Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: Ppb5R6dDmCnOEEcWcdKGS5mTUrTCZhikBuIp0axBENs=
Subject key identifier: 8D:00:4C:11:5D:89:8A:03:C9:31:1C:83:06:8B:C5:00:5B:50:CE:84
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 0194BBCECAC401E120BAED0EBF8662F85D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 06BE
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: 0UKXvzjf5hhkwHwGxRTeG2oTc/8Gd7XL/bYTZjX3MjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ca:c4:01:e1:20:ba:ed:0e:bf:86:62:f8:5d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=8d004c115d898a03c9311c83068bc5005b50ce84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:c4:8f:d7:b7:3d:42:18:ed:86:c3:42:24:
37:6e:9c:26:3e:15:08:68:74:67:ba:22:5f:57:6f:
f3:ab:00:e9:54:13:f4:46:53:92:0c:1b:3a:c5:19:
51:c1:61:f1:71:39:73:52:49:53:87:ed:31:91:7d:
7a:61:17:50:fe:a5:6a:9b:80:da:c4:8c:cc:2e:03:
00:5a:a5:11:ad:41:c2:4b:f5:22:8d:63:e1:80:1f:
be:eb:1a:4a:48:79:95:0e:78:d4:8b:d5:62:b9:ab:
59:35:e7:70:b6:3e:ff:7e:6c:a3:b7:43:06:2d:22:
48:00:22:53:03:bd:f7:7b:f0:88:67:63:96:01:fd:
e4:fc:ee:b8:61:86:73:47:49:29:37:82:90:85:6c:
03:ce:2d:3a:bd:ad:9a:ed:9b:77:b2:4d:11:02:3c:
fa:b1:40:60:7f:a2:fc:a9:45:e3:45:9a:bf:28:90:
80:fd:7c:16:a5:74:7b:ba:e3:1f:2f:99:51:71:de:
ec:42:54:00:2a:03:ff:ba:62:d7:70:6d:8b:c0:de:
f7:c7:5c:d1:fb:48:bc:dc:5c:e2:14:43:71:b5:63:
2c:bb:a8:f6:44:3b:27:f3:5a:52:10:83:70:10:25:
1c:cb:e3:ec:89:b4:dc:58:1f:e5:6c:b0:d5:16:3c:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:4C:11:5D:89:8A:03:C9:31:1C:83:06:8B:C5:00:5B:50:CE:84
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:34:e7:a8:d3:39:72:b3:93:32:12:70:97:20:23:27:7f:c0:
ff:aa:1a:bb:14:d1:f3:1b:a9:0a:bf:b3:be:85:f2:24:34:e0:
e6:03:86:e7:d2:79:6f:8c:08:fb:71:aa:b3:9a:6f:64:d4:60:
c1:a4:f6:99:bd:f8:a4:7e:72:72:9c:86:83:e0:2f:88:78:71:
f3:ae:4e:f7:cb:81:cc:62:71:d5:ee:e9:29:dd:a9:60:76:27:
5d:77:a6:bc:d8:d6:df:1c:1a:5d:83:4f:cb:6b:40:dd:aa:71:
76:fe:aa:c8:46:34:80:cb:00:bc:1d:63:b5:d3:46:6c:63:c4:
99:65:5b:9f:b5:e1:34:10:4f:44:29:ba:c2:88:30:38:55:42:
6a:4d:30:18:f6:ee:ce:fc:46:a8:09:5f:3d:4d:8d:93:b5:c5:
69:de:5d:2a:65:3c:85:cc:9e:5b:75:eb:5e:76:ab:88:27:69:
f8:ea:2b:08:66:c6:fe:96:ac:9f:56:89:b6:d3:2f:9f:e5:9d:
95:63:8e:5a:dc:36:5d:1c:46:98:10:5e:b5:21:a1:7e:ab:84:
13:06:2a:23:03:5e:3f:e0:98:99:56:df:10:9e:a9:6d:a8:d5:
16:f5:99:dc:71:2b:75:13:65:2b:c5:9e:94:a6:5f:cd:42:92:
03:f5:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:39 2025 by rpki-client