Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: sqDGsEiT3uSJJWUzIIHjwskDnZAHQQCa/mEZms30b2A=
Subject key identifier: 32:0A:FD:14:8B:DD:99:03:B9:49:2D:52:06:29:5A:C6:0F:4E:95:9F
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 0194BBCDEB5361A4881EDF13601C9E0EA871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: aYa3DPaxoGiAnEynHcB53q3R/fPdivQCpXRJ+K+yycM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:eb:53:61:a4:88:1e:df:13:60:1c:9e:0e:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=320afd148bdd9903b9492d5206295ac60f4e959f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:2d:51:d6:d9:82:42:b3:df:0e:bc:50:a7:
b6:4d:3c:4d:37:db:93:c5:4e:c0:95:43:1b:a9:ba:
b8:a6:35:af:ae:24:cc:ce:cd:8e:7d:3d:35:fe:de:
12:5a:fc:97:b6:0d:ea:2d:06:b7:e7:2e:b8:f8:6b:
1e:4e:7e:89:bd:8c:3c:6f:9b:32:9e:2f:dc:5f:a9:
c5:b4:9b:2a:60:c5:89:25:c6:75:78:9e:1e:86:ca:
12:cc:a3:a7:d6:5c:3e:fa:2e:a7:7f:38:6a:44:74:
82:65:20:8e:ca:0c:21:a9:d9:3b:1b:45:82:5d:20:
97:9f:18:85:90:eb:a9:41:9b:17:8f:e1:6b:8d:8f:
5e:8c:e4:8b:a5:ff:51:68:be:09:ba:7d:38:55:64:
4d:a5:4d:25:03:92:fa:25:fe:09:7d:55:28:c8:ae:
7e:40:49:01:be:56:65:bd:2c:89:da:61:0a:77:74:
68:c4:10:09:e2:e4:f3:d0:c1:7d:1b:3a:6e:11:af:
76:20:13:ef:fa:2d:fa:50:51:3b:14:ae:9a:eb:2f:
ac:ac:7e:79:99:f3:89:88:d3:e9:45:33:83:d8:ee:
11:fd:23:88:aa:f9:cf:62:5a:c5:d9:87:1d:3d:e9:
5d:17:00:ea:95:92:ea:52:62:f3:ea:da:03:3d:0d:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0A:FD:14:8B:DD:99:03:B9:49:2D:52:06:29:5A:C6:0F:4E:95:9F
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:89:7a:4b:14:4f:b3:a1:e4:df:d2:3d:93:ad:b7:ea:23:a3:
15:c5:36:69:2b:98:a2:6d:2e:cb:58:26:08:15:2a:0d:9f:72:
65:b2:d1:14:b7:66:bd:4b:fd:54:8a:60:29:dc:4e:c1:31:b1:
23:85:76:6b:f6:57:f6:e2:41:a8:7a:cc:17:21:76:75:80:2e:
a4:30:64:bc:b1:0a:b2:b5:0e:4c:34:d3:2e:dd:ca:1e:8a:07:
b3:8f:75:c7:f1:cf:28:7a:3d:7e:a3:c1:dd:05:d3:41:4d:97:
20:b1:c0:c9:97:31:78:7e:e6:30:ce:ea:88:fb:70:44:9b:bc:
32:9c:fb:40:41:aa:15:d9:21:b4:34:c3:c9:ca:c4:e4:63:2b:
8e:f8:e2:0a:4f:5b:f9:4b:b6:eb:45:c4:80:5b:fc:2a:6d:fb:
48:72:0a:e5:ac:54:5d:e3:9d:92:40:5e:37:ba:1c:ec:60:31:
6d:50:73:e7:c3:95:6b:29:98:82:ff:88:9b:46:5c:64:8b:3d:
5d:2c:0f:c8:fc:b9:b5:65:1d:36:56:ed:63:49:98:e8:6a:74:
71:32:33:75:34:83:91:78:79:c7:36:c1:35:20:a3:e8:01:be:
6f:18:5d:ce:a7:b7:d0:38:d2:78:8b:4d:f6:ad:18:7e:a3:5e:
79:78:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:20 2025 by rpki-client