Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier: HgmV2HyaPu1CdgbzM/+J2p8FgypbwXopR1ErtBmJu7E=
Subject key identifier: 4A:DB:BF:1C:6F:31:28:2D:31:F3:93:04:25:E4:CD:7E:69:0F:2F:32
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial: 0194BBCE50127FA2DE0690FCD6DD2AB9C5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number: 0ED1
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: /wIoeVxNyg2ptrR1++c2vPPg3zlxoEV5PdfpbRkZs4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:50:12:7f:a2:de:06:90:fc:d6:dd:2a:b9:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=4adbbf1c6f31282d31f3930425e4cd7e690f2f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:56:d7:a1:05:95:98:f9:78:8a:74:47:fb:
7e:da:f2:78:f5:1a:2b:7b:c2:63:02:60:9a:c7:2b:
f4:8c:13:a2:9f:68:6d:c4:0f:9d:3d:41:9b:74:bb:
1f:d3:0a:8d:a8:3b:c2:0f:2d:92:ff:5f:e1:a8:f0:
5c:a8:1e:29:f8:1e:25:1c:06:d0:00:65:0e:7a:18:
77:e1:56:b3:9b:f1:3e:96:d0:c3:36:94:55:2e:2b:
5e:ff:d9:96:25:58:e6:7f:69:96:54:2e:4a:14:18:
f7:9d:ed:37:2e:e7:69:47:9b:46:ac:42:30:d8:3f:
a2:e0:3b:4b:d3:0c:1d:28:22:b1:04:6b:32:6d:14:
37:ba:fa:87:26:09:8b:20:fd:1a:8d:24:56:4a:d9:
9b:d5:8b:27:2a:7d:78:82:b6:de:bc:dc:9e:76:ba:
8a:f4:19:05:28:0c:d8:7b:41:ea:5f:c4:65:d5:d3:
b6:15:f0:68:7d:f5:11:6c:82:1f:4b:54:bc:2d:29:
37:e0:e7:07:08:fa:8d:f7:4b:1e:d5:64:1e:fc:ce:
d5:da:20:52:5f:46:b2:34:87:38:89:60:df:ed:56:
bc:32:10:1f:eb:30:31:68:fb:75:7b:43:50:d2:ff:
da:bd:fa:94:4f:cd:9f:46:81:cf:6f:9b:1c:d2:d7:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:BF:1C:6F:31:28:2D:31:F3:93:04:25:E4:CD:7E:69:0F:2F:32
X509v3 Authority Key Identifier:
keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:eb:4e:bc:66:99:3a:93:b7:09:e1:e9:67:68:0a:33:c1:7e:
94:f3:eb:e7:05:eb:a6:71:b6:c6:dc:4d:8b:cf:4b:50:eb:25:
5e:94:9f:4b:dd:32:d3:b4:14:b1:78:2a:f2:6b:5e:4f:4c:15:
34:d2:8f:04:db:fe:da:f2:bc:7b:58:a0:5a:29:72:6a:47:5b:
e7:9b:43:bf:af:27:38:6c:dc:ab:cb:88:79:72:29:58:00:b7:
8f:e7:6c:ad:56:60:36:f0:42:67:89:2c:5e:21:55:37:c1:d7:
a5:9e:ee:15:5d:32:39:1a:4d:39:e1:15:d5:59:28:29:5a:22:
33:b9:ec:cc:1d:4f:3f:d2:6e:a5:f0:e5:2a:4f:f7:ea:20:41:
3d:97:8b:fb:f6:68:19:58:51:90:bd:b8:52:4e:8f:2c:cf:3d:
03:3e:8f:da:43:4c:05:a1:9d:ef:f1:b5:4f:9c:2d:bc:53:2b:
2c:43:2b:15:d6:36:24:b0:6c:0a:e4:57:8c:b4:d0:a9:b3:46:
26:be:27:df:2a:78:1a:40:03:d1:8d:7b:7d:a1:3d:30:f5:03:
dc:6b:4d:3f:ed:59:a1:f0:77:73:66:37:e5:d0:2a:65:1c:ca:
fe:9c:0b:16:e0:53:3e:24:ad:78:95:c1:c7:13:50:1e:52:07:
56:bb:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:53 2025 by rpki-client