Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
File: xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft (raw, json)
Hash identifier: qAT9iZAT1AcNTxvK+DHkJPz1MmjUVR+RxSEPF3uBdLU=
Subject key identifier: 92:89:11:BC:8E:30:63:F2:57:EF:BA:D2:7E:36:14:9C:A8:F9:CF:4E
Authority key identifier: C6:8E:E4:F9:68:E6:0E:0D:3C:A8:87:F7:07:3D:C9:7E:A6:DF:44:4E
Certificate issuer: /CN=c68ee4f968e60e0d3ca887f7073dc97ea6df444e
Certificate serial: 0193D29000B00044945D8D6203E1A88EF516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7k-WjmDg08qIf3Bz3JfqbfRE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
Manifest number: 02AB
Signing time: Tue 17 Dec 2024 03:01:12 +0000
Manifest this update: Tue 17 Dec 2024 03:01:12 +0000
Manifest next update: Wed 18 Dec 2024 03:01:12 +0000
Files and hashes: 1: xo7k-WjmDg08qIf3Bz3JfqbfRE4.crl (hash: 07UzBjrNO9tvI7GrQr+WgSZxEfRHG3uex16j/jazhsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d2:90:00:b0:00:44:94:5d:8d:62:03:e1:a8:8e:f5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ee4f968e60e0d3ca887f7073dc97ea6df444e
Validity
Not Before: Dec 17 03:01:12 2024 GMT
Not After : Dec 18 03:01:12 2024 GMT
Subject: CN=928911bc8e3063f257efbad27e36149ca8f9cf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:aa:be:47:c8:ca:6d:59:fb:f3:f3:f9:1d:
62:7d:2f:59:31:0c:6c:0c:7d:17:c0:be:66:d6:ba:
95:9f:8f:de:54:52:6f:8d:c1:30:08:88:ff:3e:26:
ab:8d:8d:21:d3:c5:ca:8d:6f:50:e7:d0:03:34:b8:
82:d9:90:1c:58:c3:85:0d:4c:5f:a0:3c:2e:ce:6d:
ca:87:1d:9f:f5:9b:fd:b8:1d:02:6a:37:c6:3a:80:
4c:5a:00:9d:39:35:6a:b6:cb:f9:56:83:cf:3b:aa:
bd:1b:4c:f8:c7:53:c9:d1:6d:c5:8e:79:c2:da:07:
c2:28:de:51:24:b3:58:08:c7:ef:48:3f:b9:86:94:
d0:b4:10:79:55:4a:af:99:cd:59:a9:6a:82:43:72:
62:1b:4e:04:7e:d1:7b:96:31:64:e4:78:41:90:45:
12:25:36:ad:6a:a8:03:9d:f6:33:93:85:77:10:5f:
c4:d0:71:b4:7f:fd:09:09:66:f1:de:fd:b7:54:8e:
1f:f6:03:36:40:fa:19:fd:70:67:99:5e:50:74:3d:
9f:63:3c:91:e5:a9:ff:b0:85:f5:81:b1:8e:b8:53:
1f:be:6b:df:22:ea:25:41:13:13:76:02:5f:3e:ef:
0f:2d:18:bd:11:5f:68:6f:6d:1d:ac:15:63:b2:03:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:11:BC:8E:30:63:F2:57:EF:BA:D2:7E:36:14:9C:A8:F9:CF:4E
X509v3 Authority Key Identifier:
keyid:C6:8E:E4:F9:68:E6:0E:0D:3C:A8:87:F7:07:3D:C9:7E:A6:DF:44:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7k-WjmDg08qIf3Bz3JfqbfRE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:fe:6d:34:bd:3b:2e:85:4e:af:fe:04:e1:26:2d:53:7f:
c5:11:40:5d:e7:2d:da:bd:b1:e8:49:4b:36:9a:2d:f5:43:64:
48:38:a5:5e:a0:c0:c1:ab:db:a1:16:8a:ce:6b:4e:86:89:2f:
fa:5a:6e:18:c8:51:ef:a0:f0:d7:57:e0:16:92:8b:74:43:17:
c7:7e:ec:96:39:54:5b:ab:ac:81:8f:87:ba:05:71:0d:fe:39:
2a:31:d4:3d:a9:20:ae:97:36:98:07:7d:8d:a8:04:71:32:c9:
a3:db:ac:e7:42:53:c2:11:60:d6:bc:c2:f7:30:b0:9d:ef:c5:
5a:1e:9d:b8:89:91:bd:ab:7e:d2:a1:3c:0a:7b:e0:32:6e:4b:
5f:92:e1:41:42:13:e4:18:c3:d6:98:fc:f9:99:e2:ed:39:eb:
18:0a:b0:e2:a1:c2:00:9b:91:61:de:d7:26:c3:f8:1e:86:1b:
a4:04:1f:16:38:1c:48:16:35:94:98:0c:a5:0f:4f:ea:76:9f:
9e:40:2c:7a:39:ae:fc:f5:cc:dc:26:54:8d:7e:7d:84:cd:33:
6a:2b:8c:9b:d1:fa:e0:5f:03:4f:ed:3e:b4:06:14:b3:3c:87:
c2:31:ed:96:30:2b:fc:8b:fb:70:57:82:c1:22:94:7b:68:dc:
2a:9b:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:22 2025 by rpki-client