Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: KDgFQopEYMGSQzgjZVUr02/GZYwcZrTy9EtqhV69jis=
Subject key identifier: C4:6B:0F:1A:EF:1F:49:0D:28:8F:F4:7E:FC:C5:BF:E4:84:39:CD:6B
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 0194BD1803AAD5621347A5BAB13773DABFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 0DF0
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: 9c2y5fV6os0crLjuyYYJzFJ5cM+PIg58E9n+i9gjjCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:03:aa:d5:62:13:47:a5:ba:b1:37:73:da:bf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=c46b0f1aef1f490d288ff47efcc5bfe48439cd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:18:36:fd:f6:44:14:26:12:0f:6c:86:69:
58:88:4b:55:5a:8c:d0:a6:e4:32:22:0a:b8:ea:5e:
8d:13:7f:9f:93:ef:ba:5d:5d:cb:00:57:7b:05:aa:
73:ba:a3:39:2e:6f:7f:aa:81:de:ad:87:11:79:69:
23:9f:d4:8a:d8:04:d4:df:00:5d:a6:83:ad:66:96:
7a:c4:65:d6:d0:e4:d8:9d:22:76:2d:a0:82:df:a2:
a6:ee:d0:c1:28:a3:22:4c:8c:3b:09:88:7e:c2:4a:
80:51:59:d8:5a:08:74:7a:4f:fb:18:3d:a0:5d:fa:
f2:44:9f:cf:f4:2f:62:65:ea:2c:df:5d:3d:c4:37:
f6:50:34:3e:2b:cd:4a:8b:a2:e8:02:a5:e9:1b:3a:
df:25:09:50:95:7f:63:ed:d3:12:b0:b5:dc:c3:64:
d6:08:e4:71:6f:b0:90:00:46:31:cc:25:81:91:08:
f8:ff:54:4e:23:75:a2:b3:1d:da:76:1a:a6:eb:c2:
de:8a:64:ef:a1:8f:8e:48:01:b4:8d:ea:ae:6b:5e:
98:0c:fb:2d:92:a8:a1:6a:cc:27:b2:ff:8a:09:48:
5f:c8:ca:95:d6:c0:a2:ef:14:e1:b6:e8:06:02:44:
ea:29:3a:c1:00:40:c3:df:05:51:47:a1:2a:4a:c7:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:0F:1A:EF:1F:49:0D:28:8F:F4:7E:FC:C5:BF:E4:84:39:CD:6B
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7a:bf:30:e4:93:54:ba:c3:9e:4d:c4:51:64:ca:ae:23:2a:
0d:91:bc:0a:73:ab:31:c4:45:b7:dc:22:3f:fd:8a:a3:6b:1a:
8a:6d:db:fc:55:a5:fc:60:b1:db:7f:b8:6a:4d:14:77:63:92:
fb:d4:92:86:73:c1:47:58:13:93:8f:6a:d6:8b:1c:f9:cd:84:
12:80:8f:81:05:72:7e:2e:39:47:f3:c6:36:6e:e3:9e:ae:61:
4c:7e:75:eb:ef:4d:46:42:d5:60:ac:81:28:cc:f2:99:eb:86:
83:2f:ad:84:5a:06:50:11:19:20:da:bb:dd:eb:70:06:86:71:
18:6b:71:76:bb:26:c8:eb:aa:aa:c6:df:25:15:3a:98:73:4b:
03:4b:62:f4:dc:53:40:53:44:0f:9b:83:70:0e:52:d2:6d:89:
34:15:82:6d:40:45:00:1f:9b:5a:38:50:3c:84:3a:a1:d0:7b:
c1:69:ac:cd:eb:df:ca:43:87:bb:3a:45:57:00:ae:b1:3f:47:
28:7e:4d:42:27:8d:b3:a2:c2:22:4c:a7:31:47:b9:d5:af:b9:
aa:25:d4:3a:75:09:0a:3b:b1:58:68:eb:c2:42:e4:b0:de:94:
5d:80:12:18:3c:26:5d:e0:1a:87:89:39:55:b4:1e:be:9a:8a:
ce:cd:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:22 2025 by rpki-client