Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier: flgrafo8phxPSZ84qLwmuAeYp60fUQGtBjewu72XzX0=
Subject key identifier: 23:3B:86:7F:2C:B7:33:00:07:D1:8D:B5:11:B0:0F:34:09:74:6E:49
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial: 0194BD1793412CCEE35F5810A7A2005B1E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number: 0BE9
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: xMCrOAtrB+p5gT7FSmn4o2/Ib9ad3+2fTkl7V98+ktg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:93:41:2c:ce:e3:5f:58:10:a7:a2:00:5b:1e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=233b867f2cb7330007d18db511b00f3409746e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:ea:89:e1:a6:fb:cc:6b:09:36:20:17:05:
a9:d1:eb:c5:47:f0:99:af:80:94:54:c4:57:fc:9c:
3a:33:a3:7b:8d:a6:a6:da:11:9d:47:33:4b:2a:51:
51:47:83:da:68:4e:67:59:f0:3d:f7:07:47:18:63:
e8:8e:77:db:1c:2a:04:b6:7c:52:49:83:bf:1d:b6:
1d:c8:f6:8b:e0:f4:0e:89:ea:af:6b:08:a3:21:ff:
84:57:63:d3:c5:18:f2:8c:d1:a8:d9:24:0c:be:b3:
f2:b6:3a:44:6b:57:cf:3e:41:20:89:8e:c1:64:b8:
1b:a0:94:53:b8:10:ce:f3:74:8c:86:8c:9f:51:ef:
d9:23:cd:e5:df:42:42:60:1d:da:ea:36:6b:70:4f:
4c:b5:42:c2:e6:36:7b:6d:d3:8c:ab:59:86:e7:35:
04:5c:aa:65:66:7b:fa:0d:c5:19:62:8c:40:e7:0b:
35:5f:56:58:fc:6c:e1:14:c2:96:61:1c:b0:5b:dc:
d3:10:2f:c2:6d:79:e1:be:af:b6:95:f1:96:ba:37:
f8:a7:4c:88:60:c1:38:c0:c2:46:af:a6:0a:29:a6:
09:78:1d:e8:f6:ca:0c:8f:f5:f5:1a:ea:b9:23:bf:
f6:33:77:cf:ed:e0:c8:d5:98:34:6f:c8:92:42:90:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3B:86:7F:2C:B7:33:00:07:D1:8D:B5:11:B0:0F:34:09:74:6E:49
X509v3 Authority Key Identifier:
keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c1:5f:ea:73:72:07:32:08:b6:3f:69:c0:ce:cf:7a:4e:47:
e4:9c:1d:9e:00:65:aa:8a:35:e3:81:5d:89:a2:2a:b9:13:03:
c1:33:e4:b3:2d:16:4e:48:6d:c6:99:9d:c0:33:fe:9e:f4:ea:
db:cb:c8:b3:32:3e:2d:00:3b:3c:6b:a7:da:fd:c7:41:9f:70:
dd:59:96:13:e2:ee:95:7e:4a:14:c5:55:52:73:55:bd:f9:2f:
db:84:81:d5:9d:4c:e8:a5:b5:80:5a:7a:45:1c:39:2a:56:6e:
f5:cd:24:71:18:87:dc:f1:27:28:c9:2e:a2:b3:70:56:b4:72:
a0:ae:61:b6:0e:89:57:10:5b:cc:14:e9:08:23:7c:a3:7a:29:
88:a5:38:06:ce:5e:10:93:71:af:83:9f:4e:da:24:06:37:4c:
ae:31:11:fb:f8:0d:d7:fe:85:3e:eb:91:cc:27:13:88:6a:04:
bf:85:94:85:04:5e:16:d7:b6:b7:96:f8:21:98:ba:09:22:c1:
a2:a2:91:3e:cd:12:f0:96:e6:d9:34:2f:2e:c9:3b:0c:92:47:
04:ef:fa:3e:ba:81:f1:7d:38:57:db:73:18:ad:80:5a:fd:70:
7d:44:20:33:70:3c:7f:54:ed:d5:b7:df:2f:b2:13:24:34:8b:
6c:d6:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:32 2025 by rpki-client