Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: VPkXyBcx2gxBJTnmy0tcBZG914bjlvlO2eCg6XDmLc0=
Subject key identifier: 6C:5A:5C:9B:72:31:F6:74:0B:2B:4E:17:DD:B3:15:8D:91:7F:B6:69
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 0194BC3C78FB7827EC05F5505E08EC3A3385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: Q71z/bfbCe6/ehqeAxJw7keAvKh3xIaEfIISSPcmEGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:78:fb:78:27:ec:05:f5:50:5e:08:ec:3a:33:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=6c5a5c9b7231f6740b2b4e17ddb3158d917fb669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:87:4a:26:c1:68:f5:d4:44:cf:78:de:6f:09:
d3:26:8c:cb:02:86:4e:ff:e1:9b:4b:24:04:fb:90:
52:49:86:80:78:65:fb:9e:14:0b:7f:c1:b7:29:38:
ab:91:19:53:d4:b3:95:5d:c2:eb:d4:69:63:a7:38:
ff:20:58:ad:52:a7:16:7e:3e:2a:7a:3a:91:71:34:
58:bf:80:7c:c0:3f:2a:e3:1f:e2:96:f4:9e:53:2b:
12:1d:84:e1:e7:8c:6b:bd:13:68:81:40:54:62:b8:
b8:0d:8c:5d:6a:ed:59:7e:0f:b6:13:03:a6:d5:a4:
95:df:4f:79:95:7b:c6:d4:3d:2e:47:52:97:eb:c6:
8d:2b:80:3d:c7:b0:f7:b1:70:f5:ae:8c:51:a0:ad:
42:26:03:e1:94:a6:76:2e:b0:b9:10:2e:92:a7:6c:
55:f6:3f:98:f2:90:ce:7e:55:e5:ed:34:7f:44:a9:
97:52:d8:5c:32:0b:32:22:54:57:95:9a:25:d5:27:
16:3a:ef:41:4c:3f:20:fa:4c:1f:e6:a5:ef:27:f9:
94:ad:fd:78:31:6e:58:29:a1:a9:9a:20:b0:bf:65:
22:d6:3d:b5:b5:2a:8a:90:a7:2c:8e:dd:9f:58:fc:
f8:15:57:20:21:cd:84:e3:2c:03:49:7b:05:68:55:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5A:5C:9B:72:31:F6:74:0B:2B:4E:17:DD:B3:15:8D:91:7F:B6:69
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:01:61:22:82:fb:de:71:b7:07:50:6d:4e:12:2a:a7:4e:5e:
1f:19:d4:b9:2b:80:6f:c8:97:21:b8:6c:c2:fb:5d:f5:f8:9f:
5d:31:08:c8:62:78:ae:96:39:cb:81:ad:3e:bc:87:69:e2:85:
e3:a3:aa:98:0d:4c:ae:5f:0b:5f:71:46:16:75:0a:ea:79:f9:
71:ec:74:3d:2d:98:b2:7b:56:8b:71:2c:c1:8b:a6:38:f3:f6:
60:d1:ea:b3:c3:d9:a2:4e:69:53:aa:88:cc:f7:8d:5c:31:83:
a5:2a:ad:5f:0c:27:af:be:d9:c4:d3:54:58:3b:3a:78:2b:bc:
b5:03:97:66:3d:f7:3c:04:5e:8f:21:0f:41:a4:df:6d:fd:8b:
aa:ee:92:fa:80:c8:9f:7d:f0:0c:50:bc:cd:ec:ff:90:bb:18:
bf:3b:a0:59:2b:cd:98:ea:13:d3:87:cd:0c:e8:c7:b0:f5:b2:
1d:61:27:82:73:d5:a3:ad:1f:b5:02:cd:5c:6b:c6:a1:9a:26:
e4:6c:b4:2e:53:ba:db:b6:03:6f:5a:46:7a:9a:74:8d:6d:7b:
81:9f:b5:9e:0c:92:b3:a0:3f:5d:77:f9:4e:77:00:13:55:d0:
c2:3e:d3:13:1c:ac:29:a6:4b:b2:52:f6:a6:e8:8a:8f:76:5f:
46:9f:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:54 2025 by rpki-client