Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft
File: xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft (raw, json)
Hash identifier: gskvQ5Q599x6YEz7g+fI3gtnWFBcaXiuNMSZBzKiwnY=
Subject key identifier: D6:12:12:E8:F6:C6:02:17:65:C8:70:5D:C3:CA:F1:D9:AD:3E:03:12
Authority key identifier: C4:A5:33:03:AA:2E:DC:8C:64:49:78:02:11:6A:C9:F0:38:81:FD:89
Certificate issuer: /CN=c4a53303aa2edc8c64497802116ac9f03881fd89
Certificate serial: 01957EA3E977A98435713157F22ABBA93E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft
Manifest number: 104B
Signing time: Mon 10 Mar 2025 06:00:26 +0000
Manifest this update: Mon 10 Mar 2025 06:00:26 +0000
Manifest next update: Tue 11 Mar 2025 06:00:26 +0000
Files and hashes: 1: xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.crl (hash: Y9FeP/8HATdYSRWzNad82JnadYPgdS+Wd14bz44rEXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:a3:e9:77:a9:84:35:71:31:57:f2:2a:bb:a9:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a53303aa2edc8c64497802116ac9f03881fd89
Validity
Not Before: Mar 10 06:00:26 2025 GMT
Not After : Mar 11 06:00:26 2025 GMT
Subject: CN=d61212e8f6c6021765c8705dc3caf1d9ad3e0312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:79:44:7e:cd:20:36:2d:ea:f7:b7:98:77:
d9:79:5a:53:66:df:09:12:c0:1a:46:2b:d0:b9:63:
52:30:58:33:44:a0:db:81:8b:7a:17:0f:b3:92:f0:
11:77:b1:24:3d:7e:f5:59:73:9a:0f:1b:42:fc:3f:
0f:dc:f7:3c:1f:51:7b:8f:a2:c4:45:04:4e:90:ae:
ed:f1:74:bc:dc:95:67:85:97:d2:64:96:c6:c7:c2:
a8:68:b3:d2:d7:57:d6:24:d6:51:a7:e6:11:28:c5:
42:09:83:d9:54:a0:07:81:62:ef:55:dd:ab:b1:c2:
71:fa:2e:95:9b:9c:ea:89:1c:ef:8c:d5:80:f8:9a:
24:e8:89:a3:0a:61:76:5e:1f:f5:c9:76:6c:91:22:
28:c6:bd:67:22:9c:82:b5:14:d7:b9:9a:a2:ca:60:
8f:b7:54:4a:d3:5b:57:29:bf:30:4f:1c:f3:03:50:
e1:c9:d2:13:a6:bb:00:42:e8:98:ca:f6:96:cf:c8:
4c:e3:ee:fc:c6:2a:50:96:85:64:46:63:4e:ef:90:
54:37:32:e3:38:87:83:21:e1:85:ef:85:4a:6b:08:
d8:aa:4b:c8:3d:9f:a6:b3:d6:b3:4d:1e:76:9c:2e:
46:b3:c9:6a:9d:39:53:7a:37:ee:00:b2:c3:24:60:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:12:12:E8:F6:C6:02:17:65:C8:70:5D:C3:CA:F1:D9:AD:3E:03:12
X509v3 Authority Key Identifier:
keyid:C4:A5:33:03:AA:2E:DC:8C:64:49:78:02:11:6A:C9:F0:38:81:FD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:16:cb:9d:72:e5:1e:22:ee:4d:56:c7:18:9e:4d:10:48:28:
18:b5:80:9d:d0:5a:e4:07:74:70:c5:a1:b7:07:cf:48:a9:66:
c3:e0:1a:a6:c2:e8:3f:18:9e:7b:01:e2:29:19:1d:21:4a:fe:
37:05:79:0e:9c:ff:b5:9c:49:ca:6c:e4:e2:a5:cb:cf:a7:d7:
ba:e7:59:a3:9d:c3:5c:e3:ba:90:16:a4:3e:27:e8:71:74:a2:
ea:1a:9d:86:96:ae:e9:44:c8:bf:20:55:16:3e:a3:1a:83:f0:
5e:d4:ac:f9:bd:35:35:ce:7d:82:d7:30:b1:0f:8e:2c:7d:1f:
a0:a1:3a:5c:e7:6f:4b:7a:b1:3e:59:6a:9f:51:f4:e3:53:37:
74:9c:80:5b:bd:cc:94:52:46:2d:78:a3:d4:19:82:a6:21:06:
4e:81:bf:76:e0:bd:61:a4:82:85:d5:b5:02:e2:c4:77:4b:ff:
87:09:bc:c0:1b:39:49:4c:6b:5b:6a:71:a1:c1:bb:14:28:28:
1f:3f:95:0c:e6:0b:97:95:ff:c4:4f:50:3e:68:4a:41:c1:45:
f4:98:56:9c:b2:d4:b6:ba:59:90:e0:86:8a:7e:7d:2a:30:ba:
d6:dc:e2:3a:a5:cf:72:45:a3:e1:0b:b2:5a:cc:0d:90:45:d1:
1d:28:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:18 2025 by rpki-client