Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: qmTn/1DmnHwY/ZlmDy7gdWouC8hj2Hc9EWV6Ovevp9s=
Subject key identifier: 58:2E:34:B7:15:4C:3B:B7:68:4E:D5:72:58:02:B9:AB:38:E5:DE:9A
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 0194BC3BD6A0AC19D20E05F79BF84142B836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0A80
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: P9EUi+8gmxKwHaOoRzeLyEf8zNxy2e2zNoqQFl566OA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d6:a0:ac:19:d2:0e:05:f7:9b:f8:41:42:b8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=582e34b7154c3bb7684ed5725802b9ab38e5de9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:c4:8c:a5:23:4f:bc:0a:48:0a:04:64:04:
c8:8e:73:89:ce:a4:b0:61:67:44:45:60:72:c3:2d:
66:e7:a8:e0:d5:cc:99:42:20:8c:33:d8:fb:84:27:
54:c3:52:45:20:66:e4:5d:23:41:b8:3d:80:4c:c3:
b8:ad:b7:7f:2d:79:49:b9:ec:22:2f:9a:85:e4:f2:
5e:d9:ef:82:4f:ea:00:50:14:f1:8b:65:f3:8a:f0:
f7:7f:b4:8a:15:81:1f:7c:b8:0f:88:b6:01:0b:42:
80:4a:65:d5:1c:0b:2f:6d:7c:f4:50:41:38:15:c6:
80:d4:e5:49:a9:e1:ee:b9:65:fd:07:26:c3:63:e1:
14:c9:72:a7:07:26:bb:c1:0f:95:89:5d:6f:4e:f2:
41:9c:ec:2c:4e:9e:b0:0f:76:fa:aa:36:21:07:46:
a9:97:e1:0c:43:eb:91:f3:8d:e4:fb:31:8e:35:e0:
8b:af:3c:aa:7d:e1:d5:27:16:b5:e7:1f:73:1d:8a:
ac:c7:59:7e:f3:76:ce:3a:fb:70:e8:4c:8b:83:60:
12:93:28:7c:d7:7b:74:63:83:5a:4b:74:22:f5:8d:
ad:21:07:58:c0:14:2f:9e:bf:71:8f:6e:47:0a:04:
e6:3c:1a:32:a7:8f:ae:72:ed:78:7a:cc:8d:68:42:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:34:B7:15:4C:3B:B7:68:4E:D5:72:58:02:B9:AB:38:E5:DE:9A
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:64:87:ad:ec:ef:0b:24:54:85:21:69:ad:82:77:b5:f2:
0c:58:eb:52:57:5d:20:18:63:ce:4a:b6:69:c4:fc:47:35:23:
69:75:3a:9b:6b:ff:ea:2c:c7:a0:1d:1f:b6:00:7a:d6:04:2f:
68:d7:5f:f8:8c:c0:f1:0c:1c:db:ea:03:c4:c4:e9:5c:6b:b9:
d4:3a:50:31:29:bc:b1:cb:9c:5f:9c:4d:81:e4:3e:9b:8f:c7:
df:d0:5c:71:c9:c9:b8:60:9e:4c:83:d2:39:65:6e:a5:31:8e:
e7:bc:e6:78:2a:21:bc:40:9b:3e:88:61:0b:86:a1:c0:56:2f:
f2:b8:0c:15:3f:7e:d2:81:bc:87:6c:27:bd:07:1e:09:15:12:
89:58:f2:6f:f9:18:03:e0:0f:d1:b4:5e:9e:76:53:b0:f2:93:
d1:b0:a2:cb:54:01:6c:ce:0a:48:28:20:a4:2d:c1:10:cf:dd:
b0:d5:69:cc:da:7e:b7:6b:04:11:9b:d7:f7:15:c8:dc:f4:29:
4d:23:99:e9:2a:22:6f:f0:34:d6:25:da:1e:6a:94:5d:be:b1:
61:aa:eb:63:b8:db:54:ec:af:8e:b4:9b:06:fe:a5:a0:95:5e:
ee:fe:59:d1:0a:84:ab:6c:15:cd:ee:6b:8b:6c:9c:f5:33:89:
d6:ed:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:09:10 2025 by rpki-client