Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/795c5d-4883-493b-9ca2-3d3ff2b0a40a/1/X1qzX2t4uN4Vz18IKsnDN5zwhPM.mft
File: X1qzX2t4uN4Vz18IKsnDN5zwhPM.mft (raw, json)
Hash identifier: oYA6ky0Oaa6Co+fnIDoBreg6/cf87v+tUwHvbmv9iYE=
Subject key identifier: 1F:C3:16:13:20:69:CB:CF:18:FB:E5:C9:08:E9:7E:98:3F:1F:49:9C
Authority key identifier: 5F:5A:B3:5F:6B:78:B8:DE:15:CF:5F:08:2A:C9:C3:37:9C:F0:84:F3
Certificate issuer: /CN=5f5ab35f6b78b8de15cf5f082ac9c3379cf084f3
Certificate serial: 018C57AD983A5C146DE519152F0D4A96ABD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1qzX2t4uN4Vz18IKsnDN5zwhPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/795c5d-4883-493b-9ca2-3d3ff2b0a40a/1/X1qzX2t4uN4Vz18IKsnDN5zwhPM.mft
Manifest number: 0E50
Signing time: Mon 11 Dec 2023 07:00:43 +0000
Manifest this update: Mon 11 Dec 2023 07:00:43 +0000
Manifest next update: Tue 12 Dec 2023 07:00:43 +0000
Files and hashes: 1: X1qzX2t4uN4Vz18IKsnDN5zwhPM.crl (hash: EnDZb3RCfi3oHmJ2kVxJfp35rsLzy24W4l+Gq/R7wcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:ad:98:3a:5c:14:6d:e5:19:15:2f:0d:4a:96:ab:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ab35f6b78b8de15cf5f082ac9c3379cf084f3
Validity
Not Before: Dec 11 07:00:43 2023 GMT
Not After : Dec 12 07:00:43 2023 GMT
Subject: CN=1fc316132069cbcf18fbe5c908e97e983f1f499c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:cd:f5:cb:6f:f0:be:4d:cb:58:61:e0:30:
c2:ae:ad:fa:31:dd:bd:c0:3a:9f:5c:83:f0:17:ec:
60:10:3f:f1:cb:19:b5:74:e2:6b:30:d2:f9:c1:df:
a3:3b:6b:45:a8:99:69:87:e7:31:23:f4:41:60:46:
bb:c9:86:be:ef:cd:2a:f6:e6:c9:96:8a:aa:1a:92:
be:03:99:92:d5:d7:71:78:61:4f:c9:a1:a4:7e:f3:
da:ad:47:76:93:7c:f7:7a:e2:6f:5f:fc:e1:27:f2:
1a:fd:26:83:06:2e:e6:8a:6a:d8:4b:69:44:68:33:
6f:a7:ca:e5:b7:0d:05:51:03:9e:1f:73:d2:84:1c:
52:8a:14:f7:6a:b0:04:1a:6f:cb:3f:8f:ee:05:6c:
2b:f6:ad:9b:30:ef:d2:04:65:df:a2:d2:f2:7e:b6:
51:bf:2d:3c:a0:47:7d:80:6c:84:ae:1d:32:f5:9c:
23:ca:cf:fb:22:44:4b:5d:66:d0:7b:4d:42:ce:54:
10:db:d2:e6:fd:60:dc:4a:df:a7:d1:96:f7:a1:62:
a7:50:0b:77:96:5c:4d:a3:c0:42:0a:1d:71:61:66:
48:7d:94:16:d4:e4:42:b6:3c:f0:7f:b7:c3:3b:78:
c2:6a:b7:06:6c:9c:e7:e2:d2:88:eb:38:23:f2:4b:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:16:13:20:69:CB:CF:18:FB:E5:C9:08:E9:7E:98:3F:1F:49:9C
X509v3 Authority Key Identifier:
keyid:5F:5A:B3:5F:6B:78:B8:DE:15:CF:5F:08:2A:C9:C3:37:9C:F0:84:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1qzX2t4uN4Vz18IKsnDN5zwhPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/795c5d-4883-493b-9ca2-3d3ff2b0a40a/1/X1qzX2t4uN4Vz18IKsnDN5zwhPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/795c5d-4883-493b-9ca2-3d3ff2b0a40a/1/X1qzX2t4uN4Vz18IKsnDN5zwhPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:bc:57:6b:9d:5b:f3:47:07:3a:31:d4:08:84:f5:b2:04:
a0:b4:05:e8:ca:9f:e0:79:ab:33:24:ed:52:48:3c:b7:17:94:
f4:82:77:b8:84:c3:c3:d7:f5:34:ff:fd:e9:69:57:c1:33:c7:
c9:3c:6a:df:85:23:e3:ab:2a:43:a6:1d:cd:a1:0a:65:8a:49:
25:b8:13:80:ef:31:c4:fe:8a:37:85:a6:8a:18:68:8c:e3:c0:
16:d1:a4:02:e8:a6:73:48:de:27:98:26:c7:6b:5b:29:20:87:
4a:01:7c:5f:1b:13:7b:e1:30:67:f4:e5:38:75:9e:a6:ff:86:
8f:2d:23:33:32:c3:c0:44:8b:5b:2d:96:41:be:c0:87:81:3a:
9c:ba:fe:bb:f9:b6:92:a7:e5:6b:1f:98:e3:60:37:b6:8a:42:
14:7a:39:cb:0a:6f:54:dc:a2:2a:53:35:b5:f9:2f:10:39:07:
39:3b:b4:b5:e6:7a:cb:e4:96:7e:4d:a6:95:e2:c5:30:c6:b4:
5d:73:e3:3e:a1:72:41:53:c4:0d:59:78:f3:3f:26:81:5a:bc:
08:8d:51:20:c5:1e:94:1e:65:3c:e6:4e:1f:6b:19:0f:3e:8f:
2a:2a:ba:ec:f9:db:b4:b7:19:3a:fa:d2:8b:f8:ca:fa:66:ad:
98:35:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:46 2025 by rpki-client