Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/XEjolmuNGs5fPiAK-tBV07zYfcs.mft
File: XEjolmuNGs5fPiAK-tBV07zYfcs.mft (raw, json)
Hash identifier: mnTEL5wV0+ei6gRYJIEFP9T+0USWcind4Y9MuDuqbXk=
Subject key identifier: 33:2F:3A:64:B0:25:C2:50:AB:8C:70:4E:24:10:6B:DB:A9:1F:7F:82
Authority key identifier: 5C:48:E8:96:6B:8D:1A:CE:5F:3E:20:0A:FA:D0:55:D3:BC:D8:7D:CB
Certificate issuer: /CN=5c48e8966b8d1ace5f3e200afad055d3bcd87dcb
Certificate serial: 019444131569A820A498E4AD41BDDB88C76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEjolmuNGs5fPiAK-tBV07zYfcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/XEjolmuNGs5fPiAK-tBV07zYfcs.mft
Manifest number: 08EF
Signing time: Wed 08 Jan 2025 04:01:28 +0000
Manifest this update: Wed 08 Jan 2025 04:01:28 +0000
Manifest next update: Thu 09 Jan 2025 04:01:28 +0000
Files and hashes: 1: XEjolmuNGs5fPiAK-tBV07zYfcs.crl (hash: OOZut4oMYwOSbPLGUUptVGPrmzQDU0JQq9dv9OiDWN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:44:13:15:69:a8:20:a4:98:e4:ad:41:bd:db:88:c7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c48e8966b8d1ace5f3e200afad055d3bcd87dcb
Validity
Not Before: Jan 8 04:01:28 2025 GMT
Not After : Jan 9 04:01:28 2025 GMT
Subject: CN=332f3a64b025c250ab8c704e24106bdba91f7f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:b5:2b:50:2e:ba:53:7d:6d:30:c9:7c:cf:
ae:2a:94:cc:2c:1c:b0:75:47:c4:f1:9d:b7:98:66:
8c:73:72:8b:66:76:1e:a9:ba:c0:f9:1f:f3:4f:f2:
06:a3:b5:fa:09:31:17:df:a6:d1:8e:29:b9:09:e7:
98:12:6a:a1:fc:44:2f:1e:b2:70:28:83:bd:ac:6a:
f3:01:c8:d7:94:3a:32:ac:fd:17:8f:29:13:b0:e1:
80:1c:55:cc:bc:59:d8:38:4b:d8:ef:45:7c:0f:85:
39:69:c4:92:ce:87:45:9a:58:7c:7a:f7:b5:dd:c9:
c9:d0:10:a0:d5:8c:2a:36:01:1d:0d:3e:d8:ff:4b:
52:5a:85:e2:a8:5d:3d:8b:66:47:d8:54:6e:d8:8f:
0c:12:3b:9a:93:b5:44:6c:72:97:48:d8:36:8c:26:
b3:90:96:30:8c:e9:ae:0c:ca:19:68:f1:40:37:00:
75:19:1e:e9:a0:cf:94:dd:aa:18:b8:10:e5:cc:6a:
2a:87:22:86:f0:58:71:ef:39:82:ba:a7:1b:4a:3f:
45:72:db:39:c5:8c:2e:6e:9d:3f:85:d6:e1:f7:c2:
b8:08:ac:ec:d2:40:70:f6:5c:2c:38:1b:7b:f6:aa:
9d:57:8b:1b:ef:0c:1f:d9:1f:dc:48:d4:4c:35:06:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2F:3A:64:B0:25:C2:50:AB:8C:70:4E:24:10:6B:DB:A9:1F:7F:82
X509v3 Authority Key Identifier:
keyid:5C:48:E8:96:6B:8D:1A:CE:5F:3E:20:0A:FA:D0:55:D3:BC:D8:7D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEjolmuNGs5fPiAK-tBV07zYfcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/XEjolmuNGs5fPiAK-tBV07zYfcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1be3b7-fa1d-4658-a7fb-2cac5462c202/1/XEjolmuNGs5fPiAK-tBV07zYfcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5d:51:e4:fd:8f:bb:38:d8:5b:2a:2a:a6:ee:b4:af:f8:e3:
76:df:34:a8:2f:f9:17:52:b2:60:b0:0e:8b:99:79:01:c2:1a:
e8:22:20:1c:27:50:a3:f1:d4:a3:60:6d:ad:b9:38:39:f1:28:
98:89:4b:b1:e5:a1:df:3d:81:64:18:46:67:5e:ff:9c:50:f2:
33:a2:64:52:b8:95:93:83:1d:00:c2:ba:4e:0e:5f:15:bc:dd:
62:6c:7e:89:58:7c:21:61:e0:96:48:f4:4a:81:f4:9e:5a:71:
b2:bd:61:55:2c:b3:35:23:27:d1:d3:21:12:aa:7b:4f:a0:d7:
05:aa:eb:1c:77:24:3d:79:bc:c3:f4:28:a1:b1:39:72:67:62:
0f:63:73:bb:a1:7a:36:10:a3:a1:68:51:71:8b:23:25:01:8f:
f8:c4:ab:9d:93:ae:a3:bd:14:93:6f:6a:93:d7:78:23:cc:fe:
f2:98:e4:db:ae:14:fd:92:00:18:a4:47:8d:eb:93:a6:46:90:
f4:37:b6:06:4e:e6:08:e5:7a:a9:20:13:ee:fe:d8:13:47:fa:
ee:df:7e:05:46:30:e7:0d:17:67:9e:e8:05:d7:cf:98:f6:6a:
18:6f:fa:d5:52:1c:55:c2:7f:85:1c:e2:06:d1:8e:a0:6c:02:
ba:5d:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:23 2025 by rpki-client