Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
File: XtAC05cM6z3Wh7QwuTaibzeNaSc.mft (raw, json)
Hash identifier: DUtls4C/ZWihQFB5F+/V2+5y5DhVlEbty3s6B+KWhlg=
Subject key identifier: 79:09:D8:DE:2A:80:83:76:B9:77:DD:A6:9A:A6:85:16:7D:2B:C3:60
Authority key identifier: 5E:D0:02:D3:97:0C:EB:3D:D6:87:B4:30:B9:36:A2:6F:37:8D:69:27
Certificate issuer: /CN=5ed002d3970ceb3dd687b430b936a26f378d6927
Certificate serial: 0194BBCEBD53E4043DAF5D356614B0893DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
Manifest number: 06A6
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: XtAC05cM6z3Wh7QwuTaibzeNaSc.crl (hash: eIw0Kkwhs1Qv7N7NpDRup3QTOlAwdoz86BNQr5mL8TM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:53:e4:04:3d:af:5d:35:66:14:b0:89:3d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed002d3970ceb3dd687b430b936a26f378d6927
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=7909d8de2a808376b977dda69aa685167d2bc360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:e7:e4:db:00:3b:e7:ba:35:94:4d:63:fc:
3e:06:e4:91:b3:9c:dc:f3:1f:fc:2e:3a:17:83:ba:
20:5c:42:ae:e9:74:63:d3:67:a3:82:64:4e:53:5f:
85:ea:13:88:3c:d4:e5:7a:24:89:0b:7c:82:ac:3b:
f5:30:bd:d3:37:e9:67:e3:6b:27:55:b8:37:61:95:
77:30:b3:43:40:b4:f8:b6:03:24:4f:41:c3:91:d8:
f1:82:0d:3e:b2:67:8c:a9:f0:a1:7a:02:fb:a3:a3:
3a:24:84:ec:aa:b8:90:e2:2a:28:e0:63:1c:4d:33:
f2:16:f4:e3:20:80:d9:c7:db:ab:6a:3e:de:56:0f:
6b:f6:c0:c9:47:de:53:1f:fa:91:3d:fb:ae:36:cf:
05:3d:fc:e2:4d:1c:fc:d2:46:52:31:6f:c1:d7:0a:
1e:9f:52:fb:cf:d5:fc:80:dc:c7:fc:4d:51:7b:0c:
a4:90:f6:3d:31:00:c0:21:d6:39:83:96:d5:ff:f2:
41:db:a9:54:cc:b7:4d:c6:c7:a0:81:42:66:89:74:
f1:8b:ba:e5:a1:19:61:b8:b7:da:f9:72:83:78:b4:
14:e4:21:e7:23:b3:3a:6e:e1:4d:b6:85:7b:7e:00:
52:a2:99:c6:26:c2:f2:ae:bd:b9:2d:27:52:fd:a8:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:D8:DE:2A:80:83:76:B9:77:DD:A6:9A:A6:85:16:7D:2B:C3:60
X509v3 Authority Key Identifier:
keyid:5E:D0:02:D3:97:0C:EB:3D:D6:87:B4:30:B9:36:A2:6F:37:8D:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b8:8f:cf:80:fc:2e:b4:c5:b2:0f:bc:67:67:a3:e6:bd:46:
4f:bf:99:25:cb:06:b9:6b:78:32:74:02:b4:98:91:59:fb:7d:
cf:28:d0:42:22:67:4c:e8:dd:19:8a:c7:0f:09:5e:7a:a6:24:
c8:e2:78:14:07:70:fa:e4:17:3b:ad:e2:37:77:ac:c3:8e:a1:
d8:61:d8:05:ab:95:28:26:73:ca:90:99:21:bc:e7:56:29:1d:
0d:81:83:83:89:9c:59:d4:64:9a:fc:2e:ff:8e:20:8f:24:3e:
5f:a8:e4:d1:a3:d4:5d:c1:9f:35:37:eb:7f:a8:1f:5e:e3:1a:
58:ff:13:48:2d:1b:a4:25:94:58:a9:b0:42:07:62:6d:b6:db:
28:b1:b4:c0:53:ff:d9:f2:b0:41:c6:da:2d:41:20:d8:9a:98:
e4:b9:d3:aa:32:07:5b:d3:d7:e8:4a:ff:cc:59:03:80:67:a7:
f0:a3:06:b8:62:1d:23:7f:93:4e:c0:d7:96:9c:b9:36:68:98:
c6:87:3b:71:fc:f6:8e:77:6f:e3:f5:ce:63:0e:23:4e:27:0e:
19:e7:dc:03:3a:c8:19:95:60:f4:0d:14:fa:48:76:43:1f:4b:
9a:bc:6d:ec:9d:31:b4:14:99:3b:60:2d:3f:a3:bb:b6:36:35:
8c:bd:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:01 2025 by rpki-client