Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: kyXV00qS8DHT+ISeUA9LBt44y7XrhePQhZDiyLJBCAo=
Subject key identifier: A4:8A:52:1E:6F:D6:C8:D6:52:09:55:87:D4:3B:82:D0:83:96:78:9E
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 0194BBCEBD3D0B2D2AC278BC90E1152DF395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: Kh9Db6C0l/tuLliVyAvpQx18KChK8IMTvk1KySWh1wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:3d:0b:2d:2a:c2:78:bc:90:e1:15:2d:f3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=a48a521e6fd6c8d652095587d43b82d08396789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:50:f0:ed:82:66:96:c1:61:00:b4:76:23:
ee:20:2d:d7:5f:10:43:e7:77:01:10:c0:45:88:6c:
bc:15:4c:8c:0d:8c:df:28:82:f1:26:dd:45:7d:7e:
50:00:59:a7:f4:a6:be:c1:ce:e6:05:75:14:a8:72:
2c:82:ae:2a:c6:92:b9:53:87:96:4a:90:bd:d8:3b:
58:17:b6:80:63:0b:29:41:d0:c9:13:ba:a8:13:eb:
e8:47:0c:f5:c7:b8:e3:88:4f:93:90:e5:e7:a7:a1:
c2:c9:3e:8f:ea:cc:8f:01:b9:ed:34:06:a4:4a:75:
95:73:f6:07:19:9d:36:33:18:04:66:46:87:1c:aa:
2f:9c:7c:10:b6:3b:d5:61:7c:ca:c2:bf:9f:86:48:
4d:f3:ed:46:6f:26:1a:fa:79:fe:3d:18:74:5a:0c:
60:b2:95:00:52:b8:ec:6e:34:02:cb:16:eb:e4:46:
0e:2e:31:6e:37:cd:9b:6c:34:7d:10:82:26:f2:71:
d0:61:da:c2:fd:d2:61:e6:4e:d2:4d:1d:f5:38:0d:
91:03:08:d2:5d:82:30:9d:32:51:3f:c6:f6:a6:77:
65:05:18:a4:ef:4e:e0:f8:f7:f9:17:68:f1:1b:3d:
1a:aa:dc:25:3d:2d:eb:74:c6:9b:75:b3:2c:ef:eb:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:52:1E:6F:D6:C8:D6:52:09:55:87:D4:3B:82:D0:83:96:78:9E
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:df:92:40:f6:86:ba:81:66:04:2f:18:ce:bf:6b:a9:65:3c:
d0:5d:fd:49:15:ad:24:e1:bf:71:ba:2f:41:5b:9b:c9:51:eb:
b5:71:d4:43:be:2e:2d:56:8e:89:90:bc:60:91:8f:27:d1:29:
b8:94:2d:cb:03:93:03:2a:a3:ea:f4:64:66:13:da:c8:28:64:
d6:9f:53:d3:27:ec:66:27:ff:59:37:ec:3b:55:79:b8:f9:61:
ad:4d:5f:ee:90:f4:e6:47:30:fb:ec:58:6d:b3:60:21:bc:11:
4b:de:9b:78:aa:3f:c8:a0:65:59:68:55:10:0e:47:6d:42:ba:
87:67:bd:c0:84:2b:c7:db:7e:50:74:30:d8:75:61:be:2a:06:
ee:fc:92:cd:5a:6a:78:2a:0d:25:d0:c2:b3:7e:ae:54:a6:0c:
be:b9:41:a2:e8:58:ac:2e:96:80:cf:5a:7c:f8:55:45:86:40:
5d:98:f8:9d:5f:a0:5b:39:ae:ab:85:ee:e5:e4:24:7c:cd:38:
d8:7a:71:76:94:61:59:71:ec:18:7e:9f:fe:86:0f:5a:8a:91:
dd:52:91:b2:92:03:90:1c:ec:d8:4d:85:2b:85:f7:1f:12:6c:
73:f0:4d:ee:6c:b6:31:1d:c8:39:1a:1d:83:b6:a2:94:76:13:
63:1b:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:12 2025 by rpki-client