Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c07cbe-9b0f-4382-b054-7592d289b289/1/x0FhWaiFfMXeEmj_lfTizmFZVUs.mft
File: x0FhWaiFfMXeEmj_lfTizmFZVUs.mft (raw, json)
Hash identifier: RwyjTqrBYNFjYc3yJ9KUNK9KxV+gCwlMHv6x/MTmJyI=
Subject key identifier: F7:47:32:7C:02:CF:BC:B8:78:12:FA:C7:4B:4A:FB:7A:7B:6C:91:2A
Authority key identifier: C7:41:61:59:A8:85:7C:C5:DE:12:68:FF:95:F4:E2:CE:61:59:55:4B
Certificate issuer: /CN=c7416159a8857cc5de1268ff95f4e2ce6159554b
Certificate serial: 0194B6DEEF38138376A6874FDA6C1FDDDC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0FhWaiFfMXeEmj_lfTizmFZVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c07cbe-9b0f-4382-b054-7592d289b289/1/x0FhWaiFfMXeEmj_lfTizmFZVUs.mft
Manifest number: 0A25
Signing time: Thu 30 Jan 2025 11:00:50 +0000
Manifest this update: Thu 30 Jan 2025 11:00:50 +0000
Manifest next update: Fri 31 Jan 2025 11:00:50 +0000
Files and hashes: 1: x0FhWaiFfMXeEmj_lfTizmFZVUs.crl (hash: k250Gx4FQgkopgcTIba5nAwjrxEDpJdHpQO9l8NcmcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:de:ef:38:13:83:76:a6:87:4f:da:6c:1f:dd:dc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7416159a8857cc5de1268ff95f4e2ce6159554b
Validity
Not Before: Jan 30 11:00:50 2025 GMT
Not After : Jan 31 11:00:50 2025 GMT
Subject: CN=f747327c02cfbcb87812fac74b4afb7a7b6c912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:b0:f6:a9:2a:32:8d:9b:66:42:27:7d:87:
be:50:78:06:a6:6e:f8:a5:d2:77:d3:cb:c9:5c:9d:
29:aa:13:fe:e8:a3:53:48:3c:b0:c7:73:3a:94:66:
12:b7:e9:f2:cf:71:45:97:06:62:b2:4a:88:9d:93:
65:dd:d6:19:db:3a:d5:ba:9e:47:49:e2:6b:86:50:
62:36:67:30:43:cb:11:ef:3f:b6:97:bb:90:01:c5:
85:60:8a:85:3f:5d:a7:52:d3:2e:3f:81:32:dc:cc:
e6:2c:c7:66:83:84:95:a3:db:d6:e9:f8:a7:ce:82:
a1:95:fc:a0:0b:89:4b:36:79:a9:49:7f:4c:67:3d:
40:84:be:c5:d2:0a:c7:c3:89:e5:1b:4f:a0:0e:86:
a6:41:6a:d1:e0:d5:82:bc:69:87:a2:aa:49:16:83:
9b:de:39:05:fd:e4:c5:6d:d5:cf:8f:b3:9f:60:4e:
76:e6:72:48:e1:81:1a:30:2d:e4:09:00:df:c8:00:
73:93:a9:03:b1:01:d1:bd:d2:a5:2e:d2:c9:41:58:
9a:63:8f:9b:14:15:f3:70:82:18:a5:73:c0:48:5f:
bc:eb:09:b9:30:2a:75:7c:99:0a:fe:a8:71:38:ec:
af:c1:5a:61:85:87:af:22:04:06:ad:cd:b0:84:42:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:47:32:7C:02:CF:BC:B8:78:12:FA:C7:4B:4A:FB:7A:7B:6C:91:2A
X509v3 Authority Key Identifier:
keyid:C7:41:61:59:A8:85:7C:C5:DE:12:68:FF:95:F4:E2:CE:61:59:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0FhWaiFfMXeEmj_lfTizmFZVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c07cbe-9b0f-4382-b054-7592d289b289/1/x0FhWaiFfMXeEmj_lfTizmFZVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c07cbe-9b0f-4382-b054-7592d289b289/1/x0FhWaiFfMXeEmj_lfTizmFZVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f9:cb:d7:62:bf:71:2f:62:10:f7:0a:cb:7b:ae:9e:c3:65:
7b:22:67:94:89:c5:3e:d0:79:b4:a7:e7:9b:f0:b4:da:d6:b7:
26:32:09:95:be:e2:ed:f4:a9:26:f2:11:d0:a5:6e:1c:2a:77:
4c:a2:c1:32:1c:71:69:5b:3e:f9:04:0e:b4:28:0f:43:3a:c6:
e5:01:82:ec:8b:06:5f:d8:27:8f:d9:88:bb:ad:d7:f1:3d:9e:
8f:a1:82:68:06:a9:85:ae:09:2c:64:5d:88:ed:9f:27:db:46:
35:5f:15:9a:79:d2:3d:c6:b9:20:c1:64:af:e2:fb:ec:f2:6d:
d2:2b:d0:aa:de:93:82:94:10:5f:73:28:c3:35:dd:4a:a6:cc:
21:59:27:4f:08:e5:7c:87:68:29:3e:29:35:08:11:ce:b9:03:
af:d2:ab:d4:a9:c0:f5:d8:2d:93:0b:69:c8:21:d1:a0:27:c6:
37:65:07:05:d4:58:32:0d:1f:4b:c2:7a:3d:64:5f:f4:5f:00:
97:ea:5f:0b:c6:86:84:2e:15:e3:6b:ce:06:24:4a:64:08:16:
b5:a5:41:46:50:fe:02:c8:8d:26:78:ec:58:fb:15:a6:bc:91:
41:4f:91:0d:a3:df:64:08:5e:a0:fe:4e:1e:83:e2:7f:86:98:
87:92:53:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:54:02 2025 by rpki-client