Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
File: xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft (raw, json)
Hash identifier: d0Gdk2PH9bhjAK1oV7txZnT/m9ZB75oCMJ4IkFUdO9I=
Subject key identifier: 3D:F2:51:9B:C6:BA:42:90:02:89:42:AD:6B:67:BD:A3:92:65:0D:52
Authority key identifier: C5:99:38:89:B7:34:01:8D:B7:50:94:5B:FB:45:67:FD:AD:86:C4:98
Certificate issuer: /CN=c5993889b734018db750945bfb4567fdad86c498
Certificate serial: 0194BBCDAEF040986E3965A7F4926BCCFF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
Manifest number: 0FE6
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl (hash: R91gjMXQVJMewCGrr267VeqJsaMWNA5suWtQ7PdQVuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ae:f0:40:98:6e:39:65:a7:f4:92:6b:cc:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5993889b734018db750945bfb4567fdad86c498
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=3df2519bc6ba4290028942ad6b67bda392650d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:1d:01:26:8d:59:ef:d4:4b:9b:4d:c0:77:
65:e1:4a:28:3a:f9:c4:a5:51:c9:35:96:75:7a:24:
0b:67:5f:93:24:ac:ec:53:91:e1:27:ff:99:a7:df:
60:35:f2:55:fb:07:77:30:86:a5:d8:e3:ae:90:a1:
65:a9:fc:cc:4d:9d:43:af:d0:81:8e:6c:fc:d1:65:
02:f1:9e:b7:a7:6c:d1:fe:cf:52:be:b4:3c:01:1e:
d4:92:93:14:60:4a:2a:22:54:42:7b:3d:73:cc:6d:
20:5b:0a:f6:6b:c9:e8:0f:19:a3:15:65:f9:c1:ca:
94:21:4c:9a:58:58:6a:0f:76:b7:5a:a4:cc:0f:9d:
e0:09:4c:6b:29:db:9c:97:16:f1:ec:4f:6a:e0:24:
ca:64:05:6b:89:1a:5c:f3:2e:a4:1d:fd:f3:32:d0:
8e:fa:b6:5b:ce:b9:df:aa:b0:54:fa:44:d1:52:da:
77:03:dc:82:01:54:d3:70:ee:7f:94:83:d3:61:09:
0a:ad:69:60:e7:fe:3b:fe:5e:ba:51:07:81:3b:77:
66:5c:77:67:8f:21:c1:19:b1:36:12:b5:e0:14:fb:
b7:27:d4:fe:16:eb:ea:97:a0:ea:a7:62:f6:33:04:
ab:35:54:6d:dc:dc:f8:be:26:8f:22:63:fb:58:a3:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:51:9B:C6:BA:42:90:02:89:42:AD:6B:67:BD:A3:92:65:0D:52
X509v3 Authority Key Identifier:
keyid:C5:99:38:89:B7:34:01:8D:B7:50:94:5B:FB:45:67:FD:AD:86:C4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:29:42:74:f6:7b:48:e7:f2:a8:7e:37:2a:1a:a6:29:25:59:
c3:08:58:8e:dd:1a:83:9c:0f:1d:bb:95:43:26:9c:0f:f5:d5:
ad:c2:cb:e7:b3:ad:74:b4:db:b6:02:d9:ae:61:fd:7d:4d:38:
e8:a0:45:79:ed:51:fa:c3:3a:a1:6e:49:69:94:73:28:29:89:
48:43:49:fc:8a:5b:7c:5a:d5:10:71:ac:76:b2:2b:ef:cd:28:
26:00:d9:cd:55:1e:4a:fb:a6:5f:c7:4f:b1:ee:c2:55:0e:18:
18:d4:90:5d:03:97:6b:a0:80:5c:cf:b0:81:80:5c:9e:d3:12:
2c:07:70:6e:1e:b9:df:ee:0d:8e:c1:d9:56:d9:4e:0f:70:0d:
26:1f:bb:d9:3e:7b:70:23:aa:42:b1:60:58:af:16:b9:75:00:
04:c2:ed:b9:50:a0:22:f2:60:b5:65:72:c2:ad:11:0e:c4:16:
30:f5:85:30:c2:54:73:76:93:cc:4e:31:55:4b:68:58:c6:c0:
30:de:22:13:6d:af:d7:65:f6:24:fb:8e:a3:1c:a5:88:52:e6:
2d:60:7d:6f:75:b5:b2:b3:1b:26:c3:6f:3b:9a:ca:88:fb:90:
04:af:0c:8b:e6:38:bc:47:e2:2d:41:87:52:ea:b4:b1:61:d6:
06:30:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:40 2025 by rpki-client