Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.mft
File: XtGkql_QUBs-ptafQzwvFkIRYIk.mft (raw, json)
Hash identifier: PL+WsaYQM9YnBfpK6oMyanz67qeYPQdQuGschiTbTEA=
Subject key identifier: 25:8F:BD:70:29:66:C9:5A:C8:6E:56:03:2A:31:30:35:A8:90:01:4A
Authority key identifier: 5E:D1:A4:AA:5F:D0:50:1B:3E:A6:D6:9F:43:3C:2F:16:42:11:60:89
Certificate issuer: /CN=5ed1a4aa5fd0501b3ea6d69f433c2f1642116089
Certificate serial: 0194BC3C8DC14730EF95545CF78D03165DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtGkql_QUBs-ptafQzwvFkIRYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: XtGkql_QUBs-ptafQzwvFkIRYIk.crl (hash: QfbFVoV2RLThqQ1m2aX/nEqkq4Ydy010Uj7uC9kwh+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8d:c1:47:30:ef:95:54:5c:f7:8d:03:16:5d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed1a4aa5fd0501b3ea6d69f433c2f1642116089
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=258fbd702966c95ac86e56032a313035a890014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:7f:41:9b:ce:5f:ca:4f:10:2f:57:19:87:
8a:80:c2:e6:24:c5:d1:1c:ae:49:a1:a9:2e:f3:b3:
ad:a4:5e:6b:66:7d:70:c6:49:34:90:c0:ea:37:d2:
f8:33:ab:89:b8:e0:12:d9:1a:ad:9f:68:ac:15:26:
bb:ec:3a:93:16:b3:58:28:66:06:3b:d8:e9:23:f4:
0e:24:a2:e5:53:c9:3c:7e:a7:bc:7f:e8:db:c4:4d:
8c:b0:c3:81:89:45:e2:47:40:e1:79:d6:3e:f5:60:
93:5c:59:97:52:87:4f:f4:03:59:1e:a9:64:0d:ef:
15:95:36:a3:7d:6b:dc:c8:ce:f4:a8:77:59:2e:fc:
78:44:ec:74:94:f0:15:28:b5:fa:dd:8e:dd:d1:b2:
9b:a1:ae:02:57:e7:90:94:e2:f8:7a:7f:aa:48:71:
1d:aa:80:85:c6:86:b1:3d:78:c8:eb:39:59:1c:b6:
a7:7c:08:6f:37:cc:a2:93:40:8e:85:da:b0:c2:49:
26:dd:4a:f4:5f:12:d7:f8:b1:be:86:ee:c3:af:83:
a9:14:6f:26:de:31:18:ff:4a:f8:38:17:b7:08:34:
f5:3e:4a:29:1c:e7:06:07:f6:0f:dc:2c:55:38:26:
bc:ab:df:7d:05:e9:68:1b:4c:e6:ef:01:4f:7d:58:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:BD:70:29:66:C9:5A:C8:6E:56:03:2A:31:30:35:A8:90:01:4A
X509v3 Authority Key Identifier:
keyid:5E:D1:A4:AA:5F:D0:50:1B:3E:A6:D6:9F:43:3C:2F:16:42:11:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtGkql_QUBs-ptafQzwvFkIRYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f1:fa:42:b4:55:16:8f:8d:a6:97:e4:1d:09:a5:97:e0:e0:
2c:30:db:f7:f0:1a:3b:53:9d:d7:11:49:1a:18:45:8e:00:0a:
dc:eb:07:99:ad:29:75:a0:5f:2f:ba:f2:8e:58:39:2a:2b:46:
e3:95:75:4b:ad:52:d5:03:24:05:fc:cd:c0:54:9f:a9:46:e0:
7d:85:48:66:78:30:f0:0b:19:1e:15:39:cf:13:cb:ec:b7:25:
23:86:af:7a:96:df:ed:16:0e:90:68:54:18:04:c6:1a:4d:4c:
fb:3d:05:39:fc:f2:38:39:4c:a1:61:1e:15:6a:b4:12:86:3c:
9c:f6:f0:09:dd:09:89:09:cf:93:3e:03:da:69:3f:9e:ce:05:
bc:fb:4b:51:55:d8:ef:73:8b:e5:35:aa:36:fe:12:f1:6d:11:
dc:71:ab:8d:38:52:cb:81:17:5a:32:73:b6:56:89:58:51:4f:
7e:75:68:d8:bf:61:02:e7:e7:99:56:7a:7b:d6:c2:30:80:df:
6b:7d:4f:d2:12:a0:68:fd:75:70:7c:e2:26:23:f0:cb:b9:26:
37:72:a6:ba:81:4a:b9:ab:b9:6d:ea:8f:f4:8f:3d:6b:a1:fb:
6a:83:28:64:b7:5c:f5:7c:0d:47:c7:df:af:24:2a:3f:37:c9:
95:9d:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:07 2025 by rpki-client