Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
File: xRlGjFXmvnFcDagFzvta7IXTKSY.mft (raw, json)
Hash identifier: aL65r5M6SG3h3f4Vt7PrSDvlcAAqz+U+9aVNn4E9qcE=
Subject key identifier: CC:F4:DE:F7:A1:0F:AF:82:68:B3:BA:14:93:B4:A6:4F:C8:36:1A:CF
Authority key identifier: C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
Certificate issuer: /CN=c519468c55e6be715c0da805cefb5aec85d32926
Certificate serial: 0194BBCDD5E5EA89C2BAC703A466C038D34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
Manifest number: 0D23
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: xRlGjFXmvnFcDagFzvta7IXTKSY.crl (hash: w8NlTGLl3vJOBOpwgLHOvUBsCZiacyJKd2+KKnMoUqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d5:e5:ea:89:c2:ba:c7:03:a4:66:c0:38:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c519468c55e6be715c0da805cefb5aec85d32926
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=ccf4def7a10faf8268b3ba1493b4a64fc8361acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:51:d1:5f:fa:25:2d:91:8e:ce:1e:35:e3:
90:80:d7:b4:2c:1a:df:50:18:bd:81:17:8c:02:55:
bb:d6:f7:c2:75:f1:40:e3:1f:09:cf:16:25:af:68:
9f:6b:67:e6:e4:b1:a3:4c:37:e4:ad:c2:f7:e5:20:
10:cc:69:9a:35:c8:fa:e3:28:01:dc:62:e9:de:59:
1b:26:c7:38:5a:36:31:f2:a9:0a:c0:38:19:e5:b4:
58:54:97:5f:b8:ad:67:1f:7d:e7:f4:cf:90:a8:0f:
57:f3:40:d8:e7:59:76:f9:56:6e:67:3b:1c:e6:c6:
81:fe:7d:b1:71:f6:7d:fb:d1:2d:df:f1:6d:81:b2:
39:34:e3:38:ba:cd:bb:cc:78:73:ce:01:dd:f0:c9:
67:62:97:db:f5:5b:5a:cd:94:3d:fd:63:f1:e4:db:
1d:1c:9b:51:f8:e0:bc:1f:5d:05:fa:d1:5b:e2:a4:
a7:0c:ec:12:c8:c2:63:10:c6:3d:54:a4:ba:97:8e:
73:77:4a:18:4d:a1:1e:05:41:50:ee:67:e3:4e:0c:
09:4b:15:36:3b:5f:06:f2:f2:3a:37:1b:df:b8:8a:
11:c4:a0:f4:d5:eb:69:fe:10:e0:3b:b6:ed:18:35:
71:05:08:ad:67:f3:00:97:fc:9b:d9:f9:71:1a:bf:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:DE:F7:A1:0F:AF:82:68:B3:BA:14:93:B4:A6:4F:C8:36:1A:CF
X509v3 Authority Key Identifier:
keyid:C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:13:0d:36:0f:8c:da:96:47:46:ed:d1:d9:c4:a3:bf:8c:7f:
bc:50:88:08:18:ba:b7:71:1b:63:d2:63:79:f1:57:f1:56:db:
1f:36:1f:c6:e1:8e:6c:2a:e7:35:00:1f:1e:f3:06:83:44:c7:
c6:0d:36:83:43:c7:23:38:4d:38:7d:95:30:ea:50:69:7f:c9:
ab:b7:b3:e2:df:6a:85:a8:b0:c3:1c:96:e9:68:9e:6c:29:04:
d0:83:62:06:6e:37:03:80:e2:25:ab:a7:66:11:3e:24:2f:a1:
23:49:1f:42:bc:3b:d0:d5:cf:4c:25:ca:6a:b7:2a:5f:c4:20:
2c:57:04:00:9b:66:77:57:4b:31:77:8d:27:f5:73:6f:44:64:
8f:15:9a:72:d7:99:fe:39:cd:7b:e7:d1:19:50:b6:1e:98:31:
a1:f1:85:a1:d8:0a:84:93:c4:f9:e5:21:50:71:f8:5a:d3:d8:
f9:92:f9:0c:49:a0:e6:23:77:cc:4a:76:91:dc:f3:e8:6e:d9:
19:ba:00:06:bb:35:d8:5d:4c:5b:ac:34:14:04:b9:80:f0:3e:
3e:58:98:fb:9c:1a:d5:9a:76:7a:a1:d1:fc:c3:7d:c7:48:b0:
0d:74:c1:84:35:22:ec:25:05:5e:2c:a4:a3:16:12:67:73:6a:
78:72:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:30 2025 by rpki-client