Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
File: XbdXv1dG8moHySCHAbDVS2m8M2Q.mft (raw, json)
Hash identifier: xjPpKjQ12ZgomUzcO9CQIJG/PEInMxk1MmPwlgjMIdc=
Subject key identifier: 90:4B:2A:D7:19:78:23:91:C7:FF:E6:86:D8:D3:55:94:E3:81:73:3A
Authority key identifier: 5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
Certificate issuer: /CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Certificate serial: 0194BC3BC23C413685DB88C236F06BCC1A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
Manifest number: 02F6
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: XbdXv1dG8moHySCHAbDVS2m8M2Q.crl (hash: 712phKqhYwLs3JPwuG3cVlaLvRrSd2l2F0RE8kJQ12c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:3c:41:36:85:db:88:c2:36:f0:6b:cc:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=904b2ad719782391c7ffe686d8d35594e381733a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:6e:7a:bd:b1:be:9a:74:6a:06:aa:f5:db:
dd:0a:39:fa:51:5f:4e:e4:69:c3:a8:6a:ca:7b:23:
49:8b:97:a5:cf:6f:5c:b4:c9:3f:04:a1:64:ff:1b:
28:ff:d9:78:bc:c6:80:b8:a9:c1:6b:ea:d9:ac:0f:
31:11:87:cb:e1:b0:a3:54:77:9b:36:0f:72:a8:fa:
9c:71:7c:b5:a1:88:6d:3f:db:70:1d:c6:5a:a9:0e:
32:8b:46:11:26:df:60:de:b9:00:05:5c:95:85:cb:
8f:54:0f:32:62:62:6f:01:bb:61:d6:4a:87:d4:e6:
98:f3:a6:23:8f:f1:ba:8d:9e:02:86:f5:22:1d:24:
09:64:6c:a3:36:39:68:fc:1d:63:d4:53:ad:22:1b:
13:3b:2d:35:46:c9:aa:5d:17:48:d5:2c:8d:3c:f2:
b0:14:a4:43:4f:00:8d:c3:7d:be:2d:fc:56:c5:91:
f6:72:0f:ca:cc:b0:f9:f8:d9:e1:2c:ce:68:c3:5c:
64:58:72:6f:62:e5:e4:ac:d9:41:c8:91:a8:49:00:
b5:69:71:ae:e3:e9:cb:41:5b:1f:3a:77:77:11:b5:
46:30:c4:2a:40:f1:1f:2b:e6:79:60:be:af:67:79:
89:3c:94:00:13:22:99:62:5f:e3:f9:5a:68:ef:62:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:2A:D7:19:78:23:91:C7:FF:E6:86:D8:D3:55:94:E3:81:73:3A
X509v3 Authority Key Identifier:
keyid:5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f5:d7:3d:6c:1f:c2:c0:86:23:14:39:c4:9c:ad:17:d4:5f:
36:ab:e6:ea:5b:e3:07:94:c5:94:cc:c5:e2:63:b8:04:db:51:
08:69:0e:f8:27:56:da:1c:38:fc:a0:6c:07:30:e5:32:5b:fb:
a5:04:48:64:d0:37:f6:2f:02:25:00:77:2d:93:45:0a:cf:a9:
23:ce:db:a7:ef:f5:e9:1e:b4:f4:14:91:4d:e0:d5:17:74:11:
3b:7f:9c:4d:ca:d0:7d:ef:a5:7b:76:a0:8e:42:9a:0d:96:57:
75:a0:55:2d:bd:e2:1f:d8:9f:4e:f4:15:70:83:d4:f7:bf:b2:
72:9a:02:1d:e9:a8:d6:48:a4:ec:81:e0:e1:e0:d4:17:29:fe:
21:0d:5e:1b:45:58:16:ba:73:bf:3e:cc:67:0d:53:d0:f4:04:
4b:90:b2:5a:35:cd:77:9b:f5:82:1b:68:02:20:0b:5c:95:c5:
df:82:83:45:6c:37:66:6f:ff:5b:cd:f8:bc:c4:d7:8d:24:fd:
0d:39:71:ed:a2:af:04:e6:e3:89:9c:9c:2f:fe:d5:cd:8b:2b:
56:00:b9:a4:bf:71:0b:86:31:e5:29:95:1c:d8:1a:2a:ea:c8:
89:93:6e:49:6d:8c:c2:ae:a4:94:b2:7f:76:09:e6:28:70:0b:
45:32:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:18:06 2025 by rpki-client