Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5430d6-edc0-4428-b24a-300f5cabee11/1/XrtlNn2CQrAVmiU5y1oCM1Qu-WM.mft
File: XrtlNn2CQrAVmiU5y1oCM1Qu-WM.mft (raw, json)
Hash identifier: oEjtAxizLlOtbFkXgJqLR9qNa+3IV/ll5y3cv4T9elc=
Subject key identifier: A9:A9:02:F7:BF:CC:16:D8:A4:F9:04:F5:D6:30:6B:9A:00:A9:B2:BF
Authority key identifier: 5E:BB:65:36:7D:82:42:B0:15:9A:25:39:CB:5A:02:33:54:2E:F9:63
Certificate issuer: /CN=5ebb65367d8242b0159a2539cb5a0233542ef963
Certificate serial: 0194BC72F040D3CF65975D51293D83FB0C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrtlNn2CQrAVmiU5y1oCM1Qu-WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5430d6-edc0-4428-b24a-300f5cabee11/1/XrtlNn2CQrAVmiU5y1oCM1Qu-WM.mft
Manifest number: 04FF
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: XrtlNn2CQrAVmiU5y1oCM1Qu-WM.crl (hash: LnsVeO5jPgqeKqPV6BENAsvhk9NpHPG09RbD1PYORas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f0:40:d3:cf:65:97:5d:51:29:3d:83:fb:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebb65367d8242b0159a2539cb5a0233542ef963
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=a9a902f7bfcc16d8a4f904f5d6306b9a00a9b2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:fe:35:e5:84:2f:73:6d:d8:74:51:4b:be:
78:b8:27:e8:cb:4a:62:45:a7:ad:7d:0a:6c:22:d1:
6e:1f:ea:a4:c4:89:ba:70:39:01:41:a8:af:76:65:
5d:7d:6c:d1:a8:e6:24:4e:7c:a3:ec:63:24:11:e9:
3f:ea:61:1f:c0:77:ea:bd:cd:b2:25:99:ac:cc:78:
61:f2:e2:54:36:c3:b1:da:3c:63:3c:3e:b8:3b:a1:
ac:9a:7d:a3:44:2b:d2:cd:8d:82:f4:99:da:1f:01:
8c:26:e9:c1:5a:65:4b:08:fb:55:9b:00:5e:a9:5b:
ec:19:ba:9a:6f:c3:cf:4f:04:9a:95:3c:60:7f:68:
f7:3a:6c:47:21:57:29:dc:c2:14:75:fd:77:ff:ab:
d3:26:81:f6:37:82:f1:6b:78:54:93:19:ff:54:36:
98:72:d6:66:d7:d7:df:6f:a9:4c:ed:bd:c3:f8:39:
39:fe:07:b9:97:ba:b3:dc:c7:36:99:ca:7d:d6:46:
6c:e4:90:5d:0f:57:c8:5b:4e:90:0d:00:4c:ea:ac:
35:1d:45:c3:87:3a:4b:58:8f:cd:b9:7e:9a:6a:98:
f4:e5:79:0e:2e:a5:e9:3b:06:82:50:21:37:5b:bc:
b6:5f:18:41:1b:b0:5f:12:1b:60:f5:48:a3:ec:10:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:02:F7:BF:CC:16:D8:A4:F9:04:F5:D6:30:6B:9A:00:A9:B2:BF
X509v3 Authority Key Identifier:
keyid:5E:BB:65:36:7D:82:42:B0:15:9A:25:39:CB:5A:02:33:54:2E:F9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrtlNn2CQrAVmiU5y1oCM1Qu-WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5430d6-edc0-4428-b24a-300f5cabee11/1/XrtlNn2CQrAVmiU5y1oCM1Qu-WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5430d6-edc0-4428-b24a-300f5cabee11/1/XrtlNn2CQrAVmiU5y1oCM1Qu-WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:51:b2:35:31:1c:08:1b:48:51:b1:a6:4d:7f:29:68:c9:5a:
1d:71:83:fb:fb:28:e0:ee:8e:2b:74:d4:bf:35:26:a6:0a:7a:
0c:56:0e:f1:c4:3b:86:dc:bc:bc:58:61:ec:89:3f:c8:4d:5e:
7f:49:c2:4d:14:1c:c5:de:40:05:78:6a:16:c8:41:01:ce:30:
8b:f9:c1:81:be:6a:6a:98:61:a7:4f:d8:eb:2e:c3:c4:cf:8d:
95:c0:3e:3a:f5:48:81:f3:d1:18:2f:e9:94:b1:51:9e:1d:3f:
f1:fc:e4:f8:0d:da:13:ac:44:58:6b:6d:66:17:0e:93:99:07:
53:4b:20:2b:5e:48:d3:ce:e6:ee:70:cc:64:49:fa:4b:7f:0c:
bd:72:c3:93:a7:ed:ac:17:d0:72:5b:0b:bf:33:42:cf:8f:72:
2e:fb:41:89:0e:f4:4e:ec:42:74:10:61:cd:7e:02:d4:a3:c4:
25:ff:bf:8e:57:ef:c3:8d:76:a0:27:bd:da:69:09:54:f1:17:
d1:6a:8b:4d:85:35:39:7e:1c:06:2d:b1:a1:d0:bd:76:31:6f:
14:d6:0f:6d:57:0c:98:f3:67:1a:3f:9f:36:dd:95:05:38:ca:
d7:d6:03:3f:ea:07:00:a4:77:73:83:48:c3:20:cd:82:c9:2a:
a4:0f:18:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:11 2025 by rpki-client