Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
File: XhG23vM9-aR3sofFIN7ExPYLOo8.mft (raw, json)
Hash identifier: wJIe7LKI+VNVZor5IEcVAahoM7xHUtX7YkpuxEsIdUA=
Subject key identifier: 17:41:99:B5:91:CD:4E:EA:06:2A:C7:6D:54:00:B3:C9:C1:BF:73:55
Authority key identifier: 5E:11:B6:DE:F3:3D:F9:A4:77:B2:87:C5:20:DE:C4:C4:F6:0B:3A:8F
Certificate issuer: /CN=5e11b6def33df9a477b287c520dec4c4f60b3a8f
Certificate serial: 0194BBCE98681E78C7FCFC475DD32986C98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhG23vM9-aR3sofFIN7ExPYLOo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
Manifest number: 0956
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: XhG23vM9-aR3sofFIN7ExPYLOo8.crl (hash: 9mqZXiaHmz01/Zr/4Oi1wMUesLaKjiXdc4CuBW9+Gqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:68:1e:78:c7:fc:fc:47:5d:d3:29:86:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e11b6def33df9a477b287c520dec4c4f60b3a8f
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=174199b591cd4eea062ac76d5400b3c9c1bf7355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:85:b8:4b:6a:e4:3f:23:02:e0:39:5b:e1:
a6:7b:cc:09:63:72:64:c0:44:b3:a0:a0:61:c8:52:
94:f0:e2:96:79:4c:4d:0c:70:93:39:58:22:61:3c:
00:37:da:6f:93:c4:c5:0e:0a:39:ed:6b:2b:05:66:
a6:0d:7c:ca:c8:83:4d:a7:da:11:e4:2c:e6:a2:53:
73:69:30:bc:8e:17:40:26:ab:c4:11:11:d7:6a:34:
5e:a0:0f:50:ef:9a:3d:9b:c4:e8:35:7a:8f:ae:e6:
60:7f:49:92:26:7b:99:3e:a6:0f:62:cc:f2:38:5e:
4f:a6:06:21:d9:7b:bd:c7:32:e8:6d:8a:27:0f:7d:
65:7f:0c:eb:bb:65:cf:95:9c:73:1d:d1:25:8c:79:
91:2d:c1:b6:69:13:69:de:86:94:a9:67:9c:f8:ab:
8b:25:97:68:87:a2:38:21:24:7e:fa:73:2f:9f:8a:
2f:74:9b:cc:9c:95:b7:7f:82:33:fa:13:76:b8:9e:
e9:b5:4b:ad:ff:ae:9b:ac:6a:d2:fc:20:81:ee:b2:
08:bb:9d:85:ef:b8:eb:63:3b:57:46:d9:c3:d2:21:
9a:f6:1c:45:f1:e9:7f:4d:72:6e:d1:b1:29:f5:19:
b8:bb:5a:bd:83:f1:2b:8a:4a:6d:84:21:2e:5e:eb:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:99:B5:91:CD:4E:EA:06:2A:C7:6D:54:00:B3:C9:C1:BF:73:55
X509v3 Authority Key Identifier:
keyid:5E:11:B6:DE:F3:3D:F9:A4:77:B2:87:C5:20:DE:C4:C4:F6:0B:3A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhG23vM9-aR3sofFIN7ExPYLOo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ee:ed:cb:6e:2f:f0:2f:04:21:fd:f5:c1:04:71:e8:66:e5:
57:71:4d:e5:da:4f:d8:e5:2b:79:05:1c:f4:28:1b:98:20:64:
9d:73:93:a9:cc:27:93:ba:3c:77:bb:f3:8b:3c:0c:f1:20:f5:
ac:65:01:3a:15:80:a7:b0:87:52:b4:0a:a3:9b:f4:9d:7a:e4:
17:6b:6b:81:38:c4:1a:f3:ec:9d:db:7f:be:3c:02:13:59:9b:
5b:a5:90:20:02:e1:5b:e4:84:15:10:30:9a:e5:84:47:28:a1:
95:8c:f8:e9:77:79:24:98:6b:78:c6:ad:20:f2:4b:36:25:72:
c5:54:e9:1d:0f:09:64:9c:41:32:52:7e:72:9d:17:4b:22:4d:
51:5a:a3:f3:d3:43:15:32:2e:97:98:b8:d9:4a:84:24:64:db:
45:2f:57:fa:b4:85:be:81:c8:4c:3c:3f:24:d7:2b:d1:9c:a4:
5c:5c:9f:4d:07:6c:8c:45:5c:19:58:65:3c:4f:52:99:9d:4d:
b7:fc:16:80:32:bd:2d:61:1f:d1:b9:d2:ea:80:7f:f5:6f:74:
16:e2:45:bd:ed:a5:bd:c0:ba:06:9f:a4:19:99:34:71:d0:d2:
43:25:75:1b:4b:6c:bc:36:c3:8f:9e:25:6d:01:c2:65:a3:8c:
ae:8e:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:13 2025 by rpki-client