Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
File: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft (raw, json)
Hash identifier: E8lwJ2Kg10Eb3dH7ixrrDsIeVKOX9z6QvnxwcvBNvGU=
Subject key identifier: 14:33:40:42:15:D4:DA:26:0A:49:D6:A2:A8:42:62:84:37:29:31:06
Authority key identifier: 5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
Certificate issuer: /CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Certificate serial: 0194BCAA3D10EC942E17D8EEF7B9C0AAFF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
Manifest number: 09FF
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl (hash: j2w4rdUnWmVylafGo2Ufp4FT2PsUUor5xWS9JIOmD2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3d:10:ec:94:2e:17:d8:ee:f7:b9:c0:aa:ff:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=1433404215d4da260a49d6a2a842628437293106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:48:db:d8:26:dd:0b:e1:c9:24:ae:98:d1:
92:57:c4:ff:d4:22:66:22:e3:21:45:01:b9:00:d2:
89:b3:04:51:9e:fc:3b:48:c7:19:80:2d:dc:c0:b7:
21:a4:78:b5:d7:a0:50:d9:0e:08:00:5e:2b:65:a9:
17:df:70:dc:fd:dc:2e:1a:f7:eb:58:b6:86:fb:81:
76:2b:d5:24:71:b9:05:53:16:29:6c:5a:49:7e:ee:
15:46:8b:d3:6c:48:6d:62:ee:ce:32:ae:f5:96:dc:
5f:0b:eb:a2:7e:fe:e5:87:90:37:6e:45:5a:1b:2f:
e9:73:5f:3c:a3:ae:2a:df:33:3b:17:2a:21:ae:af:
22:c6:b9:b9:51:54:1e:26:ba:20:df:88:f5:75:96:
1a:48:fb:25:f5:98:82:ef:98:e1:1e:44:58:5f:85:
c6:74:d2:b5:d9:3d:68:ba:e9:66:3e:fe:28:72:36:
80:d0:16:86:84:c9:60:7b:ca:f5:97:56:18:95:5c:
3e:3f:15:a5:ac:03:eb:07:c4:b3:7c:26:a2:b6:8d:
07:90:6b:f6:1d:7b:0c:18:ee:9c:dd:2a:37:4e:a1:
d2:ce:ef:00:97:75:a5:2c:da:38:97:1a:32:05:5b:
30:71:65:e4:2d:3a:4a:f0:2c:75:69:58:91:5b:be:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:33:40:42:15:D4:DA:26:0A:49:D6:A2:A8:42:62:84:37:29:31:06
X509v3 Authority Key Identifier:
keyid:5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f2:5d:9e:5b:90:47:a7:ab:b3:72:d6:f5:31:ef:7c:20:42:
7d:6c:aa:66:45:a0:98:4e:e8:f9:d8:f1:c8:e5:71:94:85:1f:
92:b8:8a:97:c5:15:ec:65:61:44:c0:9f:1b:48:fe:46:cd:66:
7b:27:4f:b9:53:5f:9f:89:02:1c:20:c4:b1:9f:2d:11:e2:76:
42:99:ee:e2:a4:d8:a2:5a:54:97:15:ba:7b:1e:82:1c:37:ee:
14:ed:9c:b3:0f:5a:62:40:f5:2e:a6:b9:57:7e:0c:0f:9c:93:
28:20:83:5a:e6:48:8b:0b:f5:61:10:a5:ca:58:39:d3:9e:11:
9b:f0:df:cd:2d:23:ee:9f:5b:ab:cd:7f:f9:f0:ee:cf:29:e0:
19:c1:6f:de:9a:f2:65:15:dd:8c:e8:2a:6d:05:80:98:19:c5:
42:61:9a:0d:99:ac:cf:e8:ad:3a:d0:b6:b2:e3:39:52:8f:f0:
69:00:f0:e3:06:cf:99:dc:fa:98:f6:86:d3:1a:89:6e:26:56:
20:46:15:ce:ae:b0:8e:25:80:be:f1:7e:37:04:da:b9:3d:36:
44:0f:94:c7:d6:43:f9:b3:0d:ce:2e:57:5a:3b:23:d5:c9:a8:
83:f0:2a:1b:05:fa:e8:81:96:65:0a:a3:36:3f:1c:05:0a:cd:
fa:b5:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:27:42 2025 by rpki-client