Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: b4XnX7vt6GtOCMxHkAAqZw392wKSltisgRbpqf/rj1A=
Subject key identifier: 4C:42:DE:1E:20:9E:FD:88:1E:69:18:37:6E:4E:2D:19:FF:C0:34:92
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 0194BD8586ACDA6E3E9CAFBEFD232D1DB431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 0177
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: FyAiGDzPkXPCcLo35xML67De/yGCtkW4RClri3bSks0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:ac:da:6e:3e:9c:af:be:fd:23:2d:1d:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=4c42de1e209efd881e6918376e4e2d19ffc03492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:ae:53:f3:c1:ff:db:53:64:60:e1:ab:df:
9f:1d:54:e2:66:5e:53:2d:e5:0a:9c:eb:23:0b:d4:
64:1d:4d:50:f4:67:7c:78:a0:0f:a3:96:c8:9b:f6:
f9:4b:2b:23:7b:1a:3f:f8:8b:a7:f4:ce:fe:56:b1:
d5:9f:2a:f7:60:6a:dc:17:50:f0:c1:5d:91:9f:2a:
49:bc:53:18:38:90:34:cb:51:b9:a3:64:b0:3b:e6:
58:16:4b:a4:ac:08:87:81:57:90:9c:6f:06:0f:f9:
bf:eb:c3:83:7d:b4:f7:3b:01:98:f1:ed:ff:b6:16:
27:11:3b:7e:6d:b9:6e:97:9e:1f:45:d3:9e:89:83:
b2:b2:09:bd:b4:48:3e:72:58:91:0f:60:24:66:02:
20:b1:b1:43:51:20:8e:cb:9e:bd:43:19:0b:51:8c:
ad:20:cc:b6:3e:8b:72:1c:e9:9d:48:fb:cb:a0:c4:
91:89:ac:60:89:30:4e:3d:87:e0:fc:60:d0:3b:83:
54:13:e7:b5:6b:08:8d:3f:09:c7:f6:32:bd:0d:d4:
05:1c:58:73:95:1f:61:75:b3:ac:51:5e:d3:5d:17:
b2:a7:b2:b3:9e:08:53:a8:63:7e:a9:6a:38:cd:36:
b4:b2:0d:9c:b4:ac:83:06:84:c4:c7:f5:82:83:4f:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:42:DE:1E:20:9E:FD:88:1E:69:18:37:6E:4E:2D:19:FF:C0:34:92
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3b:58:fc:56:b1:44:91:be:4d:1d:ed:60:80:00:22:ed:b0:
88:eb:94:b5:c0:2b:eb:4b:97:08:fc:40:ae:f8:c1:77:d7:c6:
be:77:c1:53:1a:71:af:8d:1d:71:14:c2:c5:4b:5b:d8:e3:c1:
b9:ff:de:06:81:52:75:de:ae:f2:53:79:c1:51:3e:78:15:f1:
b8:06:00:44:a4:40:ce:70:f8:39:d5:61:d7:6b:0d:d8:ea:81:
62:4a:46:a9:00:c1:27:6c:b4:c4:04:03:d9:23:2b:a6:ed:cf:
14:e0:0a:3b:0a:f6:e5:8f:4d:55:e6:df:62:b9:9b:8b:69:84:
70:7c:a8:3d:a9:04:63:07:eb:73:20:be:a6:71:6d:db:0b:b3:
5b:23:c8:fe:46:eb:e9:0d:31:4d:0b:ea:ba:5b:24:f8:61:9d:
fa:3f:b2:d1:a0:e0:8f:cf:ec:c1:bd:a4:33:87:8d:f3:e4:1a:
91:04:f2:88:a4:8a:90:3b:29:74:c4:fb:4a:72:65:5f:6e:e2:
83:c8:b4:b0:24:e7:20:2f:86:0d:1c:7a:ba:d1:f3:ff:db:46:
3c:c5:5e:8f:9e:5f:00:62:f6:8d:71:09:83:84:f1:cf:5a:ab:
93:dd:54:d2:f6:2c:2a:20:6d:cf:50:84:d2:69:8a:31:9e:2f:
c3:67:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:31 2025 by rpki-client