Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: WA4oVwR6y/wRk1N2IBdknu1Lu5b8DmRQtRTZTPfLd/8=
Subject key identifier: B6:15:31:8A:8E:A4:A8:D1:5A:0F:CC:1A:03:C7:D8:EC:91:68:F1:DB
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 0194BC3BDD96F8220EDEA8A77262CB8B24F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 0DF8
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: nIexo6d36k5jwK0Vw77wE6FVOjCEhi0UPbbxyy/El8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:96:f8:22:0e:de:a8:a7:72:62:cb:8b:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=b615318a8ea4a8d15a0fcc1a03c7d8ec9168f1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:ea:48:80:6c:d2:c7:f2:26:61:a5:ac:f0:
8e:82:2b:2e:9a:c0:62:de:fa:7c:8a:30:f6:65:14:
34:d5:d5:d2:0e:8f:9e:4a:1c:6b:05:07:87:17:3c:
3d:cd:3e:ad:61:ec:49:8e:ab:2b:d8:33:4d:5f:a4:
03:f5:e7:da:a5:b9:bb:fb:2e:ba:a9:b7:f0:36:1d:
31:53:86:38:fb:1f:71:65:99:b5:f7:da:2a:6a:bf:
75:ee:e5:a0:ff:e2:88:c4:63:68:6e:d4:2a:b2:84:
54:5f:59:31:a4:10:f0:c0:a8:69:9d:80:01:dd:c0:
18:5c:19:2d:01:f0:41:36:e3:dd:80:b8:3e:fb:b2:
66:db:46:95:97:34:f8:fd:63:35:92:ef:73:7b:31:
79:a1:98:ac:e6:1a:63:e1:1d:04:7f:63:a1:48:05:
67:ac:42:33:fa:4d:be:aa:54:36:4a:21:96:f0:ca:
b8:a8:2f:6d:48:9f:29:b4:b7:17:c9:e8:33:1c:b1:
c2:45:8d:84:f0:c7:5d:fe:1b:c2:aa:f3:78:e7:39:
6e:71:e8:57:9d:98:4d:6e:6a:fd:bd:37:cc:42:45:
4b:99:71:ca:48:09:0f:87:fc:48:f2:83:0b:16:01:
a6:6b:c0:8f:99:a8:4b:31:58:f8:67:f7:6d:17:b8:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:15:31:8A:8E:A4:A8:D1:5A:0F:CC:1A:03:C7:D8:EC:91:68:F1:DB
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3e:22:d0:18:51:1b:23:98:57:e8:71:5a:4c:76:be:35:5d:
69:4b:54:93:b4:8e:bb:17:17:94:21:b1:19:3f:76:bc:26:9c:
61:36:e8:57:c3:f8:a4:40:eb:c0:33:74:63:81:bc:ec:e7:e4:
97:37:4d:8b:bc:89:84:0d:aa:54:3a:cd:5a:79:3c:a7:ae:ad:
14:cf:7d:ab:bd:e6:ff:3b:b4:4e:18:56:dc:1d:5a:4e:c7:e4:
9b:d4:97:b4:a1:f3:51:9e:8d:34:7d:04:15:4d:d4:bb:b4:f3:
1c:bd:04:e1:8f:54:c3:28:b5:7d:fe:3f:29:6a:b3:b5:74:46:
dd:24:df:87:76:6e:35:9a:d5:0c:36:b5:30:ca:8c:92:30:ca:
a7:ff:0d:ba:2e:58:a2:4d:7b:b5:0e:40:99:18:b9:d7:f4:1f:
05:ee:21:43:a8:9a:d0:28:02:f2:5f:0b:fa:8f:4e:12:c2:87:
9c:1b:9f:60:63:a6:bd:53:86:e2:19:40:f1:40:fd:c8:db:b3:
81:6a:e7:15:66:45:9e:0c:e2:fe:c6:45:ac:55:22:8a:3c:d3:
64:95:15:13:bb:3a:3d:87:ad:b0:78:ca:da:ee:62:5a:7f:04:
20:7b:0c:21:ac:52:9a:d8:85:af:ee:db:7f:09:89:d2:e3:8d:
d9:bc:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:28 2025 by rpki-client