Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: c3Fj4+trB7WwJYZx6A/dgscxGkYevRmlRHnhAln2EMc=
Subject key identifier: E4:D7:AC:5E:AE:1F:B6:46:31:11:FE:D1:B7:B2:E1:5E:01:64:77:94
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 0194BBCE0B37537A9E2C508FD58C29AB44AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: FJ/PhcAGQwfwVKpz95LxW1oCE7D4MoRD/0hQQYlzPW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0b:37:53:7a:9e:2c:50:8f:d5:8c:29:ab:44:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=e4d7ac5eae1fb6463111fed1b7b2e15e01647794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:0a:be:af:db:8b:65:8f:20:63:af:14:a5:
5b:ab:65:e4:cd:ef:9b:e4:c6:11:6c:e5:18:6f:dd:
a8:e6:1c:b8:29:90:63:c0:62:b3:c9:12:5b:5b:d2:
20:a6:1a:9a:40:a6:0e:ba:97:76:f9:06:c7:45:18:
22:6f:44:2f:ad:0f:4f:31:49:9d:7c:1c:12:dc:9a:
60:01:c6:21:b2:47:07:79:5e:19:81:f6:d2:0a:4d:
5e:b0:35:57:4b:ab:6d:d9:2b:4b:d7:f3:8f:98:f3:
29:c9:9c:83:c2:ac:39:81:b5:25:f2:c8:80:ea:54:
ca:05:42:1a:58:48:0d:c2:7b:a2:ec:55:28:b6:4c:
4f:fc:75:66:0c:ea:c3:0c:e2:16:84:ce:ad:2b:a9:
80:86:ef:35:5c:28:d9:9d:99:36:5d:e6:6a:4e:02:
14:b6:c1:40:46:63:7d:86:df:75:42:a3:c4:24:db:
60:f0:5a:60:f2:a1:e3:0c:7e:3e:15:29:70:9a:80:
d8:bd:29:11:c8:4a:91:04:aa:e3:d1:50:43:72:3f:
62:b6:81:c7:47:9c:89:63:42:c7:49:c1:e8:b8:dc:
bc:64:9a:62:0c:1d:e5:79:cf:36:2f:07:22:db:35:
5f:8f:fd:06:e5:fd:87:e2:47:f1:7f:aa:fe:15:07:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:AC:5E:AE:1F:B6:46:31:11:FE:D1:B7:B2:E1:5E:01:64:77:94
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8c:61:a0:ce:67:c3:b9:7f:7a:69:1d:db:2e:ef:25:e9:ef:
20:f3:6e:cb:bd:63:da:26:61:16:c1:9a:50:f7:f2:c1:84:5e:
4d:82:d7:9c:17:5e:a5:ff:aa:71:4d:1f:bf:5c:fe:c8:69:b0:
35:af:61:7d:4c:a4:ca:da:8b:a2:d3:9c:87:bd:8d:42:2e:95:
20:21:fd:ed:12:53:02:e5:34:e1:f8:1e:f0:59:d2:e1:03:f7:
cf:b5:ac:a6:ff:cf:11:14:a4:41:50:33:29:ef:1e:3d:ff:dc:
3a:27:a9:b1:81:c8:1d:5d:ea:6d:2e:39:c6:06:8f:20:7f:10:
20:ff:90:0f:f7:10:ec:ff:00:97:3a:8c:81:67:5f:8c:91:a3:
bc:d7:4a:b9:92:07:4b:c4:e5:df:fb:ad:c9:7f:2b:ce:2a:7c:
f6:62:24:d8:ab:b0:2d:40:77:ec:5f:c0:d2:b0:55:a3:b1:b7:
d2:76:35:a1:ef:d4:e3:0d:81:3f:f4:0d:68:d2:97:0e:56:90:
3a:73:90:47:70:be:9e:7a:90:1e:ae:fd:bf:d2:f0:b4:04:2a:
6a:f0:66:b5:a3:3d:e0:b0:54:66:55:ea:93:df:e7:f1:4b:7a:
8f:f4:de:ae:71:75:78:3a:30:a0:32:99:64:67:28:a9:29:97:
57:3e:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:52 2025 by rpki-client