Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
File: dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft (raw, json)
Hash identifier: zRIjj8Cl57YZjWwJHKANI3tWhDDLwf/uUdO3qC2c1yo=
Subject key identifier: B6:61:B3:F7:A9:57:AD:4B:F3:BC:50:EE:1A:BF:CB:5E:FC:0F:7D:D7
Authority key identifier: 74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
Certificate issuer: /CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Certificate serial: 0194BC72EB0CFE9A713455E3833A4EC3B34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
Manifest number: 0EFC
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl (hash: HfXoL8oRvihJ98wcmgo7C8P0EeboHvmmZyXOF576TzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:eb:0c:fe:9a:71:34:55:e3:83:3a:4e:c3:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=b661b3f7a957ad4bf3bc50ee1abfcb5efc0f7dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:f0:c3:b3:c7:f7:d1:b1:62:f2:8e:d8:75:
8d:c3:2c:74:cc:fd:8b:72:79:c1:c2:14:1a:25:68:
d7:ea:3e:70:55:ed:55:c7:54:ab:2c:0b:3c:d1:7b:
6b:46:c9:81:04:64:41:c1:2d:a8:a3:de:51:e9:b7:
cf:3d:05:69:06:42:26:c3:e3:ec:65:42:bb:ef:13:
39:e1:58:41:62:27:d6:a9:f0:ad:49:75:55:ba:ad:
d1:33:3b:6f:65:89:33:75:51:7a:15:87:7e:37:0c:
dc:82:41:75:d7:a1:23:63:73:1b:64:4c:8e:40:bd:
cf:1c:8e:5c:5f:ff:32:f6:fe:55:e8:06:2c:d7:e1:
fd:3c:c5:6a:21:6c:1e:ba:30:fe:5e:15:60:84:12:
04:a9:f1:77:59:43:eb:fc:57:c7:15:74:32:d2:34:
a8:bc:19:7d:4c:6b:93:b9:62:be:0a:86:68:ba:2c:
fd:2b:c7:9d:ff:68:c2:bd:20:ff:05:21:92:5e:50:
b2:cd:01:b1:8f:39:a7:be:32:58:05:fc:38:75:3a:
b6:17:9d:f5:6d:22:f5:f6:49:f5:3e:e9:1d:5b:73:
a8:37:6a:6e:cc:97:fc:3b:63:56:64:1f:a9:01:58:
a4:77:d2:3e:0d:57:e5:d5:75:83:43:2c:a6:29:1d:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:B3:F7:A9:57:AD:4B:F3:BC:50:EE:1A:BF:CB:5E:FC:0F:7D:D7
X509v3 Authority Key Identifier:
keyid:74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1e:d6:a0:20:53:60:bf:6b:d1:dd:31:65:bf:dc:86:39:f7:
f0:3e:2b:4f:62:5a:21:f0:37:fe:70:b4:48:f7:0c:fa:bf:13:
43:4b:41:43:50:43:ef:8f:80:6b:dc:3a:e2:82:1f:3b:24:3f:
b1:f2:8f:b0:0d:98:15:e7:5f:06:d2:94:9b:40:5a:bc:86:22:
ea:e1:35:19:0a:0f:e9:84:d4:5b:96:f9:8b:48:47:43:18:05:
c0:a4:a7:ae:52:9d:1a:66:1b:0f:7f:d6:69:ec:35:5f:a9:27:
47:8a:18:52:08:14:ef:03:0b:f3:9b:0d:b3:ef:94:d2:ec:1c:
8a:dc:de:09:4c:c2:f0:94:04:f6:5c:cd:9e:fd:3e:41:20:22:
a7:ca:d4:08:70:fb:85:4b:bf:4c:59:ef:18:09:a7:ec:68:db:
3c:df:c6:d9:aa:a8:a6:70:c6:b2:4e:f5:8e:67:81:ce:98:25:
8a:d5:27:be:b1:ec:2c:dc:a7:d3:0f:78:61:1d:21:29:ac:8f:
e2:d0:30:1e:39:eb:d5:b2:46:8b:26:22:81:70:95:77:82:46:
cf:b8:ca:36:01:bf:6e:4a:47:14:d7:65:08:4d:85:8f:70:eb:
25:46:94:28:28:b0:2d:86:69:2b:5b:d1:78:d6:48:16:2c:05:
36:0c:b9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cusM/ppxNFXjgzpOw7NNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjMxMjY4ZjJmZjdlOGNlYWRmMWRlOTVmOTdmMGIxZDJi
MTVmOTYwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
EyhiNjYxYjNmN2E5NTdhZDRiZjNiYzUwZWUxYWJmY2I1ZWZjMGY3ZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9zww7PH99GxYvKO2HWNwyx0zP2L
cnnBwhQaJWjX6j5wVe1Vx1SrLAs80XtrRsmBBGRBwS2oo95R6bfPPQVpBkImw+Ps
ZUK77xM54VhBYifWqfCtSXVVuq3RMztvZYkzdVF6FYd+NwzcgkF116EjY3MbZEyO
QL3PHI5cX/8y9v5V6AYs1+H9PMVqIWweujD+XhVghBIEqfF3WUPr/FfHFXQy0jSo
vBl9TGuTuWK+CoZouiz9K8ed/2jCvSD/BSGSXlCyzQGxjzmnvjJYBfw4dTq2F531
bSL19kn1PukdW3OoN2puzJf8O2NWZB+pAVikd9I+DVfl1XWDQyymKR2N3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZhs/epV61L87xQ7hq/y178D33XMB8GA1UdIwQY
MBaAFHSzEmjy/36M6t8d6V+X8LHSsV+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZDkxMTItZjU3ZS00OWM3LWE5M2It
ZDg1NDllZGY3Y2VmLzEvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85ZDkxMTItZjU3ZS00OWM3LWE5M2ItZDg1NDllZGY3Y2Vm
LzEvZExNU2FQTF9mb3pxM3gzcFg1ZndzZEt4WDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASh7WoCBT
YL9r0d0xZb/chjn38D4rT2JaIfA3/nC0SPcM+r8TQ0tBQ1BD74+Aa9w64oIfOyQ/
sfKPsA2YFedfBtKUm0BavIYi6uE1GQoP6YTUW5b5i0hHQxgFwKSnrlKdGmYbD3/W
aew1X6knR4oYUggU7wML85sNs++U0uwcitzeCUzC8JQE9lzNnv0+QSAip8rUCHD7
hUu/TFnvGAmn7GjbPN/G2aqopnDGsk71jmeBzpglitUnvrHsLNyn0w94YR0hKayP
4tAwHjnr1bJGiyYigXCVd4JGz7jKNgG/bkpHFNdlCE2Fj3DrJUaUKCiwLYZpK1vR
eNZIFiwFNgy5QA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:56:12 2025 by rpki-client