Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
File: xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft (raw, json)
Hash identifier: 8RtbAvWonzVFzLKNC4L8Zrbp13ztwdAZJzI0KWrTYsc=
Subject key identifier: 64:3E:4E:47:57:45:1A:3D:E9:3D:8C:42:CA:D1:43:0C:5B:BC:2C:9E
Authority key identifier: C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
Certificate issuer: /CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Certificate serial: 0194BD17A3D65505A755111F11E407C08B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
Manifest number: 04FC
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl (hash: k8Lrq3ZgRBfCyKXkPEJ+MIzKHp0fMYq9Lx7vx4XeMcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a3:d6:55:05:a7:55:11:1f:11:e4:07:c0:8b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=643e4e4757451a3de93d8c42cad1430c5bbc2c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d3:ed:88:ed:e1:8c:4d:48:e4:bb:d1:f8:68:
94:bd:62:5f:ae:43:09:3d:bc:dc:2a:d4:0f:2f:86:
b7:a1:36:31:2f:2a:3b:48:c3:c7:7d:5d:e5:dc:8a:
2b:bf:a4:ef:57:9d:4e:a3:cc:ff:0e:e3:bc:bc:dd:
80:8a:87:ae:36:e7:ba:b4:35:09:41:6c:f8:34:66:
8b:42:7f:40:ee:2f:9e:3b:6d:1c:b0:f4:20:e8:73:
90:8b:e3:6e:ba:73:42:27:75:ac:4f:b7:36:5d:34:
c3:61:03:c6:ea:fa:56:8d:c0:27:2e:bf:53:27:d5:
91:db:57:59:03:f3:62:fe:99:a3:9d:20:68:a5:78:
24:d2:3f:84:8c:3d:15:5a:b7:90:b3:ca:ae:02:da:
d5:a6:ae:13:db:d6:18:5c:97:44:07:86:79:8b:37:
fb:34:af:01:61:23:76:2b:3c:3d:39:e2:96:ee:9b:
5e:b6:ec:3b:cd:84:35:12:c8:24:1a:2f:06:aa:e2:
e8:0a:cf:16:67:15:57:75:c1:42:19:3a:da:28:4b:
8e:85:4d:62:5b:91:36:31:df:39:d3:56:9e:4d:21:
72:2c:59:93:39:9f:6e:e3:d0:6a:bd:d8:cf:06:3c:
e2:56:88:6d:80:7d:8d:67:99:8c:84:d9:96:c6:6b:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3E:4E:47:57:45:1A:3D:E9:3D:8C:42:CA:D1:43:0C:5B:BC:2C:9E
X509v3 Authority Key Identifier:
keyid:C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f0:fa:92:63:10:9e:d2:db:19:bd:91:26:ec:62:20:f3:15:
09:1f:de:2b:79:ad:d2:a7:26:9f:55:50:1d:22:27:ae:f5:e4:
68:ce:f0:d1:b7:be:ed:13:55:ca:15:ce:be:bf:5a:06:30:77:
a8:16:50:ce:54:6d:67:2c:a3:10:06:ff:6d:b7:43:e4:b3:ba:
6d:10:47:b0:24:6f:df:3d:c1:27:07:69:5c:ba:90:08:c5:e6:
05:ed:03:05:c5:c7:42:0e:2f:49:1f:3e:d6:24:91:2f:32:45:
ed:c2:1d:88:8e:53:c9:3f:1f:5d:a3:17:03:e5:b2:65:8f:0d:
96:1a:09:a0:99:c4:e3:d7:0b:88:b0:fb:07:79:ef:9d:21:b5:
41:e1:c0:a0:06:9a:c5:80:4c:06:41:3c:1e:45:1e:52:26:04:
b5:e8:41:35:78:bf:38:08:c8:82:d7:7e:a4:68:9a:d5:9b:2c:
e0:26:ca:f0:18:78:96:e5:9d:50:66:2f:e8:2e:e5:69:8e:32:
fa:77:a8:f8:1a:1d:c2:17:61:2a:48:19:6b:15:5a:94:53:79:
c9:be:49:96:eb:d2:d4:7e:8c:28:1a:1a:99:b0:49:80:b6:ae:
70:89:bf:3d:ba:3e:72:12:35:d6:59:84:d2:42:17:ef:02:34:
5c:08:6e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:37 2025 by rpki-client