Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: oIsfqGckjsBcrhhBtTYIaNORUbwH0QxcYkRGJxEP0Ho=
Subject key identifier: 17:64:C2:4A:0F:B0:D4:60:B4:35:A1:6B:51:47:B3:D4:E0:8D:1D:19
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 0194BBCE9DF995545A7F9DA98C8C21FD7AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: 6IQvD9WxNh63oTOYgPKNwT5qcFATBqmo6509YTB4Luw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9d:f9:95:54:5a:7f:9d:a9:8c:8c:21:fd:7a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=1764c24a0fb0d460b435a16b5147b3d4e08d1d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:46:db:b2:fc:65:d0:f7:8c:03:bc:62:5a:
86:6d:e5:f6:83:f4:28:d4:88:b4:2a:e5:22:d7:23:
ea:1f:d3:1d:1d:05:d5:5b:69:55:ec:58:27:5f:40:
7f:3f:4f:39:b1:aa:68:dd:1c:34:36:a2:73:3c:61:
42:b6:53:60:90:15:0c:c5:84:7c:3d:7b:a2:da:50:
26:c0:7d:47:0a:98:71:19:5e:ed:f3:66:bf:73:7c:
5c:af:4c:4f:0a:5f:bb:dc:dd:21:fd:f1:6c:a2:82:
75:45:e9:c5:c3:b4:f2:76:c7:4d:62:aa:a5:1b:45:
73:31:d0:6a:a0:8c:4d:7f:2c:63:cb:ff:3d:5d:38:
82:7b:40:cb:c7:2f:a5:23:26:ec:1b:c6:7d:17:ec:
b2:61:cc:f2:04:db:dc:96:f0:9a:91:8f:e6:77:a3:
14:9d:b0:17:1b:1e:ca:fe:14:9b:45:93:e6:53:f0:
f5:cd:55:12:83:2a:94:ab:6e:c6:1a:50:7f:77:d8:
ba:0d:c1:dc:dd:87:0a:5b:bb:d2:a4:f1:ad:aa:1e:
c3:96:6d:bd:22:2c:5c:3e:c8:5a:bf:25:ee:27:83:
e9:71:f6:9a:d1:26:51:0b:05:07:6c:8f:9d:0a:1d:
f4:e3:63:69:c8:e7:23:e6:62:b2:5e:6a:31:71:a3:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:C2:4A:0F:B0:D4:60:B4:35:A1:6B:51:47:B3:D4:E0:8D:1D:19
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:60:9a:30:98:41:9f:6d:de:89:35:9d:00:5d:e4:45:03:cf:
0e:99:e8:98:a5:c5:4c:2f:41:75:bf:90:8e:f3:ad:95:83:0c:
6e:25:5c:45:ca:90:29:ed:0d:d1:26:49:c5:8e:4f:ea:81:0d:
f6:62:f3:b1:52:cf:0f:a2:a2:36:45:6d:13:13:8d:e8:9a:57:
77:07:18:fd:39:75:df:ab:a3:de:6f:0b:d9:fe:86:a2:84:89:
e5:d9:c1:4b:9c:99:e3:8c:29:8e:be:b9:cf:0d:7c:df:54:08:
bf:9d:e7:60:3a:94:d7:43:a1:36:10:8f:8e:65:26:dd:b1:c2:
8e:d2:08:26:2b:1e:cf:65:e0:4d:97:d6:1e:15:5e:b7:97:6c:
48:cf:02:44:12:c7:c8:29:27:97:58:6d:80:8a:bf:70:81:bc:
24:69:2c:f7:8b:08:f1:90:78:ac:29:c3:ef:a0:02:41:fe:04:
d4:cd:56:1f:12:67:f5:8a:f0:84:9a:84:d1:d9:e0:d0:d4:c3:
40:3b:ef:27:1c:01:5e:54:a7:2d:8e:92:ed:16:2f:7c:91:45:
15:1a:82:14:46:ef:86:b6:05:9c:73:4f:82:d1:47:09:70:bf:
a6:d2:ee:8b:93:36:99:9f:36:24:4e:c7:bf:28:af:83:45:ae:
66:8c:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:29 2025 by rpki-client