Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
File: DUlCfYpEd823aAhhqexQ3HMhaYI.mft (raw, json)
Hash identifier: i6JIXpPzapm8B65QpFLZfJhsKAuUUSpa/sH1cKc57LA=
Subject key identifier: 75:F6:DB:5C:22:8C:B9:3F:67:F1:66:E4:96:2E:A8:BE:2A:6C:78:5B
Authority key identifier: 0D:49:42:7D:8A:44:77:CD:B7:68:08:61:A9:EC:50:DC:73:21:69:82
Certificate issuer: /CN=0d49427d8a4477cdb7680861a9ec50dc73216982
Certificate serial: 0194BBCE0A0BE4F8B23BB68435E43DF8260C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
Manifest number: 04B6
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: DUlCfYpEd823aAhhqexQ3HMhaYI.crl (hash: quxj17Rsfm0wk2uEX0cPWjWUGg5gU96ox7Fh/srB1mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0a:0b:e4:f8:b2:3b:b6:84:35:e4:3d:f8:26:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d49427d8a4477cdb7680861a9ec50dc73216982
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=75f6db5c228cb93f67f166e4962ea8be2a6c785b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:c2:83:90:ee:14:20:83:c9:c2:33:8a:bc:
6e:a2:14:57:38:a9:a0:ed:21:52:51:77:8e:b4:a1:
ea:db:a1:d6:0c:6f:1c:24:0b:c7:b6:90:c6:45:a1:
a5:a3:26:ca:99:4a:3d:6f:ca:71:43:d7:8c:24:0f:
60:85:46:c2:cd:cb:f0:4d:8d:9b:f8:8f:22:35:fa:
7b:0c:83:80:f1:84:d3:5c:c8:d9:75:48:ac:8e:bf:
27:c2:13:54:c4:0c:36:e5:ca:56:fc:8b:dc:99:06:
ce:63:63:b3:14:af:69:23:1d:c6:ce:3a:c9:87:b8:
44:7f:d3:ad:24:68:78:f7:84:0a:bb:46:f5:90:c3:
cc:a2:fe:08:38:e9:9c:79:bb:39:1c:c7:6c:e5:22:
9e:74:b2:4f:ef:a1:df:cb:3a:fb:18:c6:a1:91:7b:
73:17:f5:c1:82:eb:fd:fa:69:17:d6:35:f2:bf:48:
ef:fc:d8:c4:89:4d:4c:25:c6:68:2d:fa:bb:f5:63:
95:a8:c8:df:17:73:d6:68:9d:c7:ff:b9:91:27:da:
50:b5:af:bc:34:eb:c0:fc:49:62:94:32:45:90:05:
57:d0:f9:e7:e0:28:cb:89:e4:2e:da:27:73:1c:9b:
2e:0d:6d:6b:ab:50:82:5a:22:ec:56:6d:13:02:6d:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F6:DB:5C:22:8C:B9:3F:67:F1:66:E4:96:2E:A8:BE:2A:6C:78:5B
X509v3 Authority Key Identifier:
keyid:0D:49:42:7D:8A:44:77:CD:B7:68:08:61:A9:EC:50:DC:73:21:69:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUlCfYpEd823aAhhqexQ3HMhaYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/89dd25-546c-4f18-acc4-7a4057314167/1/DUlCfYpEd823aAhhqexQ3HMhaYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8b:00:d7:ed:ed:3d:73:21:90:61:44:89:8f:7e:e0:55:1e:
e8:24:b3:10:bf:8a:40:05:1e:eb:e7:01:5b:af:2b:d5:b6:27:
99:08:29:00:ed:c7:8d:a1:33:c0:22:83:8d:c4:08:89:a4:2c:
e2:21:e6:c3:84:ef:dd:45:b7:f2:76:89:3a:92:3d:1c:77:63:
dd:91:7c:9d:f9:30:39:d2:11:59:92:c8:97:e3:3a:af:27:d8:
3e:83:6c:62:e9:64:70:8f:b2:32:86:62:ee:3a:f4:92:83:52:
d6:e2:a2:d2:7d:d5:0a:f9:2b:41:1c:49:56:23:ba:aa:29:ae:
bc:d4:7e:44:f0:5d:11:4a:93:3d:61:96:47:e3:e8:85:b4:fa:
9d:7b:f3:f5:a6:92:33:df:1c:e1:b6:a4:e4:be:22:f8:8b:d7:
c2:c9:f7:ea:ef:d9:20:20:ed:8d:f1:59:62:4c:f1:8d:f0:53:
d5:71:2a:ac:3a:e5:7a:7e:f9:13:e0:d4:ca:84:d0:47:e4:9a:
01:ad:9f:b6:67:20:0a:1d:d9:7f:28:8a:c1:32:de:cf:2f:76:
fe:73:4c:70:3a:3a:c6:74:cb:90:84:8b:67:4e:1d:92:cd:ff:
18:3e:7a:da:e5:b4:67:7a:a4:cf:fc:11:76:c1:3c:a3:0d:ea:
83:39:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:01 2025 by rpki-client