:76:85:4b:4c:1c:23:23:fc:c4:c1:dd:87:fd:6b:
70:03:4d:b5:ea:c6:53:2e:89:cc:b1:4f:fb:73:40:
e8:cc:86:e4:23:d4:e8:21:ec:02:46:01:13:ff:8b:
39:36:bd:a9:74:bb:95:3e:bc:ef:6e:8c:12:91:a4:
11:69:f8:2e:30:d0:72:b1:0e:ca:64:b8:2f:f3:8f:
09:aa:39:9c:4f:ab:01:2a:41:8c:e6:bc:97:8f:21:
69:01:94:f3:eb:30:7c:65:fe:99:cd:c6:b0:01:2d:
b5:33:0c:3e:a6:83:e4:ac:4b:ae:59:11:75:ca:ff:
31:e9:45:84:a9:0f:58:b4:4b:d6:e0:60:10:67:ad:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:3A:8F:64:FA:81:F2:02:61:DD:12:BF:C2:7A:3B:E3:34:9C:DA
X509v3 Authority Key Identifier:
keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f8:99:c7:db:8e:23:40:ca:bc:49:3b:2f:b3:5e:da:2d:c0:
9f:8e:07:db:dd:9c:86:a3:12:49:37:59:44:fe:a6:57:ac:ed:
3d:d3:2b:99:83:f3:98:be:64:6e:b2:74:dd:57:46:cc:98:07:
20:fc:77:11:45:f0:44:ab:7d:90:cb:35:63:d7:4f:f6:7d:5e:
62:fb:c8:5c:55:5f:90:d5:7f:a0:6f:60:ef:fe:1c:c5:88:60:
02:0b:41:92:e8:44:a8:c5:e2:04:fd:c8:b8:a9:df:cb:70:c6:
4c:22:94:13:b7:b0:a3:39:50:03:75:f4:9e:56:43:b4:54:39:
94:6d:42:48:58:47:d7:0c:5b:89:ba:34:78:ca:d8:5e:78:f2:
58:e2:c6:d1:b1:e5:15:41:61:27:d5:bb:be:3b:28:b1:40:93:
8b:a3:87:9c:f3:e8:d8:96:c2:9a:6d:c3:d6:75:9a:82:95:41:
62:01:c8:af:9b:bb:db:2a:b1:4f:7e:fb:28:8b:7d:f2:ae:a4:
54:29:67:13:d4:22:52:6f:ce:9f:f3:4a:75:22:5f:71:04:18:
46:66:76:e1:f1:c4:e5:41:f1:a7:70:58:a0:45:2c:fd:22:e4:
16:7f:09:75:72:c9:97:89:15:6d:a2:de:27:aa:9f:b4:4b:f2:
bb:34:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:22 2025 by rpki-client