Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
File: XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft (raw, json)
Hash identifier: x6AU5vmzUTqfklPN5+cI0n8RLmoY+yp1Z3stIgUNRpU=
Subject key identifier: 93:2B:56:85:F6:FE:DF:EA:4E:E5:30:50:51:3D:38:C6:46:AE:5D:70
Authority key identifier: 5C:D7:42:AB:39:FB:68:82:CC:6B:55:B8:36:C0:EB:14:66:A2:2F:46
Certificate issuer: /CN=5cd742ab39fb6882cc6b55b836c0eb1466a22f46
Certificate serial: 0193855007DF1E47281E1CE2E5359AFFD348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNdCqzn7aILMa1W4NsDrFGaiL0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
Manifest number: 0571
Signing time: Mon 02 Dec 2024 03:00:34 +0000
Manifest this update: Mon 02 Dec 2024 03:00:34 +0000
Manifest next update: Tue 03 Dec 2024 03:00:34 +0000
Files and hashes: 1: XNdCqzn7aILMa1W4NsDrFGaiL0Y.crl (hash: 6mT0vPF+LmWf3lATt1yBd5OCakHGSeOmEk4G+lkMVec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:85:50:07:df:1e:47:28:1e:1c:e2:e5:35:9a:ff:d3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd742ab39fb6882cc6b55b836c0eb1466a22f46
Validity
Not Before: Dec 2 03:00:34 2024 GMT
Not After : Dec 3 03:00:34 2024 GMT
Subject: CN=932b5685f6fedfea4ee53050513d38c646ae5d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:83:ba:3d:b9:c4:37:a4:45:90:8a:3c:9e:
79:90:ab:95:01:da:43:d6:47:8a:4f:7e:5c:e2:dd:
59:d6:f6:1f:00:65:e9:18:61:11:34:95:e5:07:12:
51:77:8a:5b:bc:d9:cb:49:87:85:f1:6b:28:a9:cd:
83:d3:c7:f7:f2:34:59:fb:4c:3a:cf:a7:f2:4d:17:
6e:24:b9:f3:e2:30:4b:62:b0:04:9f:d7:2b:f6:b2:
67:d5:69:ee:97:6d:f6:e2:2f:a6:e2:61:e8:b8:3d:
a7:a6:20:ef:79:c7:42:ad:cd:dd:dc:22:89:dd:5e:
61:fe:eb:60:a9:0f:67:e6:d3:6f:f3:3c:fb:d9:03:
7d:0b:3f:be:5a:50:84:6e:6a:10:81:4b:8f:1e:9f:
8c:69:6b:16:31:4e:45:24:4c:8e:0a:d1:a8:61:db:
b0:20:b1:88:af:c0:bd:a0:13:cd:e1:a4:3c:76:34:
b0:08:fc:dd:db:b9:89:ed:c0:44:d6:b6:95:84:b3:
d9:70:72:71:ed:98:9d:f6:1b:89:c2:0e:79:b5:35:
b9:ba:03:7a:05:82:30:88:c6:3f:a4:36:92:2f:c2:
85:ec:96:03:46:9c:f6:49:30:91:b7:be:87:1b:54:
63:a0:28:27:12:24:7f:99:1f:fd:11:2b:e8:6d:0c:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:56:85:F6:FE:DF:EA:4E:E5:30:50:51:3D:38:C6:46:AE:5D:70
X509v3 Authority Key Identifier:
keyid:5C:D7:42:AB:39:FB:68:82:CC:6B:55:B8:36:C0:EB:14:66:A2:2F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNdCqzn7aILMa1W4NsDrFGaiL0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:63:8e:b6:f5:d5:45:d4:7a:68:7a:f3:1d:08:b6:95:5f:fc:
14:89:f8:ce:c5:c3:37:63:71:1f:3a:4a:12:de:5f:f0:c9:24:
0f:10:ef:fa:0d:a4:b0:09:49:ec:f4:ef:47:7d:0c:cf:a4:b0:
d4:be:54:d1:35:01:08:fc:37:d5:cd:ca:45:33:a5:07:bd:1c:
30:bf:af:63:76:50:66:65:3b:94:e2:b4:2a:d7:8b:df:dc:58:
76:33:13:24:e3:40:61:d2:6f:d3:cf:d9:10:36:71:e3:ea:36:
4d:cc:3a:3c:5e:84:47:28:50:62:78:c5:e0:98:0f:e6:1f:67:
95:79:9a:f9:c7:2e:2f:65:12:2e:6c:3c:8d:c6:91:86:cc:04:
01:32:4e:14:bc:30:90:d8:ed:32:dc:5f:b9:51:17:04:e3:aa:
9a:5e:42:bc:91:2a:48:3f:ee:6e:a0:fb:69:a6:b7:63:58:80:
6d:ce:79:4b:6e:2a:a7:f3:b2:0d:78:02:ea:13:be:48:e2:16:
6c:f5:75:25:42:a9:cb:e6:43:fc:ee:ed:8b:0b:e1:04:65:2e:
34:93:46:84:60:42:b5:87:7d:5a:be:90:5e:0f:74:24:14:35:
c5:89:1b:de:a5:a7:58:dc:16:c0:11:47:b7:1c:22:1f:b6:3f:
c7:21:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:42 2025 by rpki-client