Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
File: XOpIaZvRUBgukZEQh8QIxKuhzTA.mft (raw, json)
Hash identifier: JG422Zlf+33MQvIw53UWpv63rA22WB2LQmOJ7V5PP90=
Subject key identifier: 4A:43:77:5A:EB:B8:00:CB:16:4E:BF:E4:F3:F0:BE:86:3C:82:8F:2A
Authority key identifier: 5C:EA:48:69:9B:D1:50:18:2E:91:91:10:87:C4:08:C4:AB:A1:CD:30
Certificate issuer: /CN=5cea48699bd150182e91911087c408c4aba1cd30
Certificate serial: 01944E964B133775CDDE8DDEEE38F8D6F224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOpIaZvRUBgukZEQh8QIxKuhzTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
Manifest number: 1133
Signing time: Fri 10 Jan 2025 05:00:59 +0000
Manifest this update: Fri 10 Jan 2025 05:00:59 +0000
Manifest next update: Sat 11 Jan 2025 05:00:59 +0000
Files and hashes: 1: XOpIaZvRUBgukZEQh8QIxKuhzTA.crl (hash: aTIhy1L73Chy3ouCBLVk/8tYat/qfYS/Pv1aKuwTS6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4e:96:4b:13:37:75:cd:de:8d:de:ee:38:f8:d6:f2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cea48699bd150182e91911087c408c4aba1cd30
Validity
Not Before: Jan 10 05:00:59 2025 GMT
Not After : Jan 11 05:00:59 2025 GMT
Subject: CN=4a43775aebb800cb164ebfe4f3f0be863c828f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:4e:7a:f2:be:ee:ea:58:10:d1:1a:41:7c:
00:2e:4f:57:87:d0:b0:f7:21:af:cd:fc:67:81:e3:
76:e7:10:50:ba:56:af:b7:2a:eb:37:47:6d:45:07:
5b:7a:fd:95:b2:f3:36:72:d8:64:b0:ea:94:e0:c7:
5a:d2:de:b1:59:78:90:cf:ba:de:d5:31:41:5f:d4:
13:36:31:29:4b:0e:d9:c9:d5:ed:e6:9b:ed:ce:26:
cb:83:2b:d7:7c:e3:70:5d:3a:5e:97:37:6d:68:25:
36:07:69:16:9f:0f:87:8d:4f:20:db:32:19:84:d0:
08:ee:61:80:a7:89:05:98:77:6b:f9:71:86:8a:20:
53:5d:fb:0b:2d:7d:82:c3:3c:d1:63:ab:23:02:5d:
8f:61:da:cd:52:63:83:76:dc:bf:64:94:f9:c8:e6:
76:ca:8d:5f:37:20:9a:09:65:09:a6:cf:98:7a:0d:
dc:9d:29:6c:fb:43:1d:34:20:c8:52:d7:cf:d5:b0:
f3:56:eb:17:8c:bf:bd:56:96:17:ed:de:d7:7a:ea:
6a:33:9a:7c:0e:9b:81:9e:dc:6c:b0:25:48:66:0e:
df:78:94:2d:98:13:43:79:d5:85:e5:96:e2:7f:74:
9c:e0:23:86:d6:a8:b1:34:2a:7f:02:b0:09:ad:6c:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:77:5A:EB:B8:00:CB:16:4E:BF:E4:F3:F0:BE:86:3C:82:8F:2A
X509v3 Authority Key Identifier:
keyid:5C:EA:48:69:9B:D1:50:18:2E:91:91:10:87:C4:08:C4:AB:A1:CD:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOpIaZvRUBgukZEQh8QIxKuhzTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:18:92:ee:53:ec:50:9f:09:8a:55:ee:bb:4a:f3:f1:db:7d:
c4:05:fa:0d:1c:3e:73:79:47:cf:e9:0b:ca:6a:ae:a4:55:d4:
93:03:64:54:4a:0e:b0:40:10:d9:7b:70:e4:66:e6:10:f4:34:
96:e0:3a:6e:00:15:0f:c5:f3:52:19:8b:3c:74:bb:4b:c0:1b:
13:ed:18:8e:e4:d9:37:f7:86:6c:2f:07:13:82:fb:c1:90:c6:
15:68:10:8a:ca:ef:c1:77:38:8a:9b:1c:f9:e6:1d:e0:f8:c1:
ba:67:ad:0e:4a:da:af:97:9c:bb:ff:ad:12:49:4c:3f:7c:f0:
b9:78:29:45:21:f7:53:1f:fa:8e:07:64:af:ed:b4:11:53:bb:
8b:3c:7f:e1:97:75:c1:93:9b:78:2b:52:8d:8f:05:fe:99:10:
3b:49:25:bb:28:d0:e9:f0:10:9c:93:4d:7a:68:00:46:ad:38:
c6:a8:a8:b0:d8:02:9c:c1:72:f8:78:51:fc:d7:61:e1:6b:7d:
32:ff:d3:66:2f:00:3f:be:34:d7:c9:20:01:4c:78:39:7d:5e:
01:78:9d:8b:be:70:9a:23:f0:63:b0:5d:3d:f5:ea:96:56:27:
5d:03:d1:74:4d:24:59:b3:cf:db:8b:12:0b:e4:c8:64:7c:01:
81:9e:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:23:43 2025 by rpki-client