Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a64099-345f-4f1c-a930-760cb3ea1415/1/RXHLqFoCMKnLR6vrWzue1NUxz54.mft
File: RXHLqFoCMKnLR6vrWzue1NUxz54.mft (raw, json)
Hash identifier: YHhs+kXRoblOhZZV2o6YvTdxS4n9AV0ihSz1sta6Wr8=
Subject key identifier: F5:BE:D4:86:37:A4:45:EB:7A:1E:F6:91:5D:6B:89:15:AA:D6:76:5B
Authority key identifier: 45:71:CB:A8:5A:02:30:A9:CB:47:AB:EB:5B:3B:9E:D4:D5:31:CF:9E
Certificate issuer: /CN=4571cba85a0230a9cb47abeb5b3b9ed4d531cf9e
Certificate serial: 0194BC72BCEC0E48FD9718F5902FEFC46676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXHLqFoCMKnLR6vrWzue1NUxz54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a64099-345f-4f1c-a930-760cb3ea1415/1/RXHLqFoCMKnLR6vrWzue1NUxz54.mft
Manifest number: 01D4
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: RXHLqFoCMKnLR6vrWzue1NUxz54.crl (hash: dy80qj77EpH5/A40SgSeGxWGjH4LlGVdokrTzYemRkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bc:ec:0e:48:fd:97:18:f5:90:2f:ef:c4:66:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4571cba85a0230a9cb47abeb5b3b9ed4d531cf9e
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=f5bed48637a445eb7a1ef6915d6b8915aad6765b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:19:4f:10:66:31:72:12:d6:d8:a4:7b:5f:
0a:ea:cd:a8:c4:08:59:bd:7d:ca:f4:f7:ab:8b:d3:
40:c5:2c:b1:8d:ed:89:26:04:a3:1d:e6:5a:f8:07:
ce:0d:17:58:e2:4e:1f:23:16:a5:ea:77:b4:16:e9:
42:a6:09:fc:8e:65:82:92:5d:21:90:0e:90:6d:b4:
8a:4b:bd:a5:82:79:3b:15:82:50:28:cf:93:65:04:
a8:cc:b0:c7:0d:f1:cc:ad:44:f3:1d:7a:76:eb:72:
08:d8:c2:ff:bc:42:1f:04:ba:3e:69:b9:1f:33:a4:
70:b4:26:ff:7b:1f:5d:92:37:84:d2:19:73:57:be:
99:a3:f1:b6:e1:4b:a9:43:29:c5:15:96:74:16:9a:
82:63:24:cd:38:73:af:10:86:7a:c8:a7:9a:6b:7f:
93:26:d5:ca:bb:02:12:d1:e8:0f:02:b4:f1:0e:3c:
a5:1d:64:2b:bb:56:ea:d2:65:cb:70:d4:b7:a4:33:
22:87:cd:1f:67:30:ad:9f:d2:bc:3a:7c:32:ae:64:
77:e4:2c:a6:40:b3:ab:0f:56:4d:77:d3:48:13:70:
c0:00:d1:62:75:bf:69:79:d2:d1:bf:7c:d9:93:bd:
32:34:68:48:a9:e5:1a:63:df:23:7f:07:05:b8:5a:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:D4:86:37:A4:45:EB:7A:1E:F6:91:5D:6B:89:15:AA:D6:76:5B
X509v3 Authority Key Identifier:
keyid:45:71:CB:A8:5A:02:30:A9:CB:47:AB:EB:5B:3B:9E:D4:D5:31:CF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXHLqFoCMKnLR6vrWzue1NUxz54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a64099-345f-4f1c-a930-760cb3ea1415/1/RXHLqFoCMKnLR6vrWzue1NUxz54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a64099-345f-4f1c-a930-760cb3ea1415/1/RXHLqFoCMKnLR6vrWzue1NUxz54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3c:c6:eb:60:5a:aa:7f:22:f9:8c:97:2a:81:fa:ee:9a:78:
ad:0c:cb:5d:39:97:ba:40:a8:dd:05:97:eb:11:26:eb:6e:94:
af:ed:9e:05:f1:8f:2a:5f:82:81:e3:70:5f:95:c4:e7:3c:8a:
a6:95:48:61:c0:dd:c3:50:e1:d4:82:c4:ec:cc:1d:ce:ae:0b:
ce:f5:7e:fb:60:72:eb:5f:64:3d:49:0b:8f:fd:67:91:24:b1:
a5:1b:c8:61:8c:20:e8:94:7e:bf:5d:57:fd:7b:7d:0f:0f:2d:
a0:0e:8a:70:73:55:aa:5f:7a:cb:25:4e:e3:0c:dc:fb:5d:cd:
6e:88:11:ca:39:92:31:bc:87:e7:4e:e6:6c:a3:6a:58:f1:1a:
93:9f:7a:5f:a6:6f:c7:a7:fb:d9:78:ce:45:d4:0e:a2:57:fc:
8d:4f:2f:0b:a3:82:ca:cd:67:d9:76:78:2c:0c:2a:55:b1:aa:
57:1a:24:53:67:06:dc:1c:c6:22:a8:23:b0:e5:e8:cd:9b:93:
7c:4f:7c:b4:a5:8c:d4:82:cb:89:16:57:1d:ef:ad:2a:01:83:
59:42:80:f8:2e:7d:09:0f:5a:92:47:8b:4f:4c:41:d1:6b:9f:
d2:a5:3b:87:2f:f5:8d:6f:6f:ec:3a:8d:fd:01:3d:8c:7e:a0:
81:cf:9b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:21 2025 by rpki-client