Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
File: X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft (raw, json)
Hash identifier: 9dFkmcTfQmg1LDFXWdFQBnNAtlyQkGMRXK8OxIH22xY=
Subject key identifier: A2:CC:D0:37:92:3A:B5:85:8F:7D:4A:8D:73:D5:32:E8:81:6F:F4:EC
Authority key identifier: 5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6
Certificate issuer: /CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6
Certificate serial: 0194BC05036CFADA3FF6C3A63731EBD86FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
Manifest number: 0201
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl (hash: KdvwioazbniQ2of01BoVLSvzRAxy/fS2Zme4DI7IU3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:03:6c:fa:da:3f:f6:c3:a6:37:31:eb:d8:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=a2ccd037923ab5858f7d4a8d73d532e8816ff4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:cd:c0:8a:68:1d:6a:10:1a:e0:e8:bf:ec:
fa:81:04:34:1e:47:21:ca:16:fc:6e:5a:bd:ca:fd:
0a:4f:2d:85:78:54:f2:1a:d3:32:1d:3b:99:78:9d:
72:78:7e:51:fb:07:4e:fa:74:28:4d:93:27:87:f4:
68:db:4d:42:2c:90:7f:f9:7d:d5:db:4a:a0:ea:f0:
a5:1e:bc:8f:81:04:04:17:5c:51:e9:93:8a:bf:fc:
8b:38:c9:48:d3:b6:e0:b1:b1:45:01:34:4a:0f:02:
16:d3:5b:b2:b8:5c:d0:a5:d0:82:66:2b:cf:da:06:
98:27:26:61:d6:9d:14:bb:6f:85:c2:cd:77:cd:d0:
68:3c:3e:83:f0:79:eb:82:3c:93:0d:ee:e5:d7:19:
e6:d0:71:6f:14:45:37:62:c9:f4:d0:99:75:64:cd:
f0:57:02:2d:f6:f6:e3:5d:97:47:38:d5:83:ac:8b:
81:d9:5d:a5:95:e3:54:01:6b:95:91:c6:fc:77:60:
84:ae:05:41:e1:56:e2:2d:f0:28:8d:db:e7:72:4c:
68:0d:62:77:d6:fc:70:eb:e7:ab:76:e2:bb:46:f7:
c3:df:40:33:75:ad:0e:86:ac:4c:b5:fa:83:c3:9b:
7d:c3:b2:28:d3:c7:65:23:03:14:c1:88:e0:1d:35:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:D0:37:92:3A:B5:85:8F:7D:4A:8D:73:D5:32:E8:81:6F:F4:EC
X509v3 Authority Key Identifier:
keyid:5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0f:68:ff:1d:08:94:07:8f:7a:9a:15:ae:b4:de:f6:c1:db:
4a:aa:06:53:79:cc:3b:3a:c9:b5:21:f1:57:31:aa:6a:d5:94:
de:3e:2f:3e:4b:d6:ed:4a:14:73:45:29:3e:e3:f3:d2:cd:f5:
56:18:38:ca:77:2a:23:0e:f5:00:69:6e:50:36:fa:8c:c7:d2:
3e:d9:51:9d:47:da:44:d6:e4:04:b3:31:bf:77:57:41:a1:7d:
55:a1:b2:b0:39:f4:26:41:32:39:79:7a:be:e5:5f:ec:c6:42:
9c:0b:f7:a9:d4:c9:06:4d:3e:da:5c:b7:80:bb:57:18:a7:03:
87:a3:42:63:35:7b:b8:1e:99:27:7b:d2:aa:79:a8:3a:3e:79:
fb:08:7f:b9:d4:d8:4b:bd:e1:0e:42:25:74:fd:5f:b0:17:39:
0a:19:cf:3b:de:04:aa:89:36:99:56:46:87:76:26:95:63:6d:
a0:f2:cb:0c:a2:10:09:5b:ab:2c:7d:0a:39:d4:bc:1e:f3:2e:
79:ad:d2:d3:ae:56:76:69:0c:b4:5d:aa:78:3c:4b:79:7f:f7:
a9:1e:ff:2c:21:0d:f2:cc:37:a0:b9:d7:3e:03:97:65:05:db:
d0:91:b1:2d:10:d8:18:f8:cc:ca:44:a5:96:0e:ab:5f:8f:85:
7a:a9:9e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:01 2025 by rpki-client