Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d7210f-f77e-41b5-9144-b851e161d27d/1/xN6HQE-icfyVPkr1vSmsWvvuZ5I.mft
File: xN6HQE-icfyVPkr1vSmsWvvuZ5I.mft (raw, json)
Hash identifier: euNX+AXrTkteNRwOZCNPODrXL5Bs5SIQYrOPU+7kTSw=
Subject key identifier: 1A:12:81:11:69:7A:C5:08:26:6C:E7:86:A9:75:75:A1:24:B4:BA:78
Authority key identifier: C4:DE:87:40:4F:A2:71:FC:95:3E:4A:F5:BD:29:AC:5A:FB:EE:67:92
Certificate issuer: /CN=c4de87404fa271fc953e4af5bd29ac5afbee6792
Certificate serial: 0194AE1293BA358D87C934F266E7747ACE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN6HQE-icfyVPkr1vSmsWvvuZ5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d7210f-f77e-41b5-9144-b851e161d27d/1/xN6HQE-icfyVPkr1vSmsWvvuZ5I.mft
Manifest number: 22
Signing time: Tue 28 Jan 2025 18:00:40 +0000
Manifest this update: Tue 28 Jan 2025 18:00:40 +0000
Manifest next update: Wed 29 Jan 2025 18:00:40 +0000
Files and hashes: 1: xN6HQE-icfyVPkr1vSmsWvvuZ5I.crl (hash: szdrsuMiR9ekwyzRsth7apa04TqOu3THOFHETUYK0bY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ae:12:93:ba:35:8d:87:c9:34:f2:66:e7:74:7a:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4de87404fa271fc953e4af5bd29ac5afbee6792
Validity
Not Before: Jan 28 18:00:40 2025 GMT
Not After : Jan 29 18:00:40 2025 GMT
Subject: CN=1a128111697ac508266ce786a97575a124b4ba78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:58:f1:71:1f:86:37:e2:b7:3e:a6:42:36:
f7:49:09:e9:f2:05:a3:75:08:2e:63:b9:f5:bc:43:
b8:d6:b4:e9:47:11:cc:de:ff:86:65:24:7a:ae:e2:
71:07:f9:a6:30:29:29:c3:a0:95:85:d1:6e:bf:94:
9a:61:72:b4:26:f4:fc:12:3f:ad:4d:e5:75:0d:d0:
f8:37:d2:12:83:75:79:97:d5:60:88:c3:3c:db:90:
45:7f:70:9d:8d:f7:6b:7c:31:4d:ea:17:5e:1e:ec:
ee:97:50:e5:e0:ab:78:09:d4:ad:37:69:0d:1d:58:
49:82:a8:e8:89:35:b9:f6:b8:f2:9a:b9:db:44:eb:
e5:07:ad:28:e5:32:ff:6f:ea:1a:42:b6:39:6d:be:
ca:6f:78:fa:ef:f2:ae:9c:a6:81:b9:64:ee:6d:55:
5e:d2:46:29:2b:45:14:8f:da:b6:ae:2a:20:1a:be:
83:d0:30:ad:1c:5d:e3:b7:c9:2f:1b:2e:62:44:07:
cf:fd:9d:fb:6d:34:aa:69:9a:91:fe:fe:1f:6a:18:
b6:15:a8:4c:29:d4:d4:2c:f7:f2:46:b9:a7:67:66:
3f:a2:c0:3e:5d:ca:2f:84:68:0f:11:bd:f6:87:40:
b5:76:cf:41:07:b5:0a:91:24:bc:3a:9b:06:d2:24:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:81:11:69:7A:C5:08:26:6C:E7:86:A9:75:75:A1:24:B4:BA:78
X509v3 Authority Key Identifier:
keyid:C4:DE:87:40:4F:A2:71:FC:95:3E:4A:F5:BD:29:AC:5A:FB:EE:67:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN6HQE-icfyVPkr1vSmsWvvuZ5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d7210f-f77e-41b5-9144-b851e161d27d/1/xN6HQE-icfyVPkr1vSmsWvvuZ5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d7210f-f77e-41b5-9144-b851e161d27d/1/xN6HQE-icfyVPkr1vSmsWvvuZ5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f1:65:69:cd:f8:ef:94:53:22:48:7e:5c:ea:1c:93:97:bd:
80:84:bb:d5:5d:fb:26:37:8d:09:46:49:0a:36:c1:da:38:e5:
36:2d:e9:34:e9:94:fe:84:4f:fe:17:54:c8:86:c4:5d:a7:40:
a8:00:46:29:e1:97:db:1c:51:46:a5:9e:20:7f:1d:23:b8:03:
3a:b5:ee:05:5e:39:aa:6b:2d:a5:38:67:2d:30:7d:9d:30:25:
80:55:8e:ff:3f:98:53:01:d1:62:9f:e3:de:ff:de:a6:e7:ad:
a8:e7:86:95:66:7f:47:64:61:7f:78:53:0a:69:16:40:95:b4:
19:3f:13:51:d9:38:83:3c:46:37:9b:b8:83:bc:4d:2b:4b:2c:
f9:66:8e:bf:ce:94:80:bb:b9:64:23:eb:53:6c:ab:ea:6e:ce:
ce:14:4a:d2:db:e6:c0:bc:cc:a7:06:f6:e4:7c:db:16:8e:14:
dd:49:35:9a:ab:ca:e4:ad:a4:22:a3:c2:12:15:7d:fd:11:eb:
a8:74:36:cb:a6:3f:73:3f:7c:58:f8:01:a8:e1:ab:a5:eb:9c:
7c:b8:f5:b9:e4:be:06:2c:c5:02:2e:10:ec:72:d3:0c:4e:fe:
f3:25:fd:d8:65:01:88:16:ad:60:4a:72:b2:eb:66:60:27:95:
f4:a0:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:41 2025 by rpki-client