Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
File: xLxp1Co7FePOy5HHcrpkM8URvpk.mft (raw, json)
Hash identifier: tPXL/QdBCOyu4aej4kZb+vMmDhCz9XfYCpAMHOtwOSE=
Subject key identifier: 70:35:70:03:99:CA:2B:D2:7B:5D:E5:44:EB:78:74:CF:0B:0A:56:AA
Authority key identifier: C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
Certificate issuer: /CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Certificate serial: 0194BD1751B099015898FC8289A871A96773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: xLxp1Co7FePOy5HHcrpkM8URvpk.crl (hash: FsMUx745u8cB37Mq8u8y88Hgq8vDQeOSHOSYvCAOhhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:51:b0:99:01:58:98:fc:82:89:a8:71:a9:67:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=7035700399ca2bd27b5de544eb7874cf0b0a56aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:16:38:83:e0:7a:38:82:ab:76:5b:f7:e9:
2b:6c:65:7a:0c:e3:d9:ab:b9:bf:39:b8:90:63:9f:
5a:68:50:7d:31:d5:18:96:5d:71:3c:d3:ae:66:60:
57:6b:8b:45:3e:b3:da:03:d3:4c:c3:ae:84:2e:65:
e9:32:8e:f4:5e:79:57:5a:e1:3a:70:55:e3:e3:10:
4b:d8:9e:33:fc:b2:91:25:df:6a:e5:4c:69:1a:ab:
20:f8:c2:b6:e6:68:3e:d8:6e:cf:74:38:b9:3c:a2:
f7:42:82:a9:c7:c7:18:20:dd:67:b3:46:10:a0:2a:
55:a1:ff:81:01:de:a9:33:3a:44:6a:db:80:cc:d5:
cb:a7:4e:04:2e:e6:a3:c2:ac:bd:f3:45:25:69:2b:
df:fc:2e:c4:df:3e:4c:d3:61:6a:bd:fe:b7:bc:c7:
dc:3a:0c:1d:09:97:2e:fd:70:82:d3:bb:0e:46:b7:
c3:da:8f:e5:a7:bd:cc:05:a2:18:f2:88:65:30:af:
cc:38:65:76:0a:38:d8:f3:43:da:6d:67:e9:27:36:
aa:9c:4e:68:82:dd:7a:e1:43:42:7f:c3:09:d4:35:
63:92:76:92:0d:64:cd:e8:e0:32:d5:06:82:ef:81:
c4:c5:b9:fd:a0:4b:16:91:c3:1c:96:87:52:91:54:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:35:70:03:99:CA:2B:D2:7B:5D:E5:44:EB:78:74:CF:0B:0A:56:AA
X509v3 Authority Key Identifier:
keyid:C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:96:9d:43:3b:de:29:08:d5:99:d9:0d:1f:f0:e3:0d:af:67:
38:3b:68:32:a2:db:52:fd:8c:78:6d:8d:31:8e:e2:f5:70:4c:
ca:51:55:bc:80:50:c7:f9:74:ff:b8:a1:09:bd:a1:7c:66:25:
64:6b:7e:00:7e:d3:ce:15:02:19:b2:03:13:6f:b2:c4:8c:cc:
20:6f:09:3b:48:69:4f:04:56:55:c3:6f:73:36:f2:e0:6b:1a:
a0:07:64:85:8d:c0:c1:f2:66:15:c4:cb:dc:ea:b7:9e:a6:4a:
cc:5d:2f:cc:f0:b2:51:ba:6a:95:85:c7:ff:13:c2:4c:66:92:
62:7a:95:ca:97:1e:4f:09:3e:08:20:0e:63:2d:2d:e5:38:98:
d5:c6:95:7b:08:fa:e4:24:b4:c6:e5:b9:1b:91:0f:b8:70:c0:
6e:8f:bd:b6:04:9b:60:76:09:8e:3d:98:20:5c:56:80:cc:3c:
1a:b6:7a:20:f9:85:dc:1d:6e:39:4f:32:b4:dd:07:e0:bd:f8:
22:2e:3a:db:03:3d:7c:8b:e2:7c:01:c8:b3:cd:d5:1f:bc:7c:
4d:34:56:5a:6c:b4:63:70:26:90:5d:77:88:1b:cf:bf:ac:68:
a5:4c:10:01:51:8b:59:3c:49:e3:0e:7c:c2:36:ff:f6:0d:f6:
f5:fe:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:07 2025 by rpki-client