Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: DgvbwB7xaOpJgD5ui4DVFn5ExoUP/gmaLtD8sdAYUuQ=
Subject key identifier: C2:14:C6:38:81:21:69:44:39:C9:32:EF:CA:6D:B4:4F:71:54:2A:CA
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 0194BD180493ED3489E6A5DD2E59468836F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:55 +0000
Manifest this update: Fri 31 Jan 2025 16:00:55 +0000
Manifest next update: Sat 01 Feb 2025 16:00:55 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: iTy6FEBJYM0dnGYfSCvzG3T0vKRyNOX6EU5cFSO/NU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:04:93:ed:34:89:e6:a5:dd:2e:59:46:88:36:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: Jan 31 16:00:55 2025 GMT
Not After : Feb 1 16:00:55 2025 GMT
Subject: CN=c214c6388121694439c932efca6db44f71542aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:f3:e3:a5:72:16:71:fe:aa:1f:b3:00:b7:
d6:d9:31:46:67:4c:eb:63:41:31:81:0b:d6:47:2b:
0e:cc:88:75:87:6e:64:64:e9:77:43:1e:b0:3b:3b:
60:4e:ea:f5:f4:6c:4b:89:dd:bc:c8:5c:c8:d8:cc:
24:b1:2f:8e:f3:0f:f0:0d:c2:5f:63:58:26:1d:ff:
6f:11:09:40:9c:b9:d0:06:00:71:f8:cc:09:76:3d:
25:70:e4:5e:51:54:35:69:3e:8d:e7:ea:9c:4c:e4:
7a:e2:47:f1:c1:3b:77:89:46:7d:cd:cf:fa:ca:45:
36:3d:ba:41:0e:94:33:44:b6:20:63:ea:3d:ef:58:
58:b8:0c:52:f6:b6:83:b8:25:27:e3:eb:13:14:98:
18:b1:68:be:51:3e:a7:7e:a7:88:ac:2d:73:6c:de:
3c:a5:8d:77:fd:7b:9c:3f:cf:5b:cf:4e:31:9b:44:
55:6f:2d:2d:8a:6a:32:bc:08:0c:3d:af:10:fe:ba:
e2:86:53:1c:06:21:03:27:1c:49:d6:43:b9:c4:e6:
23:63:82:2e:df:4b:d8:45:07:bc:1b:55:d8:8a:90:
db:5d:56:4c:10:f7:49:06:23:7e:a7:3c:57:0c:5e:
fa:88:fc:f0:8a:af:c7:c7:66:21:7d:7c:3f:44:48:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:C6:38:81:21:69:44:39:C9:32:EF:CA:6D:B4:4F:71:54:2A:CA
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b0:8d:1a:f1:8e:79:38:ec:16:55:f8:94:e9:20:d3:06:82:
d9:ef:09:e6:67:7d:aa:f1:e7:d9:5f:bf:d9:e0:65:0b:4e:26:
77:d6:f6:ee:a7:f5:77:c5:ce:63:9a:f0:25:59:ab:3e:dc:11:
54:c1:92:66:05:a1:1a:2c:de:66:f7:ae:bf:28:25:d8:93:25:
07:45:71:95:cc:eb:91:54:56:9f:19:b4:f0:53:d9:ad:59:a9:
c0:3d:1b:29:9e:f0:88:d1:6c:f0:ec:81:8a:ce:8c:9e:eb:a8:
cd:e7:fd:32:34:e8:0f:63:08:f6:26:4d:06:95:47:23:b7:0d:
ca:d2:25:35:d2:7b:2d:06:b2:84:5b:9c:21:b9:d4:ee:fb:df:
45:a5:5d:3f:b1:cd:19:8b:cb:60:44:2d:36:65:9c:f2:9c:0d:
6b:c0:c5:5b:0d:bf:7e:87:96:6a:cd:51:ce:fb:0a:e7:2e:5b:
6a:88:4e:5d:5d:2a:4e:26:20:9b:10:d0:3c:33:7b:c5:14:4b:
c5:17:4e:0f:27:7f:64:21:da:73:46:b3:c7:17:92:56:54:e8:
28:7a:99:50:e4:4a:46:52:f8:d8:08:34:df:eb:e2:cd:f6:25:
35:c8:67:cf:47:9a:ec:e7:fc:2e:73:4d:51:40:df:15:46:45:
71:12:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:06 2025 by rpki-client