Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft
File: xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft (raw, json)
Hash identifier: nfRH4IvWeMQ0QYeHPYePQvqvPZIwm2HFYH5BEqoHdj8=
Subject key identifier: 92:09:DC:B0:A1:BE:ED:72:03:C7:2C:E9:F4:2C:B9:6D:D3:AB:7A:D4
Authority key identifier: C4:58:B9:51:38:E9:01:C8:24:D2:FF:6F:DA:B5:A5:C2:F8:31:60:C3
Certificate issuer: /CN=c458b95138e901c824d2ff6fdab5a5c2f83160c3
Certificate serial: 0194BC3C17B1898E0258D87BD8A7F2A34EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFi5UTjpAcgk0v9v2rWlwvgxYMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft
Manifest number: 034F
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: xFi5UTjpAcgk0v9v2rWlwvgxYMM.crl (hash: DQgItpsy6vRS6zxH11QPOnGsLbQKznCa/hLjhADJSpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:b1:89:8e:02:58:d8:7b:d8:a7:f2:a3:4e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c458b95138e901c824d2ff6fdab5a5c2f83160c3
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=9209dcb0a1beed7203c72ce9f42cb96dd3ab7ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:21:f9:fb:69:8d:5f:c2:e0:7b:4e:38:a2:
3c:cf:39:c5:a9:25:d8:fd:a0:87:88:3c:a6:0c:0c:
42:ab:3e:e6:c9:40:08:dc:76:e5:3a:f2:e4:5b:bf:
d4:55:5a:b5:2a:f5:ab:44:40:9b:c9:cd:fb:08:e7:
1a:8d:fe:ec:b2:0d:a4:2e:1b:c8:09:c3:b8:8d:28:
6a:d1:61:27:d9:c8:dc:b2:d0:5f:48:58:13:bb:43:
d8:5b:c7:32:8a:bd:93:4a:0a:ba:2c:f6:0c:79:61:
ac:2a:5d:c7:40:54:27:2e:2c:37:02:51:c6:cf:45:
20:be:be:30:13:d1:ec:cb:44:bc:db:1e:1c:53:12:
2b:7f:8d:06:82:a0:92:d2:10:ed:88:07:39:57:bc:
7a:e9:dc:e4:f7:cd:cd:63:df:d9:1d:af:cb:3e:e1:
b9:ef:5b:0a:5c:fd:c3:85:cb:5f:fa:15:30:c6:f6:
6b:13:34:5a:de:8e:8b:e6:52:8e:8e:56:b3:f6:4a:
ef:8a:50:5e:a2:db:cc:13:0f:55:5f:3a:6d:71:ba:
14:54:60:8c:42:76:41:eb:55:38:fd:ba:82:c6:23:
8b:aa:c6:33:77:36:f8:8b:bf:2d:a3:c6:ac:26:42:
7d:49:57:18:5e:f5:f2:b0:8a:1f:d0:ea:6b:42:d5:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:09:DC:B0:A1:BE:ED:72:03:C7:2C:E9:F4:2C:B9:6D:D3:AB:7A:D4
X509v3 Authority Key Identifier:
keyid:C4:58:B9:51:38:E9:01:C8:24:D2:FF:6F:DA:B5:A5:C2:F8:31:60:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFi5UTjpAcgk0v9v2rWlwvgxYMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d2:ca:34:13:92:f1:fb:99:de:8e:3c:59:b7:92:37:56:6f:
be:95:1d:dc:a0:0a:20:c7:ee:23:fc:4e:43:a2:43:b1:f1:1d:
d5:2d:25:d9:b1:39:d8:55:13:72:20:3b:c0:f1:75:62:0a:1b:
f9:69:9e:bb:b8:c6:09:15:25:16:37:f9:59:ea:aa:6a:9e:e5:
94:ca:f6:e8:96:8c:c7:cd:d2:7f:1c:6f:78:06:68:74:79:85:
67:e3:48:f7:f3:e8:6d:48:32:96:2d:87:1c:0f:8b:2d:20:b9:
30:44:62:83:93:49:02:8e:e3:0c:36:12:e0:54:ac:25:63:eb:
a6:43:10:74:f4:6d:f9:15:ed:1f:18:e0:c9:96:c8:d4:2d:0d:
1b:6a:5a:fc:6f:7c:04:26:14:96:c9:db:9a:81:89:ae:4b:8c:
b6:82:fe:c1:36:00:67:e3:a4:96:92:74:2d:b4:7f:46:5b:aa:
18:9f:64:e2:e6:19:aa:8d:3e:24:53:f3:7e:ac:6e:9b:b4:e7:
52:bf:25:77:bf:38:61:ae:21:44:ca:73:c0:94:b1:c3:1d:24:
ad:fb:bd:cb:df:ad:7e:ac:aa:55:09:80:90:dd:88:21:f7:21:
80:b7:34:18:2e:e5:4a:8e:02:b4:68:91:55:cc:c8:fa:0b:4a:
a4:00:41:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:34 2025 by rpki-client