Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
File: xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft (raw, json)
Hash identifier: 2oydvZq9DVMdDurTNk06+x2GgzBl1N8Sc523z0CuWX0=
Subject key identifier: 22:C0:A0:E0:DE:1F:4D:E8:29:57:1A:8D:53:6F:23:53:D9:D3:4D:4B
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Certificate issuer: /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial: 01964368186D50327FFF85E6865E8B82590E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
Manifest number: 0550
Signing time: Thu 17 Apr 2025 11:00:17 +0000
Manifest this update: Thu 17 Apr 2025 11:00:17 +0000
Manifest next update: Fri 18 Apr 2025 11:00:17 +0000
Files and hashes: 1: xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl (hash: dQhj/w7UpsbApwaYA1OTdGjEIGCsA5KEpxssRuubRJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:18:6d:50:32:7f:ff:85:e6:86:5e:8b:82:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Validity
Not Before: Apr 17 11:00:17 2025 GMT
Not After : Apr 18 11:00:17 2025 GMT
Subject: CN=22c0a0e0de1f4de829571a8d536f2353d9d34d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:d3:7d:b7:a4:79:bb:6f:6a:20:cc:79:cc:
a5:f0:c1:08:6b:f5:30:fc:db:42:b6:d9:21:0c:be:
bf:19:da:06:25:5e:31:95:42:6e:ca:92:b6:9d:45:
55:c6:bc:a1:6f:5a:f9:53:35:31:9d:f2:69:1e:a0:
8e:55:ef:a0:55:0a:ba:5d:9b:f6:1d:cc:5a:a5:d9:
b5:26:82:a3:29:05:41:86:b0:4e:a2:8a:32:53:8d:
d5:50:90:41:74:2b:cc:3f:1f:54:a6:3f:bb:04:a6:
cb:b3:91:62:d5:87:30:4c:6c:7d:c0:79:66:d4:d3:
d8:e5:ec:0d:64:a7:fa:bf:d4:2e:0f:12:f7:70:8c:
94:db:0d:47:9e:52:95:91:e6:09:90:d5:d8:21:07:
5f:73:11:7f:3b:e6:d3:02:65:a1:ea:9a:72:da:b5:
d1:97:a0:a0:e4:db:86:0d:7e:1f:43:f1:4d:39:b5:
2e:db:83:14:72:51:bb:24:0e:0c:e9:83:7e:e0:4a:
d3:4e:03:c2:c8:ed:fb:6a:fd:23:01:00:83:9f:98:
96:9c:3f:fd:b4:41:cd:14:61:49:a4:d5:b3:60:77:
89:3c:46:a7:c2:5a:c7:0d:78:d0:34:f8:be:67:29:
f0:c2:41:1c:83:2f:24:e4:c4:27:2e:a6:6c:2c:e6:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C0:A0:E0:DE:1F:4D:E8:29:57:1A:8D:53:6F:23:53:D9:D3:4D:4B
X509v3 Authority Key Identifier:
keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cd:12:44:d4:84:e0:2a:a8:1c:be:6a:6c:8b:a6:89:d3:dd:
37:03:e2:ae:e7:9c:e6:f8:81:ad:c1:94:3b:41:15:95:0f:44:
fc:b8:b8:cc:2f:2f:1c:e5:63:8a:5f:71:12:d4:33:85:3c:07:
d6:ef:3a:2b:81:bc:03:5c:a3:a2:07:3a:d9:e6:e2:a6:dd:3b:
0d:41:88:fe:e3:cd:e5:b7:cd:71:87:4c:55:76:59:ba:64:8a:
06:ae:0d:e3:f6:98:89:3b:3f:65:b8:a5:aa:bd:2f:d6:1a:18:
b2:1d:d2:ee:7e:ef:43:aa:dc:6f:7a:17:d6:97:33:91:cd:65:
c3:70:aa:45:55:b7:3a:eb:30:a1:2c:0d:fa:6f:e7:0b:2b:f3:
b0:a7:5c:fb:ec:79:b6:11:d4:60:5f:e4:2e:de:bd:2a:da:ff:
b5:bf:d3:85:bf:b5:9a:6c:3b:4d:90:ba:71:0a:76:ff:70:29:
38:9b:67:11:a7:e7:63:34:8c:8f:22:2c:8d:7a:dc:17:93:86:
42:6e:0d:7b:b1:30:45:7d:e4:aa:34:e5:ed:23:6f:34:c2:b3:
8c:06:a1:1b:b9:d4:5a:92:38:4d:89:a9:96:4d:19:8c:ef:7b:
81:68:12:13:17:e3:08:41:90:04:aa:33:80:63:34:57:17:4a:
7e:ea:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:43 2025 by rpki-client