Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c35638-378e-4735-b595-88265af41cf9/1/1xA4rDMyDx3jesSbRVVBd2tynrY.mft
File: 1xA4rDMyDx3jesSbRVVBd2tynrY.mft (raw, json)
Hash identifier: 0ldrAjvXpvZVE/KtMvZ4zsYGU8itlzefe/D16m90Y3w=
Subject key identifier: 40:77:96:7C:BF:C0:04:EB:51:22:7A:BA:E9:DB:54:99:42:E3:B4:B5
Authority key identifier: D7:10:38:AC:33:32:0F:1D:E3:7A:C4:9B:45:55:41:77:6B:72:9E:B6
Certificate issuer: /CN=d71038ac33320f1de37ac49b455541776b729eb6
Certificate serial: 01921D780F4796FDE8272E43A8FE31585D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xA4rDMyDx3jesSbRVVBd2tynrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c35638-378e-4735-b595-88265af41cf9/1/1xA4rDMyDx3jesSbRVVBd2tynrY.mft
Manifest number: 20
Signing time: Mon 23 Sep 2024 06:01:00 +0000
Manifest this update: Mon 23 Sep 2024 06:01:00 +0000
Manifest next update: Tue 24 Sep 2024 06:01:00 +0000
Files and hashes: 1: 1xA4rDMyDx3jesSbRVVBd2tynrY.crl (hash: kmZqQZM9Jf8s1m7W2PfIQjyhW+N0CL4Xt6katSvHGck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:78:0f:47:96:fd:e8:27:2e:43:a8:fe:31:58:5d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d71038ac33320f1de37ac49b455541776b729eb6
Validity
Not Before: Sep 23 06:01:00 2024 GMT
Not After : Sep 24 06:01:00 2024 GMT
Subject: CN=4077967cbfc004eb51227abae9db549942e3b4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:fe:31:b2:8d:25:77:4f:ea:a7:64:09:84:
c0:55:02:ee:90:fb:e7:a1:48:2e:7f:ab:ce:06:8f:
a1:a4:b0:64:50:82:d4:a9:63:90:de:81:05:33:cd:
65:ea:cb:89:24:12:c0:17:d7:e4:4e:b9:4a:2f:1c:
42:4e:76:df:8d:79:16:af:8e:d6:d9:e9:84:3a:be:
7a:45:00:14:21:96:16:6e:fd:ca:a1:44:73:26:1b:
31:a4:c3:bd:db:1d:7e:7f:89:d6:0c:f8:41:52:ea:
a8:4a:5b:b4:d5:05:a7:a8:f8:30:86:7e:d6:c6:51:
8c:37:d5:1b:35:dd:89:04:a2:c7:bd:4e:55:a5:bf:
36:93:4f:6a:be:a7:47:d3:d7:43:37:91:10:70:21:
46:c5:5e:0b:f3:63:b3:79:af:05:f8:33:1b:19:31:
0e:55:07:2e:16:46:a0:2c:35:f0:02:74:5a:04:2c:
51:69:13:94:65:22:76:58:10:ae:1c:61:71:e7:3d:
77:23:ed:a9:e9:f9:c0:3c:15:e0:bf:10:8e:82:da:
66:a5:5e:6e:b6:b4:8e:ba:a3:2c:56:e6:bc:df:4e:
55:9e:97:ad:ca:81:29:26:bc:ac:b2:d4:62:d5:fd:
6f:33:24:b9:f1:3a:5b:68:a6:54:99:d6:e2:a6:29:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:96:7C:BF:C0:04:EB:51:22:7A:BA:E9:DB:54:99:42:E3:B4:B5
X509v3 Authority Key Identifier:
keyid:D7:10:38:AC:33:32:0F:1D:E3:7A:C4:9B:45:55:41:77:6B:72:9E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xA4rDMyDx3jesSbRVVBd2tynrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c35638-378e-4735-b595-88265af41cf9/1/1xA4rDMyDx3jesSbRVVBd2tynrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c35638-378e-4735-b595-88265af41cf9/1/1xA4rDMyDx3jesSbRVVBd2tynrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3b:3d:93:5f:55:80:5a:5f:38:ba:78:da:f9:1d:73:a5:b5:
1f:89:22:ec:4c:24:0e:11:fe:3b:09:82:bb:a8:57:cf:9d:b0:
c7:90:3e:47:0b:02:29:9b:21:48:02:80:72:02:51:aa:5b:4c:
b9:6f:9d:ce:00:b5:dc:a1:29:f1:af:a4:a0:d5:73:3f:30:87:
49:6c:74:d9:d7:10:65:87:6d:82:66:03:ac:ee:40:61:33:d0:
d6:7a:00:05:a5:cf:bb:f2:8b:37:84:f1:85:10:ea:37:93:b4:
6e:85:2b:d8:59:f7:8d:d7:3f:7c:6b:6d:4d:0a:95:bf:6c:48:
f0:c0:e7:6b:34:dd:6c:88:a2:53:3b:db:c7:f6:31:3b:79:42:
7e:c6:74:6a:ec:51:e8:dc:e9:db:bf:58:81:c4:ff:2e:27:f6:
ce:3f:44:30:d2:36:d3:ee:c4:7b:80:a4:d3:15:05:66:06:7c:
46:20:06:43:10:84:d9:43:a1:53:29:fb:e6:33:4c:82:75:8b:
19:1f:9c:df:d2:3e:9f:d4:ea:1f:2f:94:f9:75:4c:74:c5:10:
93:a7:cd:76:79:0f:93:56:c5:a3:5a:9f:05:83:a8:93:8b:20:
d5:b4:a4:a5:d8:5e:7e:f6:30:52:f4:a9:9c:d2:c1:85:ae:ee:
5e:f0:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:11 2025 by rpki-client