Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
File: XhG23vM9-aR3sofFIN7ExPYLOo8.mft (raw, json)
Hash identifier: IWISEsUWwVDtII+nVPxBlwbhwZxRc0oPyizirLUGqGE=
Subject key identifier: 0B:CE:0C:79:AF:43:D8:6D:CE:67:A5:44:B2:71:04:00:32:16:F2:9C
Authority key identifier: 5E:11:B6:DE:F3:3D:F9:A4:77:B2:87:C5:20:DE:C4:C4:F6:0B:3A:8F
Certificate issuer: /CN=5e11b6def33df9a477b287c520dec4c4f60b3a8f
Certificate serial: 0196B3D89E008B18EA37CC7EFDD89BB59949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhG23vM9-aR3sofFIN7ExPYLOo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
Manifest number: 0A5B
Signing time: Fri 09 May 2025 07:00:39 +0000
Manifest this update: Fri 09 May 2025 07:00:39 +0000
Manifest next update: Sat 10 May 2025 07:00:39 +0000
Files and hashes: 1: XhG23vM9-aR3sofFIN7ExPYLOo8.crl (hash: xfOS8ubTjufElcICUsNPa4Jlg/E1Vj6+S4M9ZGfvx2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:9e:00:8b:18:ea:37:cc:7e:fd:d8:9b:b5:99:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e11b6def33df9a477b287c520dec4c4f60b3a8f
Validity
Not Before: May 9 07:00:39 2025 GMT
Not After : May 10 07:00:39 2025 GMT
Subject: CN=0bce0c79af43d86dce67a544b27104003216f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:40:d3:42:6c:51:b4:5a:fc:cb:cf:86:1f:
5f:33:7d:45:bd:57:49:cf:ce:1c:4d:c9:77:b1:bb:
43:40:79:fa:af:4a:47:83:aa:51:ad:41:75:fd:45:
1d:b8:38:ed:39:3c:e1:29:20:e2:1b:5f:31:7e:25:
60:f2:ef:30:dc:eb:8f:f1:14:00:7c:59:62:c1:59:
dd:f0:af:24:d4:b6:7d:14:57:f3:46:e0:5a:ef:21:
c3:4b:f5:e2:23:76:41:82:a0:17:9d:a6:b5:bc:4f:
97:90:7f:e0:14:2b:b2:26:f1:86:d4:28:eb:7b:2c:
94:88:c0:49:c0:75:6a:69:e0:5e:e2:cd:52:ed:5e:
96:92:5d:6e:cf:f3:2f:eb:c6:67:ea:5b:0b:15:54:
62:73:a1:f5:36:73:8a:03:26:b6:b8:dd:9d:75:16:
c2:29:63:81:c8:86:2c:88:45:27:a0:f5:53:23:7c:
d1:42:dd:3e:33:70:6c:91:cd:32:fe:76:03:80:49:
76:44:54:62:82:df:90:51:ec:83:fc:c9:99:10:a0:
93:fd:32:af:f1:62:4b:98:74:02:05:96:eb:0d:19:
cb:f3:a8:d4:77:eb:3d:69:29:e6:6a:e2:20:97:74:
4b:fe:3e:b6:b1:3e:8f:bb:ae:98:0e:e4:b6:40:94:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:0C:79:AF:43:D8:6D:CE:67:A5:44:B2:71:04:00:32:16:F2:9C
X509v3 Authority Key Identifier:
keyid:5E:11:B6:DE:F3:3D:F9:A4:77:B2:87:C5:20:DE:C4:C4:F6:0B:3A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhG23vM9-aR3sofFIN7ExPYLOo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c4:96:0f:c8:0f:27:fd:fc:92:b7:a4:ad:1f:55:45:e7:91:
20:38:69:63:a5:41:2f:ca:0d:52:2b:80:2a:a4:42:46:e4:45:
41:10:15:f5:eb:71:20:71:b7:8b:aa:87:c1:e7:e0:83:d6:f7:
ee:14:0b:ae:01:3b:00:fb:63:54:50:3e:30:23:b5:52:34:34:
03:da:06:5f:3f:5a:cc:35:b5:66:12:46:c4:a4:33:f0:8c:db:
51:4f:fd:fb:d7:dc:e7:32:ce:81:fe:83:3e:a6:43:1f:81:ca:
2e:21:7a:2c:3a:b8:d5:d1:f3:3a:ff:49:f2:b3:f1:b9:69:a6:
ee:d7:86:8d:50:8f:11:cd:8a:c4:14:45:d3:a3:50:40:8f:e1:
70:59:53:83:6a:95:0f:b4:f2:2b:7c:25:db:cb:67:76:ab:a6:
c7:17:93:2b:fb:16:02:02:3f:fa:60:a1:fe:24:5e:c5:75:28:
40:af:dd:29:01:1d:96:b8:ed:62:6d:e8:1a:74:c9:f6:c5:12:
61:89:3a:49:a3:a6:d3:2c:6c:68:9c:93:8b:bb:e6:07:71:96:
3e:e8:9f:0d:85:e1:0b:ef:af:7d:24:5a:90:1c:2f:ab:de:59:
b7:d0:b8:5e:ad:ef:5b:ed:f2:f3:a7:07:fc:57:e7:48:03:7b:
98:96:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:53:21 2025 by rpki-client