Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: YVN8jSIoDTwRtUYPPpMd4FSSZOHgAmvmgTy+Row0vy8=
Subject key identifier: 7F:73:84:FB:E7:3F:45:EC:A5:EE:B7:45:5F:35:F7:E5:28:CD:98:2B
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 0195E15A2A5DE552B0DD17EC8CD2D73DE46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 148E
Signing time: Sat 29 Mar 2025 10:02:17 +0000
Manifest this update: Sat 29 Mar 2025 10:02:17 +0000
Manifest next update: Sun 30 Mar 2025 10:02:17 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: 040aPyvtMFznWnoCFNrxjn3DOedViptlZOMxKaBahoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:2a:5d:e5:52:b0:dd:17:ec:8c:d2:d7:3d:e4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: Mar 29 10:02:17 2025 GMT
Not After : Mar 30 10:02:17 2025 GMT
Subject: CN=7f7384fbe73f45eca5eeb7455f35f7e528cd982b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:71:76:93:78:58:51:16:b4:29:ef:ee:22:
a0:ab:3b:66:3c:7a:76:c2:d5:33:ea:7c:0b:c8:59:
79:e0:95:08:11:2a:f0:9e:fd:01:e3:a2:c9:90:da:
74:b9:5b:19:d6:76:96:e3:8c:56:a4:43:f5:eb:c7:
a4:75:52:d1:ac:85:42:8d:1a:d5:ae:94:7e:9c:e2:
1d:69:67:be:38:25:4c:53:f0:f3:1e:55:07:db:89:
4f:f3:d6:7c:99:ea:c3:11:c2:4b:ac:44:f6:5a:36:
87:38:e7:2d:bd:a1:15:90:97:65:53:c1:92:9a:d1:
58:3e:9a:4c:4d:e9:61:ee:c9:03:9e:90:f7:ca:10:
c1:37:97:a0:4c:32:ae:db:7e:bd:51:de:cf:7e:34:
ca:90:bd:64:9e:a0:ec:99:dc:48:f3:26:a2:85:6f:
f7:bc:4b:0c:94:a8:1c:58:9c:34:a6:26:d1:97:42:
c2:73:04:9d:49:34:6e:23:0a:f9:bd:6f:b7:5a:c4:
f0:20:08:d3:28:04:91:dc:d9:5f:12:04:49:74:09:
88:e0:f0:d8:d4:89:3f:88:a8:73:94:c7:31:98:5f:
5e:49:5e:b0:07:06:d6:e3:1b:8f:42:51:88:66:b3:
a5:dc:7f:01:1b:99:50:ba:5a:61:82:31:03:4f:bc:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:84:FB:E7:3F:45:EC:A5:EE:B7:45:5F:35:F7:E5:28:CD:98:2B
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:5b:30:68:9a:7d:3e:54:c5:05:6b:2c:30:71:12:83:c7:
59:b1:9e:0d:f1:4e:0c:92:63:ad:2f:21:65:82:ab:ad:b8:41:
3b:ae:0f:14:da:cc:32:9a:18:d5:8e:56:07:7c:c8:4c:ff:a3:
90:69:ef:2d:c8:fd:33:82:3d:59:2d:d2:de:f8:da:53:60:a1:
4b:ed:64:4c:ef:1f:c8:49:0d:f8:a3:d7:7d:73:1a:dd:43:eb:
45:51:e8:41:6c:cb:8b:ea:03:ab:37:05:b5:98:e5:36:20:fb:
a1:f6:4e:c1:71:bd:b4:24:5e:50:a4:a0:d4:f9:9a:b2:f8:92:
f1:b5:d8:1a:25:67:ee:85:08:29:8e:c4:99:75:7e:2c:62:d6:
52:50:bc:e2:01:0a:98:d3:77:bd:e3:f1:4e:1d:d0:37:c4:8c:
23:49:a6:ef:6d:6e:40:9a:c2:a7:e4:da:cc:b5:f8:8e:53:51:
ab:89:8d:67:91:9b:6b:6f:cc:35:77:79:a0:ba:ec:65:4d:44:
e6:9d:f3:3e:86:ec:82:51:8a:46:da:3c:d6:5e:77:47:4d:36:
a4:ff:29:fc:29:09:7a:b4:2e:6b:3a:ea:65:6b:76:7b:40:55:
77:ad:b9:ea:0e:2d:ca:8a:15:05:08:4a:25:9b:b6:04:7c:d1:
1d:08:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:16:10 2025 by rpki-client