Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
File: x8AThitsVvQ950jt8kqTGRudFhw.mft (raw, json)
Hash identifier: vIXBCb3HWq5Qur9n7nbBe7JiCPdgmfzgF96rRM/5A44=
Subject key identifier: 3E:59:70:E5:72:E1:B5:34:E6:85:F5:A8:8A:19:A8:BD:58:E3:B1:F7
Authority key identifier: C7:C0:13:86:2B:6C:56:F4:3D:E7:48:ED:F2:4A:93:19:1B:9D:16:1C
Certificate issuer: /CN=c7c013862b6c56f43de748edf24a93191b9d161c
Certificate serial: 019399B22958D957647848682280563FD882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
Manifest number: 0165
Signing time: Fri 06 Dec 2024 02:00:10 +0000
Manifest this update: Fri 06 Dec 2024 02:00:10 +0000
Manifest next update: Sat 07 Dec 2024 02:00:10 +0000
Files and hashes: 1: x8AThitsVvQ950jt8kqTGRudFhw.crl (hash: svgfkCPmuL3wY5/06GkZucH9VzFhENBqW0pgze3jZ0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:99:b2:29:58:d9:57:64:78:48:68:22:80:56:3f:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c013862b6c56f43de748edf24a93191b9d161c
Validity
Not Before: Dec 6 02:00:10 2024 GMT
Not After : Dec 7 02:00:10 2024 GMT
Subject: CN=3e5970e572e1b534e685f5a88a19a8bd58e3b1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:f0:58:3b:37:32:a3:db:08:bc:db:0e:5d:
af:66:6e:bc:ff:b5:5a:6f:ab:0a:cf:cd:1e:83:81:
76:74:d6:17:eb:51:cb:b2:cf:fc:61:94:d1:b1:b3:
a4:ef:cc:50:ab:db:0f:20:dc:7b:ac:4c:9c:2b:20:
1a:a5:4f:7d:8f:bc:77:fb:46:19:2b:be:1c:95:aa:
00:2f:58:3c:51:5d:57:ff:32:51:4f:bd:21:e0:1a:
e7:5e:e4:c7:47:36:a6:90:ac:aa:67:a2:21:75:61:
e8:90:be:a1:3e:62:d3:97:7f:c7:ff:8e:e6:a9:97:
5f:c8:23:49:84:99:90:fd:04:65:b1:69:38:30:85:
1b:66:a1:e2:47:76:9b:0d:8f:57:07:a7:e6:c8:37:
d4:a9:bf:79:e7:09:19:82:6a:0e:05:c0:7e:4e:9d:
53:ec:f3:6f:c9:c7:7c:5b:d6:98:da:4d:c7:97:47:
8f:e3:97:39:a0:62:1b:1a:b2:9d:7e:20:f5:52:04:
f2:6b:cf:33:67:02:11:f7:95:41:fd:1d:33:47:ef:
d2:88:92:61:1f:33:1e:7a:1e:40:b1:a3:84:02:83:
41:1e:0f:c8:8f:d4:06:d3:7e:6b:67:96:64:d9:3b:
4e:d1:b1:24:33:b7:53:41:6d:12:8b:f3:90:a7:00:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:59:70:E5:72:E1:B5:34:E6:85:F5:A8:8A:19:A8:BD:58:E3:B1:F7
X509v3 Authority Key Identifier:
keyid:C7:C0:13:86:2B:6C:56:F4:3D:E7:48:ED:F2:4A:93:19:1B:9D:16:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:11:01:0e:fd:77:7c:4b:c0:c4:ef:77:fc:df:32:0f:ad:85:
09:a9:1d:58:77:23:f5:fa:c3:7a:3b:84:fb:8e:aa:3d:bd:bf:
8d:28:f6:a5:9a:f1:17:50:51:c9:6b:99:32:b0:76:c6:ff:b6:
6d:a3:d9:79:e6:5e:42:e3:30:39:42:cb:d9:d4:f5:2d:ee:9f:
75:a2:e0:59:16:0c:61:f5:c2:44:10:33:3a:21:cf:d2:19:4f:
69:19:91:4c:bb:6d:49:d9:d1:d3:c6:83:a8:2e:f2:76:8a:cb:
38:f5:54:24:92:65:5b:7a:22:f9:fd:c8:e2:7f:7c:10:66:93:
d3:91:4a:64:e0:6f:29:e2:05:f4:ab:dc:47:5e:6c:9c:b3:0c:
32:b4:7e:ae:e3:e6:64:13:1f:82:ef:8c:21:51:fb:aa:dc:d3:
08:d6:73:75:6a:ff:79:22:81:f2:28:a4:fc:0a:7b:49:1f:f5:
cd:7d:a2:fd:aa:40:37:f3:42:57:53:da:ac:ae:6c:dc:89:89:
0f:13:b8:fe:c0:25:ed:41:cd:0d:58:49:41:9e:8c:e0:d6:61:
96:8b:af:a6:ee:ec:29:1f:9a:79:ed:51:d5:8b:e0:49:f9:f7:
56:32:ee:8d:2a:a8:f1:b2:19:82:90:f9:6c:66:be:58:21:d4:
ee:63:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:31:27 2025 by rpki-client