Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
File: xtAUTB5z3irxCab_ldDQl0s6ydg.mft (raw, json)
Hash identifier: ICW+Hq9EK/WREh7CODu26bdOkaiX5YpaV1lgbnAcD7M=
Subject key identifier: A0:82:F6:15:68:2C:88:2C:88:F3:F5:CB:30:C5:78:A3:E2:BF:0F:E0
Authority key identifier: C6:D0:14:4C:1E:73:DE:2A:F1:09:A6:FF:95:D0:D0:97:4B:3A:C9:D8
Certificate issuer: /CN=c6d0144c1e73de2af109a6ff95d0d0974b3ac9d8
Certificate serial: 0193CEB2E26065E1608C901AF0DD26DAC050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtAUTB5z3irxCab_ldDQl0s6ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
Manifest number: 02FA
Signing time: Mon 16 Dec 2024 09:00:49 +0000
Manifest this update: Mon 16 Dec 2024 09:00:49 +0000
Manifest next update: Tue 17 Dec 2024 09:00:49 +0000
Files and hashes: 1: xtAUTB5z3irxCab_ldDQl0s6ydg.crl (hash: Eu638Bz1jzDdtHSvujVB+1G1vINtuuDhqQDn5HVm4tU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:b2:e2:60:65:e1:60:8c:90:1a:f0:dd:26:da:c0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d0144c1e73de2af109a6ff95d0d0974b3ac9d8
Validity
Not Before: Dec 16 09:00:49 2024 GMT
Not After : Dec 17 09:00:49 2024 GMT
Subject: CN=a082f615682c882c88f3f5cb30c578a3e2bf0fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:15:b1:5e:0d:f1:b1:81:40:53:e1:23:82:
b3:58:71:67:08:a2:f4:2d:1b:86:11:54:99:10:af:
cb:b2:f9:60:2c:1f:39:7e:d6:1b:b6:d0:f4:01:3c:
3a:59:f9:98:a6:35:75:65:c0:f4:08:f0:23:b5:9b:
89:15:85:70:08:54:24:b1:09:81:66:0a:64:82:5d:
76:27:06:a3:44:d8:ee:09:e1:b4:d7:7e:a7:b3:d3:
73:54:46:6c:c8:0a:6d:39:d6:f6:c0:f2:52:b1:65:
f1:37:22:83:21:06:76:14:9c:45:f8:2a:bb:3d:43:
38:b4:b1:d0:ee:0d:47:dd:00:63:e0:8a:98:71:02:
ab:c7:b9:01:88:ca:eb:d4:be:e1:9e:87:c1:b2:4e:
a6:e5:3f:86:73:32:4f:34:e6:43:69:34:62:e3:5f:
82:72:8d:77:06:b6:74:c6:16:93:8e:c8:42:43:d9:
cd:ac:67:f6:97:4d:d0:d6:48:b4:c2:05:33:f9:71:
ef:a8:e5:61:d6:5b:dc:b7:41:fb:d3:a2:f9:da:6b:
f0:88:80:f6:c4:41:b6:7b:ab:c9:a6:69:86:ed:e1:
3e:4e:7f:25:88:e8:fd:69:e7:c7:b7:8a:09:b7:64:
a0:8f:09:ac:ee:cb:8b:32:39:41:1a:8c:42:7d:86:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:82:F6:15:68:2C:88:2C:88:F3:F5:CB:30:C5:78:A3:E2:BF:0F:E0
X509v3 Authority Key Identifier:
keyid:C6:D0:14:4C:1E:73:DE:2A:F1:09:A6:FF:95:D0:D0:97:4B:3A:C9:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtAUTB5z3irxCab_ldDQl0s6ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c6:17:9d:81:44:d9:96:b6:73:27:40:e0:83:d9:77:68:26:
08:e2:1d:cf:c0:e0:3f:05:9a:14:3b:13:e9:08:ce:e4:70:a1:
c2:ed:18:06:d6:65:69:df:ac:63:65:78:1c:df:bb:24:34:9c:
28:46:a9:62:ae:c7:45:13:ca:70:46:d4:3f:81:ca:0c:91:9e:
57:32:9b:ab:40:8a:d2:4c:a7:b4:5b:db:c7:9f:88:70:a8:bb:
a6:f5:39:67:cf:9c:cf:5e:42:6a:13:e4:b7:92:66:d3:73:ad:
ea:e1:97:a2:23:53:01:10:5d:ee:5a:1c:0c:60:2d:fc:0d:7b:
04:bd:dd:4b:c7:b8:53:53:97:b8:79:d9:e6:db:36:35:71:72:
82:e4:9c:b9:13:33:fa:ef:0d:00:77:f8:d9:df:c7:8b:88:97:
9c:75:16:83:72:0e:07:cc:ac:39:42:8e:79:4f:7e:6b:c5:cb:
4d:f8:c3:ef:6b:dc:68:49:38:22:50:7d:86:43:3c:67:7f:e9:
e5:55:ca:ee:cd:83:7f:c9:be:9e:af:1f:f0:01:97:dc:b9:83:
48:1f:9b:38:65:5a:5e:91:b0:6c:f5:78:fa:92:90:98:c0:78:
fe:e8:09:03:93:07:13:4c:93:dd:05:b5:98:33:ea:f2:0a:91:
75:9d:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:02 2025 by rpki-client