Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
File: XtXKWxx3mVWyVz2isQzXxZH57hs.mft (raw, json)
Hash identifier: Jp1gcLeWi2dSnVPUNOpe+6qrvnCS157ipQYXXHKA+Qs=
Subject key identifier: 80:8D:30:0B:C7:34:8F:D5:1E:22:CD:C3:45:E0:86:62:89:EA:8E:B0
Authority key identifier: 5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
Certificate issuer: /CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Certificate serial: 0197108C38EE27EDED5983B80B9B8ED2C4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
Manifest number: 0AA0
Signing time: Tue 27 May 2025 07:01:54 +0000
Manifest this update: Tue 27 May 2025 07:01:54 +0000
Manifest next update: Wed 28 May 2025 07:01:54 +0000
Files and hashes: 1: XtXKWxx3mVWyVz2isQzXxZH57hs.crl (hash: sFIugbv1SOF/FMXHnXw8PFhk24xx/lObZernn1Spj94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:8c:38:ee:27:ed:ed:59:83:b8:0b:9b:8e:d2:c4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Validity
Not Before: May 27 07:01:54 2025 GMT
Not After : May 28 07:01:54 2025 GMT
Subject: CN=808d300bc7348fd51e22cdc345e0866289ea8eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:89:dd:a8:4f:a0:18:9d:7c:ff:a2:33:8a:
94:4a:bb:56:69:1d:c7:87:97:31:eb:53:48:e9:90:
85:07:8a:dc:22:a9:e9:06:82:2e:87:5a:fe:71:70:
9f:d0:75:63:91:7e:90:a4:91:f4:8e:5a:ac:40:60:
ce:51:e4:7c:27:b2:38:3e:53:8a:26:31:69:ce:26:
1b:cb:25:0a:29:dd:ab:e6:40:bc:c6:67:5f:ba:f7:
c6:18:90:06:77:0c:86:e3:80:18:5b:dd:92:c7:66:
2c:6a:69:f1:06:cb:e2:dd:58:3e:05:9b:85:1b:e5:
e6:bc:83:cb:1d:5a:f5:b3:16:d9:4a:81:c8:b7:8d:
ec:7c:68:ee:e8:ba:4c:a5:c8:29:e4:1d:db:1d:bd:
2a:19:b3:87:4f:c9:0a:bc:8b:97:39:0d:59:25:ba:
1c:3b:09:1c:56:dd:0f:f8:0c:a3:f0:49:4d:7a:18:
83:83:2f:d1:a1:9d:8b:c4:55:44:e8:e7:2e:b3:6d:
71:20:5a:b2:1a:af:8b:b7:f7:be:4c:e4:8c:15:39:
aa:28:6b:28:21:3d:c1:0b:3b:24:c5:31:a0:d7:33:
09:71:23:69:be:ca:29:9d:c5:05:6a:4a:aa:d1:43:
b8:02:0d:ca:ba:87:52:6f:f4:f7:f8:72:93:8d:2f:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8D:30:0B:C7:34:8F:D5:1E:22:CD:C3:45:E0:86:62:89:EA:8E:B0
X509v3 Authority Key Identifier:
keyid:5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ba:4a:94:40:8a:37:50:af:b7:0a:87:b0:6a:05:15:07:98:
3e:a4:b8:36:a1:a6:30:a5:1f:e6:4f:79:f7:8e:6a:ec:76:c3:
fa:d6:7e:e7:e3:95:87:95:57:31:1d:b7:97:d7:b2:a8:6e:ec:
13:aa:4a:9f:f0:17:fb:8a:4d:27:25:6d:34:cd:c2:ab:59:88:
a8:c4:a3:16:f3:d9:d8:7d:71:25:87:9b:7d:7d:b5:cc:73:91:
c4:50:f4:26:aa:79:13:dd:7e:c9:68:82:03:86:92:fa:67:3d:
1e:6f:d2:5d:8b:a3:ec:8d:f7:cc:92:30:21:61:9b:82:15:d3:
5f:fc:31:0e:c4:18:41:43:ea:42:bd:6b:0e:aa:59:24:35:c8:
3d:a1:2c:03:67:6d:39:0c:40:9b:a1:84:3d:60:0a:0d:65:57:
5c:ec:99:44:98:17:70:4e:ea:ae:f8:de:13:ea:b0:39:bb:5e:
3d:9a:ae:5b:d4:44:da:80:8c:35:3b:2a:a0:d3:32:c0:fd:18:
01:9b:10:c8:f2:63:76:d4:a6:99:9b:36:f3:74:a5:93:38:8f:
98:9a:91:2a:fe:87:f0:fa:99:93:78:2d:0b:54:83:2d:38:b1:
fa:7d:91:60:36:1f:fd:79:fa:d4:44:ec:ee:1f:b7:a2:ba:71:
f7:34:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:50:01 2025 by rpki-client