Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File: 5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier: p+Aium4KxRyLy9Z+kml0kYW+q19pPkQE/4b/WCPm0v8=
Subject key identifier: 6C:1F:9D:41:33:B6:E9:8B:D6:4E:1D:7C:B3:84:DC:67:F6:00:EC:E5
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer: /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial: 0194BBCE003A34C305D0027C2AB3DF48D00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number: 0747
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: PNjxm/C5fTh/xuPCXzowMKeZozFZNTuvw/jO200PnFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:00:3a:34:c3:05:d0:02:7c:2a:b3:df:48:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=6c1f9d4133b6e98bd64e1d7cb384dc67f600ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:74:b5:3c:d7:53:89:ac:cf:34:d6:03:3e:
07:37:c4:68:4b:80:00:da:df:11:04:2c:38:4b:f9:
b8:18:62:c5:c8:96:17:ef:3d:47:c7:55:12:95:be:
b8:6b:b7:58:10:94:5b:c5:61:4d:bf:9a:ec:61:0a:
04:d2:dc:94:ae:39:69:ed:a1:26:af:b9:ff:37:ef:
ea:4c:73:05:15:e3:d1:1b:21:d2:3c:70:f6:ac:c6:
6f:45:b0:2c:37:a2:e8:f1:d4:20:e7:11:aa:07:04:
29:e9:b3:c4:3e:46:c6:f0:c8:c8:0e:05:8d:e3:a2:
08:98:37:18:b1:9d:3c:c9:11:53:4d:f6:38:ea:e8:
99:b8:ba:54:54:07:48:f6:83:f3:a3:33:09:dc:79:
72:c6:6e:36:42:23:a9:dd:5a:6a:c7:d3:83:cb:3c:
83:1e:0e:96:af:a9:2f:7d:4d:ec:51:6b:1d:b9:f9:
92:79:42:07:e5:4f:1d:ca:88:70:6b:f9:7f:da:e4:
71:d9:63:39:e0:37:d8:c0:be:a9:4f:54:98:a0:6b:
66:3b:87:e9:26:2d:59:86:d8:ce:9f:99:c4:5c:ea:
16:59:8e:7c:4c:03:7c:d2:08:2d:86:4c:57:5d:c1:
c3:5b:e0:14:84:c4:0d:cf:10:6c:89:34:77:17:a3:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1F:9D:41:33:B6:E9:8B:D6:4E:1D:7C:B3:84:DC:67:F6:00:EC:E5
X509v3 Authority Key Identifier:
keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a1:82:40:9a:43:2c:c7:bf:d2:4a:48:4e:a0:e5:31:f2:67:
2f:93:33:fa:41:4b:37:50:1c:f6:39:45:79:ef:58:d2:4a:ac:
c7:10:72:65:d3:0c:e5:d2:e2:2c:95:2f:e7:b5:7a:3c:71:08:
d0:44:1b:b7:de:e5:08:3d:b9:59:24:94:6f:d9:2f:f9:c1:89:
5b:77:16:26:6a:c9:2c:03:ea:d3:d5:53:09:74:9f:67:59:24:
c4:f7:4e:fe:c5:0f:e8:4a:36:5d:72:7f:eb:af:02:3d:63:dd:
43:48:f6:55:6b:09:d7:e0:b2:aa:96:75:3c:ae:1e:f5:4c:f7:
d0:c7:97:1d:5f:51:4f:fc:a4:da:20:65:04:02:d6:5f:73:99:
82:36:89:84:51:24:f7:8d:99:85:7a:d0:14:d4:cd:53:dc:66:
bc:57:a5:be:ae:f4:01:94:2d:69:dc:c6:37:54:66:7f:da:f1:
0f:23:b7:5f:99:a2:44:f3:6e:8e:59:3a:5e:7b:ef:85:6d:b4:
72:d6:32:df:73:3a:6c:ff:b9:d0:d5:f2:2a:19:27:ee:f7:d1:
83:b0:81:a7:cc:a9:b8:4e:1c:4d:f3:8f:ef:43:5d:51:8d:74:
24:96:2b:a0:c8:b1:54:11:24:5c:d3:fd:b2:ad:8b:ef:04:76:
3a:a2:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:04 2025 by rpki-client