Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft
File: xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft (raw, json)
Hash identifier: 2xIsaLw/dlxsda1ZaTrbPUb2dQKThmLKSSI8sjv/ILk=
Subject key identifier: 7D:76:36:E0:84:30:2E:5A:79:48:FF:A0:79:A3:7D:AA:06:AE:53:20
Authority key identifier: C4:A5:33:03:AA:2E:DC:8C:64:49:78:02:11:6A:C9:F0:38:81:FD:89
Certificate issuer: /CN=c4a53303aa2edc8c64497802116ac9f03881fd89
Certificate serial: 0194BBCF02BEFB3B812D1743CE2B52338111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft
Manifest number: 0FE6
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.crl (hash: 1kxw3bbQSI0tjxmB9KqGTTiKeA3CUYVsVB+hv8GrAFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:02:be:fb:3b:81:2d:17:43:ce:2b:52:33:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a53303aa2edc8c64497802116ac9f03881fd89
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=7d7636e084302e5a7948ffa079a37daa06ae5320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:27:76:ac:22:2a:ee:1e:cd:de:2a:10:a5:
44:be:8a:3b:ab:99:aa:69:c4:be:b2:8e:4d:a3:f8:
6b:f4:04:ca:b8:8f:14:c4:38:0b:75:b0:5d:97:39:
49:5c:0d:99:0c:15:bf:29:12:b5:00:22:f4:5c:f4:
e3:33:07:6a:21:3c:8c:da:ab:c0:5d:bb:97:d9:2e:
a6:3c:ad:60:cf:38:ec:9c:91:78:16:49:f1:0f:1f:
34:2a:75:40:88:31:9c:ef:e8:97:85:26:7f:c6:29:
16:4f:b2:ea:ed:ce:9f:ab:6d:bf:36:52:d7:c1:5b:
d6:33:a5:53:68:c3:75:56:99:b0:30:38:c0:24:3b:
c8:3e:38:4f:0b:7d:19:31:8c:85:b8:1b:fb:9d:36:
33:18:4f:68:57:cd:91:1e:90:bb:78:f7:09:ce:60:
1e:24:e4:05:26:80:60:b1:84:64:07:f9:31:38:fd:
df:2e:9f:41:3f:88:3c:49:cc:a0:7a:5c:ed:b7:b9:
35:dd:9a:78:fd:19:55:a5:ec:ce:68:b1:be:cc:97:
ea:1d:f7:d0:70:1e:49:cd:57:65:9d:3c:95:34:7c:
46:a7:b0:8c:66:bb:7b:7c:32:d1:ef:7c:62:1c:b0:
bf:72:5b:1a:cf:69:61:e4:ec:d7:80:0f:44:ac:70:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:76:36:E0:84:30:2E:5A:79:48:FF:A0:79:A3:7D:AA:06:AE:53:20
X509v3 Authority Key Identifier:
keyid:C4:A5:33:03:AA:2E:DC:8C:64:49:78:02:11:6A:C9:F0:38:81:FD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:72:df:84:c7:94:ac:51:6f:01:42:c7:01:7a:69:86:e6:c9:
7a:6c:61:7f:bb:9c:bb:3f:e0:6f:4f:79:f4:3d:a6:2d:48:46:
87:2b:7f:22:d3:83:5d:c8:71:a5:6f:aa:a2:5d:93:e7:c6:0a:
50:55:04:db:1b:7a:07:79:6e:f6:70:a9:3a:fb:99:10:8e:e5:
1b:48:fb:df:ef:5d:27:19:1f:04:37:d7:e8:12:ee:ef:20:45:
34:10:37:83:61:37:c6:19:14:f6:29:e1:62:86:df:27:65:d2:
e6:9e:b1:97:88:cb:62:15:77:1f:54:32:e2:d6:ba:56:49:70:
0e:96:68:46:35:3c:46:3f:8c:9c:b5:8f:be:44:6b:4b:26:a5:
f1:4e:dd:2e:81:48:88:6b:27:cb:43:dd:15:31:54:d7:03:c8:
ae:98:d1:55:85:bb:f6:2c:ad:5a:69:88:fd:33:db:47:9a:c7:
3d:fc:0a:72:03:19:de:cc:d9:9e:59:24:3e:65:87:c1:69:2c:
47:53:dc:46:f7:7c:cb:38:c4:cb:7b:21:ca:c5:85:c2:eb:a1:
f2:08:fc:23:b5:8c:28:f4:93:62:ee:80:11:74:b4:a9:2a:f8:
12:62:a5:f6:11:5a:76:47:a8:4a:36:cb:67:71:fb:8f:7e:a5:
12:04:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:16 2025 by rpki-client