Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/602dd0-51a4-4416-bb5f-597af0afce38/1/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.mft
File: Xau5xKS_Pfb5GpjWcjJJBA2pbXE.mft (raw, json)
Hash identifier: CqJcv9tJ/+cZfksEH9Cjph5ZTAoAnD7DDfcyrPowTlM=
Subject key identifier: 0D:81:8D:23:69:4B:1C:8C:5D:99:BF:11:B9:C2:F5:3B:80:5F:D8:D3
Authority key identifier: 5D:AB:B9:C4:A4:BF:3D:F6:F9:1A:98:D6:72:32:49:04:0D:A9:6D:71
Certificate issuer: /CN=5dabb9c4a4bf3df6f91a98d6723249040da96d71
Certificate serial: 019227C4CDD92FC44C53B6175F484B12E3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/602dd0-51a4-4416-bb5f-597af0afce38/1/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.mft
Manifest number: 06A5
Signing time: Wed 25 Sep 2024 06:01:02 +0000
Manifest this update: Wed 25 Sep 2024 06:01:02 +0000
Manifest next update: Thu 26 Sep 2024 06:01:02 +0000
Files and hashes: 1: Xau5xKS_Pfb5GpjWcjJJBA2pbXE.crl (hash: ArCZIXtgM0bsa2yT2YD4nGBdTHymhrRl4fiuePKQsdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:c4:cd:d9:2f:c4:4c:53:b6:17:5f:48:4b:12:e3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dabb9c4a4bf3df6f91a98d6723249040da96d71
Validity
Not Before: Sep 25 06:01:02 2024 GMT
Not After : Sep 26 06:01:02 2024 GMT
Subject: CN=0d818d23694b1c8c5d99bf11b9c2f53b805fd8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:d0:d5:59:99:00:80:1c:24:2f:e3:fb:6d:
a7:41:8f:c2:ff:0c:0a:6d:3b:b2:e8:df:1d:2a:4f:
e3:26:a4:75:16:7c:73:44:d9:9b:43:39:ee:12:a0:
36:59:5a:c3:8c:14:b3:d1:22:bf:d9:0d:69:2d:7d:
f8:02:01:a9:dd:d4:ac:66:49:4c:11:19:46:9b:7c:
c6:0d:0e:26:b0:7d:a0:16:e9:48:ff:4f:5a:a6:6b:
11:ac:7f:4a:7f:cc:2e:7d:ed:41:77:5b:74:ee:76:
b8:63:e6:1e:89:6b:89:86:db:88:22:5a:0b:1b:7a:
b7:5e:6c:d5:02:39:d8:a8:79:25:54:cd:32:96:a6:
4a:dd:ca:68:1e:73:b8:98:03:14:c7:98:79:21:68:
37:b7:7e:44:6f:34:22:33:5d:41:ea:dd:f9:77:ed:
24:b3:70:6b:15:1c:78:b2:56:c2:eb:af:a4:e4:2a:
d7:46:f3:f8:8c:10:df:95:ff:bf:9b:d3:b2:82:d0:
ba:4e:3f:2d:e5:03:ff:40:2b:87:0e:d3:00:a6:1b:
a2:e2:9a:00:61:b1:52:c6:98:f6:54:91:dd:05:53:
fc:2a:ac:9e:43:44:6b:2a:d1:50:88:1c:af:75:8c:
a4:2a:13:5d:74:b1:e4:04:27:0d:3c:2e:c1:74:7b:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:8D:23:69:4B:1C:8C:5D:99:BF:11:B9:C2:F5:3B:80:5F:D8:D3
X509v3 Authority Key Identifier:
keyid:5D:AB:B9:C4:A4:BF:3D:F6:F9:1A:98:D6:72:32:49:04:0D:A9:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/602dd0-51a4-4416-bb5f-597af0afce38/1/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/602dd0-51a4-4416-bb5f-597af0afce38/1/Xau5xKS_Pfb5GpjWcjJJBA2pbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4f:bf:98:e9:49:c5:e2:f0:0f:09:99:06:f2:16:6d:4d:5b:
fb:d4:24:4d:bf:2c:34:64:90:53:93:ba:9e:d7:95:f3:01:74:
87:0b:34:3f:c8:d9:61:2f:6c:c7:31:3a:d6:33:4f:d4:7f:f5:
59:cf:12:50:a3:71:84:1e:63:49:b1:6d:83:91:db:bb:47:f5:
bb:3a:fc:fb:cb:30:16:01:2d:45:9c:1b:2f:21:de:5f:c3:6b:
f2:52:e7:0c:74:dc:cc:7a:f1:e7:33:86:74:6c:67:8d:c7:35:
64:85:e6:4b:4b:ef:22:42:16:3b:8f:19:6c:eb:71:46:dc:3e:
34:f7:cc:0d:b7:f6:23:53:3b:e2:46:14:b9:fe:d4:a2:0e:a5:
02:1e:47:68:c3:9a:a8:71:3c:5d:04:a9:85:b9:4c:1c:a5:0e:
a5:b4:a3:e6:1f:92:49:90:4d:a0:2e:53:22:2e:93:77:9d:ae:
35:f0:26:0e:1f:35:5b:37:0a:05:f0:10:c6:80:d6:e1:25:37:
d7:48:71:b2:98:a7:27:a1:9f:d7:d6:1a:ea:8f:fa:2f:eb:59:
2d:55:72:38:79:a9:d6:a0:89:7c:0c:36:6a:7f:cb:a1:cb:45:
05:94:cb:1c:73:4b:30:6a:a6:db:0e:fa:0c:f9:24:28:df:bc:
04:74:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:19:38 2025 by rpki-client