Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
File: xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft (raw, json)
Hash identifier: yrhqoI9D9fU8Zp5pNmzUHzqtaxQGiS8EniKgN4wq9z0=
Subject key identifier: 17:1E:C9:A1:3F:C8:63:80:5B:8F:56:E4:57:18:D8:02:1B:07:20:47
Authority key identifier: C4:13:D7:A3:76:5F:F9:A2:2B:BC:22:99:E0:49:69:1E:29:40:CB:82
Certificate issuer: /CN=c413d7a3765ff9a22bbc2299e049691e2940cb82
Certificate serial: 0194BC3C0161B6BAD25653BA13D8C900C301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
Manifest number: 119B
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: xBPXo3Zf-aIrvCKZ4ElpHilAy4I.crl (hash: NBaLIdTZbRlJb8h7+bIrciWnP3ZGFTLQ+bgtOkdRVSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:01:61:b6:ba:d2:56:53:ba:13:d8:c9:00:c3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c413d7a3765ff9a22bbc2299e049691e2940cb82
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=171ec9a13fc863805b8f56e45718d8021b072047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:07:fe:16:21:b5:b8:68:a3:7c:29:c8:e8:
fc:9d:dc:a8:0e:76:d6:68:b8:38:78:04:fd:f6:23:
d2:3f:e3:13:76:b2:05:3a:bf:d1:3b:23:68:cc:90:
c8:72:26:7e:5d:a9:e8:bf:1a:bd:1a:8c:51:9e:32:
52:08:da:a4:c9:a0:cf:5b:19:81:b6:37:ba:84:08:
08:67:74:95:ee:e4:fa:3b:f7:85:74:dc:de:2d:c5:
03:d3:22:ee:93:7d:2e:e5:e4:b8:8e:0a:12:70:82:
66:b6:d9:b6:58:2b:89:fc:f0:8c:8c:fa:43:28:38:
9d:1c:12:0d:7f:ce:16:c6:6e:ed:9b:b0:5f:ad:b4:
a6:a2:92:02:0c:06:88:ef:2c:8b:cc:de:a8:62:63:
d9:ac:2d:77:d1:dc:da:41:8f:29:5e:89:0a:51:3f:
e2:78:97:ee:b5:91:71:9c:f4:a8:2f:a6:9c:1f:f4:
e9:cb:f2:02:6f:9a:90:78:7d:86:11:12:fe:a8:0e:
e2:82:18:77:66:5e:a5:61:72:c9:f5:d7:55:93:24:
37:40:aa:a4:9d:fc:90:20:cc:20:d7:46:dc:dd:30:
00:88:d0:1c:09:f0:dd:9b:bb:fb:3d:15:52:02:20:
50:9f:18:7b:95:ac:14:2f:94:43:a9:db:7d:49:01:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1E:C9:A1:3F:C8:63:80:5B:8F:56:E4:57:18:D8:02:1B:07:20:47
X509v3 Authority Key Identifier:
keyid:C4:13:D7:A3:76:5F:F9:A2:2B:BC:22:99:E0:49:69:1E:29:40:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:50:8b:f9:20:5d:4a:1b:d2:bf:92:52:fa:04:d8:3f:ed:76:
ae:56:cd:d2:e5:e1:2d:5c:60:b8:89:03:ca:90:6f:f8:c9:c7:
41:4e:94:89:cb:c9:99:a4:dd:ba:c8:63:a5:63:16:dc:0d:42:
fa:c6:f9:a8:be:2d:87:68:84:15:87:d7:e9:07:9e:10:95:01:
d5:fc:cf:8c:06:94:6a:25:b4:64:0a:6c:12:1d:e5:56:53:55:
dd:35:6d:fd:14:ad:a2:e1:a9:7a:84:2d:f6:24:b1:cc:6b:49:
47:1b:32:a2:cf:21:75:44:ef:61:3a:8c:77:e9:ed:35:c8:26:
69:42:5e:b4:58:cd:2f:ff:a7:4e:a7:97:d6:6c:30:df:2f:d7:
29:d6:03:b6:34:91:8c:bb:76:a6:e8:18:86:dd:eb:07:3d:96:
85:05:37:63:f7:72:5e:1f:b4:91:4d:9d:97:35:e2:99:f5:40:
8c:09:f5:35:9a:40:f1:77:ec:b6:9b:05:97:71:db:a3:11:ea:
c0:2e:92:b1:0a:17:34:1d:97:1e:51:53:1a:7d:cf:79:91:7d:
4b:06:89:17:69:05:b6:51:1c:c3:3d:e3:03:2e:95:b6:9b:01:
6f:0a:93:c4:88:bb:c5:6b:ba:2a:75:f2:62:40:1c:3b:e7:0e:
49:15:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:17 2025 by rpki-client