Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/XSvcBbOGzcqZqhwmOOCX2fVKZBM.mft
File: XSvcBbOGzcqZqhwmOOCX2fVKZBM.mft (raw, json)
Hash identifier: bfHoMZ4P4BL43GwzEQxLSrImJ65b0i6u149a/6OEoeg=
Subject key identifier: 66:C4:CB:CF:C5:53:72:4A:A9:53:C0:94:36:3C:E7:7A:78:7D:23:EB
Authority key identifier: 5D:2B:DC:05:B3:86:CD:CA:99:AA:1C:26:38:E0:97:D9:F5:4A:64:13
Certificate issuer: /CN=5d2bdc05b386cdca99aa1c2638e097d9f54a6413
Certificate serial: 01943F22E9248C6C1E403481F66DC429FC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSvcBbOGzcqZqhwmOOCX2fVKZBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/XSvcBbOGzcqZqhwmOOCX2fVKZBM.mft
Manifest number: 03FE
Signing time: Tue 07 Jan 2025 05:00:39 +0000
Manifest this update: Tue 07 Jan 2025 05:00:39 +0000
Manifest next update: Wed 08 Jan 2025 05:00:39 +0000
Files and hashes: 1: XSvcBbOGzcqZqhwmOOCX2fVKZBM.crl (hash: 2tB4EhAVHjtgeNQMd78SGGYOx45tXkPf2EMoQaIqTLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:22:e9:24:8c:6c:1e:40:34:81:f6:6d:c4:29:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2bdc05b386cdca99aa1c2638e097d9f54a6413
Validity
Not Before: Jan 7 05:00:39 2025 GMT
Not After : Jan 8 05:00:39 2025 GMT
Subject: CN=66c4cbcfc553724aa953c094363ce77a787d23eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:6b:d7:37:46:ca:0c:3d:06:ab:bb:8c:e6:
8e:19:ad:1e:50:f5:b8:2e:9f:9c:73:4c:4a:09:4a:
f4:ae:4e:2e:71:4a:3f:30:92:d5:7f:19:8d:41:60:
93:19:71:58:41:ff:0b:75:d2:6f:b3:52:14:0a:2e:
ff:74:7d:d1:47:87:6e:f3:b9:1f:a8:f8:a5:ba:bb:
d5:fc:af:a2:0b:23:76:72:33:14:31:98:92:e3:3f:
f7:29:7d:53:bf:ea:3e:31:04:d3:a1:5a:a7:e4:cc:
1a:3d:91:4d:6e:9f:d4:26:bc:4c:09:c0:50:7c:b7:
b9:b8:db:dd:65:02:e4:77:2d:93:12:38:e2:24:a7:
eb:42:24:af:ee:d9:d3:fd:51:c5:23:75:80:24:b1:
8b:77:cb:40:c6:08:43:55:d0:74:bc:4d:ce:6a:32:
8b:8e:96:1a:42:d0:33:87:58:f6:19:6f:8d:b1:e3:
43:b0:4a:b9:26:b3:8b:54:53:57:71:66:1e:e7:3b:
41:e6:35:21:87:55:ea:98:e9:2d:61:6b:83:67:70:
c8:97:0f:dc:e8:05:95:9a:9c:f2:92:d7:e9:f2:89:
1b:d1:c2:b7:b1:df:76:59:d8:e4:57:81:e9:07:df:
15:bb:91:4b:8c:a8:51:9e:f5:9a:98:3f:93:cc:5b:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:CB:CF:C5:53:72:4A:A9:53:C0:94:36:3C:E7:7A:78:7D:23:EB
X509v3 Authority Key Identifier:
keyid:5D:2B:DC:05:B3:86:CD:CA:99:AA:1C:26:38:E0:97:D9:F5:4A:64:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSvcBbOGzcqZqhwmOOCX2fVKZBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/XSvcBbOGzcqZqhwmOOCX2fVKZBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/57b553-c778-4dc8-8a6a-0bf6cbcab70d/1/XSvcBbOGzcqZqhwmOOCX2fVKZBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9b:79:62:d4:c5:39:81:1e:69:c8:83:72:1e:32:6d:8f:8c:
58:1f:76:cf:c0:61:1b:61:f9:bb:00:9c:cb:62:da:f6:c5:6e:
4a:bf:26:8b:5c:ac:07:17:f6:40:8c:ba:73:ba:91:48:ba:8b:
d9:fe:6e:c9:57:57:2e:8d:91:15:94:73:90:54:55:9d:3b:d5:
fc:4e:52:2c:bb:0f:90:36:23:f4:26:a9:8e:e1:01:73:8b:3e:
e0:5e:2e:e3:42:49:a2:81:b1:75:2e:b5:ce:27:aa:57:d2:db:
bc:a9:a9:a6:e0:23:4f:60:77:f3:22:73:23:4a:6a:47:8c:f9:
54:c6:3e:07:59:75:b8:3b:03:0e:6f:f3:69:bb:70:01:8a:ec:
b2:78:81:1d:33:71:0d:f8:f6:38:50:e3:08:90:a0:63:7f:84:
5c:96:c1:ea:44:6e:68:1e:f2:d4:b7:f7:e0:83:ce:7e:33:29:
32:79:c1:b0:9c:52:25:17:e7:ac:bf:4e:e9:91:50:8f:72:58:
bd:a3:87:fe:a2:de:1c:69:aa:04:ec:f5:a7:ba:33:48:ae:a3:
3c:9f:a1:de:6e:f5:e8:b8:71:c4:2d:5f:b2:79:bc:10:c2:e9:
7b:20:94:89:12:92:0f:1d:06:c4:37:7d:cd:a8:22:09:af:df:
67:08:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:18:56 2025 by rpki-client