Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
File: DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json)
Hash identifier: mvUHxx6V0jHrwV7vB+uHkt5AiZQh69uCo8wnja+/YRw=
Subject key identifier: 8F:9B:FC:C1:59:6D:D6:C3:8A:1F:47:9C:C5:A8:0A:7F:0E:5F:74:2C
Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
Certificate issuer: /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Certificate serial: 0194BBCDB613E514C620FC4D4F4319AAF0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: VbNfzD+rFwCEV62jDtWBpyC7UXvIyrvPi++0oe7p+Uk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:13:e5:14:c6:20:fc:4d:4f:43:19:aa:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=8f9bfcc1596dd6c38a1f479cc5a80a7f0e5f742c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:ac:f7:e5:d3:bf:5f:a7:c8:77:6f:35:60:
fc:ee:56:92:3b:20:49:48:a4:f3:71:d8:ea:c4:9a:
ce:dc:0e:ef:82:87:a9:6a:5b:71:35:6a:94:f8:0d:
e9:eb:37:3e:23:94:88:c9:48:fd:89:78:42:68:d0:
02:46:78:0a:c7:46:5a:33:c4:cf:dd:67:bc:ef:0a:
ec:ca:f2:79:94:83:8e:bc:f7:e5:af:55:9d:f1:59:
23:73:e4:a2:44:50:e1:bd:32:8c:d3:00:d3:a9:7f:
2c:74:de:a1:e6:da:9d:f2:4b:7c:2d:f8:91:ab:6c:
1e:18:b5:69:10:3f:96:93:ae:cd:39:59:28:09:1c:
d4:de:9f:06:71:16:1b:ae:fb:6a:df:35:7e:b4:37:
39:e6:21:6b:ea:e9:3c:11:bb:44:91:57:23:33:eb:
4e:c8:d7:85:22:cd:c8:c7:3d:ab:44:6a:7d:bc:a9:
df:c6:da:60:b0:50:1c:d0:35:bc:28:ed:55:41:aa:
36:98:c6:4e:85:92:ef:f7:81:40:16:a7:2e:ed:db:
3b:db:e2:34:b9:c1:ec:f6:cc:15:34:a8:65:45:a5:
b8:c5:e6:5d:f8:d1:96:4b:37:41:0c:fb:bb:02:72:
5e:d2:b7:01:38:c2:8d:4f:a6:e1:fa:d2:f0:71:ff:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9B:FC:C1:59:6D:D6:C3:8A:1F:47:9C:C5:A8:0A:7F:0E:5F:74:2C
X509v3 Authority Key Identifier:
keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d0:2a:89:3a:05:3d:45:a3:51:f5:5c:7e:1a:98:9f:3d:9a:
0f:83:5b:b9:a6:83:81:90:89:18:68:b9:96:3d:02:65:23:62:
b5:ba:0f:53:96:bc:59:60:69:b4:fa:32:e2:67:f3:e9:8c:ad:
4c:be:2f:1c:58:ed:20:7a:0a:6e:c7:14:71:26:bb:d5:82:70:
ee:3e:6b:f5:55:70:e1:ab:c9:78:42:f5:65:b5:c8:96:51:8c:
10:13:0b:dd:a9:4b:1b:fd:9c:80:e7:2f:b2:e2:e0:84:4a:ec:
4b:f8:c1:c6:d2:6d:8c:27:45:2e:ea:f5:67:9e:67:5d:8b:47:
b5:5f:a1:34:d7:b1:e2:70:bb:df:e4:7c:24:e1:bd:eb:ba:3a:
6b:7c:02:a2:9a:5d:e4:e5:45:15:ba:5f:f3:d3:57:f6:81:8b:
4e:93:82:ef:0f:df:7a:7b:d4:86:48:2b:42:89:be:10:14:0b:
69:cf:e3:da:97:94:c0:05:96:5b:14:94:eb:e3:87:ad:b7:a4:
43:5c:e8:c3:4f:9d:85:d9:00:d3:34:a9:d7:23:42:24:e3:ff:
6a:1a:e5:8f:ff:d3:23:37:a5:d6:e9:3d:8a:5b:08:7a:13:38:
20:89:32:92:79:c5:26:41:e1:71:b8:b2:3f:cf:44:44:25:fd:
eb:1b:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:51 2025 by rpki-client