Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
File: xgFrbMmH1H-VES1qQ_OHsShaM28.mft (raw, json)
Hash identifier: YKbEAJizSDXO/J/ocMsh6++PrvvOKF7sc9fTE+GK7Nw=
Subject key identifier: 7E:B1:38:26:44:4E:34:1B:AC:76:ED:D1:4E:55:F4:0B:7F:43:6C:B7
Authority key identifier: C6:01:6B:6C:C9:87:D4:7F:95:11:2D:6A:43:F3:87:B1:28:5A:33:6F
Certificate issuer: /CN=c6016b6cc987d47f95112d6a43f387b1285a336f
Certificate serial: 0194BD4E8FF25BEE3EA944D8F383C626DFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgFrbMmH1H-VES1qQ_OHsShaM28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
Manifest number: 02E1
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: xgFrbMmH1H-VES1qQ_OHsShaM28.crl (hash: sQS/HQvWTYvJeLnTnLSh8EThh8l012r+0NmJAfwnG4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8f:f2:5b:ee:3e:a9:44:d8:f3:83:c6:26:df:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6016b6cc987d47f95112d6a43f387b1285a336f
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=7eb13826444e341bac76edd14e55f40b7f436cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:89:70:fc:e9:74:35:a0:bc:a5:74:b3:a8:
d5:aa:52:84:dc:1a:5e:e7:90:27:35:e3:bf:06:ea:
3e:a0:b4:2e:43:69:c4:59:c6:98:91:e7:b3:35:c7:
c9:ec:3e:90:16:b4:7d:56:83:92:34:c2:6e:91:97:
8c:14:99:e1:b1:36:a0:24:b9:ae:ad:69:77:d2:2e:
cb:6d:5b:82:0c:cb:2e:26:1d:8f:7b:93:c5:76:fd:
8d:9d:74:c0:e0:10:ef:4e:f2:e2:c4:6d:e2:e2:1b:
23:bb:45:c2:48:15:47:e0:ee:1e:e8:d8:55:82:ec:
2c:33:7c:74:89:48:10:b0:86:2e:f0:a0:c9:de:33:
0b:a0:b6:67:dc:dd:b5:cf:12:72:a2:17:18:da:91:
21:19:7a:db:0d:c3:ab:71:3e:78:13:11:cd:0f:dc:
8a:e1:f4:93:21:d2:8e:5a:37:3f:c5:2e:62:fc:01:
5d:e0:15:a8:1c:3b:12:93:8a:4e:7e:6a:ba:72:21:
a8:86:e9:8c:9a:b8:f2:46:14:7c:48:cc:83:2b:22:
9c:fb:94:1a:35:ab:24:07:eb:9b:5b:d8:c8:b3:5d:
43:35:87:b3:ab:c3:97:29:02:84:ce:a3:a3:80:ea:
fe:4b:05:fe:2c:7d:52:3d:08:a0:e9:ac:fb:0c:28:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B1:38:26:44:4E:34:1B:AC:76:ED:D1:4E:55:F4:0B:7F:43:6C:B7
X509v3 Authority Key Identifier:
keyid:C6:01:6B:6C:C9:87:D4:7F:95:11:2D:6A:43:F3:87:B1:28:5A:33:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgFrbMmH1H-VES1qQ_OHsShaM28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7c:4e:95:f7:61:1d:6e:5b:67:8d:63:0a:79:78:16:01:c9:
be:4d:98:92:72:87:03:93:dd:ea:d2:5e:85:a5:6f:94:01:15:
a2:bd:f0:41:94:21:d2:f1:5d:ef:6c:42:5b:1e:f8:37:5d:11:
d0:c3:da:e9:18:bc:75:8d:38:07:42:8f:c5:0c:72:55:b5:40:
f2:8d:87:5c:8b:64:de:d1:30:db:45:b8:9c:6d:19:e7:08:3e:
97:52:52:03:fa:87:3e:d8:44:78:0c:90:42:03:a6:86:97:5a:
17:d8:04:f4:27:aa:d3:0f:82:fe:4f:f8:d1:c6:79:ae:5e:9d:
20:90:c7:dc:50:e5:bf:f6:34:41:e5:31:3a:db:a2:fd:df:fb:
ba:05:3d:49:fe:d7:f0:36:89:f0:7a:4c:c9:c3:00:34:fd:8b:
5f:02:51:f5:19:9f:22:3f:a0:ed:4e:b9:7a:3c:89:f5:3f:29:
59:75:5d:5c:31:39:dc:20:4c:eb:95:f7:52:aa:c7:b4:ab:03:
1b:da:16:89:23:8a:78:18:4f:59:b7:98:ba:59:10:66:02:c1:
a1:27:4d:42:f2:00:62:cf:b2:8d:64:e4:9b:f0:64:85:17:1c:
05:b4:3b:3c:4a:3a:c3:a8:2f:8d:79:5e:29:63:bf:11:66:b6:
18:a6:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:24 2025 by rpki-client