Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
File: XTbQLD5qwUds6mipqNgzJw0svz4.mft (raw, json)
Hash identifier: oVYqQI6Ff4esqVbEORFZbPwxXEwSSvbR57ZGNQxMFHI=
Subject key identifier: 2D:E2:A9:1B:BE:B9:70:A9:D5:19:6F:A7:41:F1:74:C7:B0:6C:DC:76
Authority key identifier: 5D:36:D0:2C:3E:6A:C1:47:6C:EA:68:A9:A8:D8:33:27:0D:2C:BF:3E
Certificate issuer: /CN=5d36d02c3e6ac1476cea68a9a8d833270d2cbf3e
Certificate serial: 0194BD18015880F4B4E6F9489D4A3F25DB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTbQLD5qwUds6mipqNgzJw0svz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
Manifest number: 0ED2
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: XTbQLD5qwUds6mipqNgzJw0svz4.crl (hash: 5NmaX2UXDnSvbWH/nDvFLJKN0Wyjn5cSMKI1Bnf8/JU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:01:58:80:f4:b4:e6:f9:48:9d:4a:3f:25:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d36d02c3e6ac1476cea68a9a8d833270d2cbf3e
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=2de2a91bbeb970a9d5196fa741f174c7b06cdc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:44:fe:ac:c3:6e:44:1e:66:8e:b2:5b:dd:
f6:13:3a:df:2c:f0:0d:73:40:79:da:04:4c:8f:02:
cc:58:51:b4:de:28:5d:f4:fd:94:ed:7f:7d:8c:ad:
2b:13:5b:ad:52:ac:9e:3e:e1:26:f6:4e:b7:19:58:
b0:29:a0:ad:84:3c:df:7f:80:79:ee:4d:f5:f8:4b:
42:74:e6:fb:a6:41:e7:29:f1:3e:54:11:28:6f:0e:
75:d6:39:90:fa:9b:a5:57:42:af:b4:cf:8e:57:51:
02:06:45:4d:1d:05:59:90:4c:81:46:9c:99:af:e4:
59:57:74:fe:d9:e8:47:69:9a:85:74:52:52:51:b0:
c4:b4:11:f9:9a:72:ec:f9:df:47:c3:0b:12:fc:21:
60:44:a5:12:91:35:3a:19:30:a6:09:0e:13:42:3c:
36:0b:4c:02:bd:bf:f8:a9:31:f3:d8:e2:dc:09:bb:
05:c1:99:09:4b:c3:43:d4:52:f5:7d:db:14:2e:02:
aa:88:07:a3:b3:fd:f9:be:bd:02:0d:98:54:56:9e:
36:4b:6e:ff:d5:ab:4d:f1:6a:f8:a9:1f:51:fa:ae:
65:7d:d6:64:32:5d:b3:94:8c:f2:54:3d:8b:79:ab:
d3:7b:e2:33:e6:43:56:fc:8a:33:e5:13:c6:9f:7a:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E2:A9:1B:BE:B9:70:A9:D5:19:6F:A7:41:F1:74:C7:B0:6C:DC:76
X509v3 Authority Key Identifier:
keyid:5D:36:D0:2C:3E:6A:C1:47:6C:EA:68:A9:A8:D8:33:27:0D:2C:BF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTbQLD5qwUds6mipqNgzJw0svz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:5a:bf:3b:5a:a0:30:cd:1d:38:42:01:b3:e0:7f:f5:d0:
0c:80:d7:fd:4e:73:a1:53:0a:0e:04:ba:65:a0:49:00:9b:2e:
38:5c:32:c8:64:0e:30:52:a1:ac:05:32:7d:05:70:bb:28:66:
27:90:8a:91:5a:5f:78:74:08:7a:a4:d9:d8:b2:3b:02:72:a9:
b0:21:c9:ce:25:e8:36:be:86:c3:96:16:de:4a:0c:3a:84:19:
25:76:bd:10:30:85:7a:4a:d0:93:3d:80:52:70:fd:a8:56:38:
ca:71:48:64:eb:2d:94:4d:09:ff:62:96:d6:4d:3b:69:cb:ae:
af:a7:74:2a:96:68:55:57:52:97:71:68:94:f2:f7:23:d8:92:
22:e6:df:83:ca:5f:2b:26:0c:3f:cc:e3:f8:44:ce:c0:d2:e0:
c8:b9:6f:b5:3a:88:ef:54:05:34:5c:00:57:70:51:98:46:04:
ca:44:84:8d:02:6f:4d:f0:65:d5:f2:cb:83:0f:e0:c7:30:80:
11:48:87:09:88:97:b3:aa:8c:0d:06:9c:c8:65:1a:da:5f:90:
05:e6:53:e0:98:c3:2f:02:56:ea:2b:99:69:f7:f8:35:7e:3c:
59:3d:37:51:89:5a:c2:12:f9:81:ff:8a:21:bc:59:d7:2e:98:
66:12:ee:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:18 2025 by rpki-client