Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
File: XGl5JYB9FsulLpLpIs_dXsB4hBg.mft (raw, json)
Hash identifier: LomHc+P2MiQrPAuS/0lpsDjos+A1IWEpDnmQ40SpCS4=
Subject key identifier: 37:4E:EF:6C:06:83:BA:4A:89:34:13:31:17:99:43:4F:3B:F0:8F:E6
Authority key identifier: 5C:69:79:25:80:7D:16:CB:A5:2E:92:E9:22:CF:DD:5E:C0:78:84:18
Certificate issuer: /CN=5c697925807d16cba52e92e922cfdd5ec0788418
Certificate serial: 0194BC3BDA1ACF418F85D6FFC8AFDBC2C794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
Manifest number: 0C29
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: XGl5JYB9FsulLpLpIs_dXsB4hBg.crl (hash: 0G4IFfwJeF69OOGlQ9qUDW3ZQ7PNQ6VGDQMk2e6jMy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:da:1a:cf:41:8f:85:d6:ff:c8:af:db:c2:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c697925807d16cba52e92e922cfdd5ec0788418
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=374eef6c0683ba4a893413311799434f3bf08fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:c5:8a:70:ea:01:87:a6:72:1d:da:4a:03:
ef:41:d2:1b:9d:65:a2:a0:19:27:c7:90:32:47:a6:
ce:25:51:00:57:48:d9:50:ab:7f:59:99:19:5e:3b:
95:9c:19:a4:df:7d:5e:7d:8c:4c:a6:23:f4:28:2d:
ce:03:b6:36:80:2e:81:de:62:e7:12:e5:e2:7c:7d:
34:e6:03:ab:54:b5:50:7e:87:42:56:27:52:d1:3c:
cb:57:a4:7e:af:ae:10:ab:11:88:0d:a1:e2:56:ca:
1a:5f:e7:95:a1:41:8e:5b:d7:11:a0:fb:9b:e5:f4:
0c:6d:82:81:8a:9d:18:c6:a8:94:bd:36:a4:c0:0a:
3d:0f:67:cb:ef:f3:7c:8d:4c:0a:64:d6:cf:d3:45:
49:dd:2b:a1:93:f4:03:03:c6:b2:41:33:a3:00:de:
94:d8:25:0b:55:d2:e8:33:0b:a9:12:81:ae:c9:a8:
0c:a3:c9:78:fb:46:d0:2e:84:a3:a4:e8:a3:b0:05:
af:c9:8d:9e:dc:f6:f6:48:dc:a5:03:7f:79:8b:78:
3d:33:a2:4b:16:f4:6a:5f:da:5e:85:e1:c3:de:5d:
72:e7:4e:88:97:ac:8d:0c:79:60:e5:7b:2c:a2:e4:
dc:d7:59:9f:6c:a6:f2:36:5f:b3:dc:71:63:20:83:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:EF:6C:06:83:BA:4A:89:34:13:31:17:99:43:4F:3B:F0:8F:E6
X509v3 Authority Key Identifier:
keyid:5C:69:79:25:80:7D:16:CB:A5:2E:92:E9:22:CF:DD:5E:C0:78:84:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:84:7d:0f:46:5a:09:dc:31:40:e2:58:7c:91:cd:87:9a:
71:f1:f9:3f:36:d6:6a:26:c0:6b:34:9e:dc:cb:13:2e:bf:17:
98:6b:2b:51:4b:2b:44:ee:9e:cf:89:75:47:3e:ba:99:6c:ae:
6c:4c:5f:0d:ab:d8:cf:75:fb:91:ca:72:dd:90:a0:99:64:b3:
1b:bd:16:b7:0a:41:98:1e:94:eb:1e:4b:40:ee:de:07:2f:6e:
cf:54:da:a8:3f:e9:e6:bf:12:04:d4:ba:81:cc:c1:5b:06:5f:
6a:1c:31:76:1b:c8:1a:03:ab:e5:9f:79:32:8b:bf:b9:4c:ec:
51:87:ea:9d:82:27:5f:3c:90:5f:04:ad:85:e1:23:a2:cb:c0:
c3:41:eb:01:dc:07:8e:64:06:8d:0b:fa:27:90:8e:84:2e:1d:
3e:2b:48:70:49:2f:98:49:9d:f6:8b:65:25:8d:d8:10:6e:8f:
59:67:b1:f3:ba:2a:51:7e:c1:7c:66:1c:08:b0:01:fe:ee:d5:
0c:bd:93:c4:2c:c4:7d:2f:b0:8a:04:bd:72:c8:e2:f0:f4:5b:
51:0e:76:ca:f3:c7:97:b7:c7:e7:66:dc:84:62:46:67:33:76:
57:8c:92:44:20:42:ed:fd:86:64:26:66:10:19:21:18:3a:bb:
50:ff:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:47:40 2025 by rpki-client