Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: MYECBGfNjMbQIbThFjlb0Jrkr1lt9GyN9xTN4BHEEio=
Subject key identifier: 9E:C1:A5:03:5B:38:C9:9A:F5:B1:45:BE:D9:7B:3F:B5:4B:25:71:59
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 0194BD17E1D8836FB901F84F883564187ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 131A
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: sd0qVoaxjN5/RWzPcMe6KvkuhVG8jWNccli2mtuF1+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e1:d8:83:6f:b9:01:f8:4f:88:35:64:18:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=9ec1a5035b38c99af5b145bed97b3fb54b257159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:68:74:93:63:bd:b2:45:a9:78:aa:22:65:
13:52:7a:10:5f:b7:93:0b:a0:0b:ee:00:2c:79:b8:
30:1e:6c:a7:71:26:00:7a:46:07:97:2a:c2:94:30:
c1:d5:e5:64:87:b5:29:2e:7e:dd:9c:2b:dd:d7:0b:
3c:1a:4d:be:e2:de:88:69:69:51:e2:29:97:f8:62:
f9:19:d5:e8:45:4a:04:5c:a5:83:2c:8c:a7:6c:ef:
76:cb:24:1f:10:37:6a:8a:c2:16:13:14:e8:cd:35:
43:17:f1:8b:1e:fb:9c:dd:ab:3e:75:2b:44:a6:3c:
07:3e:0c:64:0a:a4:35:bd:d6:1a:3a:e3:dc:1d:e1:
f7:cf:de:92:b2:cd:1f:c8:0a:c8:73:02:63:02:2d:
6e:a7:c6:c3:5b:85:6c:4c:6d:95:70:80:03:f2:86:
b0:bf:20:61:c6:ef:6f:7d:cc:c0:71:be:9f:9e:e9:
95:f1:d7:2d:6d:5b:85:63:d9:e3:bd:f9:bc:47:7c:
46:d0:66:f1:88:4b:71:14:18:47:0c:8c:39:56:3a:
c6:82:56:f1:af:24:15:6f:fb:7a:46:fd:6f:f3:10:
42:2f:ff:61:d9:f8:c7:0c:a1:ef:85:6f:00:f7:6b:
e1:4b:e0:17:aa:dc:77:24:c2:ca:a8:7b:e1:ac:b6:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:A5:03:5B:38:C9:9A:F5:B1:45:BE:D9:7B:3F:B5:4B:25:71:59
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:0f:05:9b:49:73:42:7d:be:44:9f:10:51:8f:92:37:db:
e8:f3:09:fc:66:48:bb:5c:4e:1e:62:58:74:4f:1f:a7:09:aa:
6b:75:8a:de:e4:5b:3a:02:2c:09:81:b2:76:99:d7:95:24:6f:
59:4d:79:9d:d1:bb:24:4a:0a:9f:95:7d:52:7b:a2:53:91:fe:
24:9c:c8:32:32:f4:1f:e3:63:5c:23:5f:bf:1e:38:cd:79:b7:
b1:bf:d9:2f:47:7d:ff:6b:ed:f5:37:77:ab:6e:3a:4c:3d:bf:
9d:6c:bc:db:8b:54:fa:79:2d:c0:8d:1d:e3:fb:5e:6a:9f:19:
80:28:39:37:6d:ab:e0:2d:85:1a:58:bb:9f:c2:32:27:84:a8:
3a:08:13:ac:1b:53:44:3a:0c:87:f1:1c:00:c7:f7:5c:44:6b:
58:0d:b6:7f:17:c3:9b:dc:3e:67:ef:73:35:e4:cf:6d:49:56:
23:21:52:ec:63:03:cb:1a:92:fd:6a:cd:cc:0f:39:67:9c:d1:
3a:fd:33:4d:05:14:61:da:42:a7:1f:51:bf:28:b6:ff:ae:6c:
75:46:93:b4:1e:4a:e8:be:ef:85:54:b2:44:16:e3:5b:b7:b5:
1e:02:60:46:86:31:0d:b4:ec:91:41:04:67:ce:6b:8b:6e:bc:
29:92:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:13 2025 by rpki-client