Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
File: xgFrbMmH1H-VES1qQ_OHsShaM28.mft (raw, json)
Hash identifier: QWzd4BDlbhkMCP5Bzct7fNux9+YzQ63tiv63H2cYnxk=
Subject key identifier: D2:00:A4:C9:8D:AF:53:5D:D6:B0:63:58:55:9A:D1:9E:FE:13:80:F1
Authority key identifier: C6:01:6B:6C:C9:87:D4:7F:95:11:2D:6A:43:F3:87:B1:28:5A:33:6F
Certificate issuer: /CN=c6016b6cc987d47f95112d6a43f387b1285a336f
Certificate serial: 0195A130AE57E57D14A3AA14EA6179551EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgFrbMmH1H-VES1qQ_OHsShaM28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
Manifest number: 0357
Signing time: Sun 16 Mar 2025 23:01:16 +0000
Manifest this update: Sun 16 Mar 2025 23:01:16 +0000
Manifest next update: Mon 17 Mar 2025 23:01:16 +0000
Files and hashes: 1: xgFrbMmH1H-VES1qQ_OHsShaM28.crl (hash: tzYpH7ubS4umC8aZf/LoE3iemAfKgfxfHUDi+PFz/2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a1:30:ae:57:e5:7d:14:a3:aa:14:ea:61:79:55:1e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6016b6cc987d47f95112d6a43f387b1285a336f
Validity
Not Before: Mar 16 23:01:16 2025 GMT
Not After : Mar 17 23:01:16 2025 GMT
Subject: CN=d200a4c98daf535dd6b06358559ad19efe1380f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:d3:28:b2:ff:86:3b:7d:79:3f:b2:d5:43:
2f:9e:56:a0:c3:76:c8:21:55:96:8c:1a:85:55:fd:
81:7b:56:2f:a5:11:45:cc:d3:61:b2:97:46:b0:32:
80:78:b2:6a:82:3e:cf:78:21:97:b7:b7:c7:64:3c:
de:90:23:2d:64:e8:f0:3c:bc:ef:5a:d9:33:90:5f:
b6:2a:4a:d0:4e:37:21:f8:0b:65:d8:0f:c3:cc:76:
76:d1:90:67:75:82:f9:31:5f:f1:b2:b6:fb:24:29:
37:7e:cf:4a:4a:83:04:40:51:65:f7:12:48:74:4c:
22:09:85:c6:ab:ff:f2:70:26:3a:ee:11:05:cf:af:
8c:94:a3:45:93:ce:f0:a5:56:bd:5c:be:fd:9d:cb:
5f:d5:a8:1f:ba:4a:81:ba:5d:87:26:2e:b2:96:fa:
9c:70:90:54:e9:68:67:5b:f3:4f:b8:fd:81:90:66:
bc:20:56:77:c5:f4:dd:e4:fc:f2:45:9a:2c:bf:b0:
49:f1:38:bc:8e:a0:e2:87:e5:d1:9d:2e:26:c9:93:
ba:8f:2c:44:58:0f:97:29:56:64:78:43:a6:7f:7c:
c5:a2:10:28:f4:6d:f9:a0:17:6b:45:b6:c8:51:ea:
50:e9:9d:9a:a1:33:2f:ff:d1:a0:92:80:14:29:08:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:00:A4:C9:8D:AF:53:5D:D6:B0:63:58:55:9A:D1:9E:FE:13:80:F1
X509v3 Authority Key Identifier:
keyid:C6:01:6B:6C:C9:87:D4:7F:95:11:2D:6A:43:F3:87:B1:28:5A:33:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgFrbMmH1H-VES1qQ_OHsShaM28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:21:97:40:ba:da:6f:39:24:63:73:2b:97:2c:43:c5:fa:ee:
da:12:8b:3a:8e:af:fa:58:30:1d:11:2b:88:49:2d:d2:8f:05:
72:a7:44:90:28:f7:31:e3:c1:f2:f1:21:1b:1e:73:33:d0:6c:
5e:c5:98:24:18:fb:b4:4b:3e:99:59:ed:77:f5:8b:d7:af:8e:
f7:cc:7a:63:5d:da:79:47:35:c8:e1:f3:30:8d:37:31:f0:a6:
9b:5d:1b:f2:92:08:4c:35:33:0c:78:27:21:74:96:ab:bc:42:
22:f5:82:1c:b6:80:9f:24:1d:c0:0b:54:88:bd:b3:99:98:43:
cd:5b:aa:5f:ce:26:70:56:c7:14:59:14:96:52:04:9a:48:b7:
3b:a6:b8:1c:21:60:6e:1e:62:e7:46:c3:66:c2:f9:d1:f8:b7:
c5:1c:71:0f:44:70:7d:a2:da:b1:eb:fb:ef:aa:2a:57:39:67:
25:3b:d4:92:b7:28:7f:08:c1:6f:6b:59:a9:74:38:9b:f4:7c:
a8:10:50:f0:81:37:a6:4e:a9:87:fe:31:9b:fe:a4:33:6e:a0:
2d:34:3c:37:34:7c:51:dd:91:18:e7:66:b5:be:64:16:c5:5a:
f6:27:85:c9:6c:e5:a3:18:8b:08:ac:6a:c5:0f:3f:0a:0b:0a:
bc:b6:71:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:42:25 2025 by rpki-client