Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: 0ye0ulrRCgVGcX58/xqLjkWhBJrZAm4xOVhbGmkKQ7k=
Subject key identifier: 1F:C1:9D:A2:53:04:28:17:E2:3A:F9:27:21:80:32:91:0C:9E:E8:A2
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 0194BBCEC5C86E52A966C7A44BD850991A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 1162
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: Qcl40g4I+dnHmdtQB6uJsYwtsVraKVgsMrbUVIWd8UU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c5:c8:6e:52:a9:66:c7:a4:4b:d8:50:99:1a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=1fc19da253042817e23af927218032910c9ee8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:8a:82:70:26:9b:46:4d:32:12:1d:89:fc:
dd:5d:bf:db:d9:9d:6c:73:80:95:49:4c:68:f5:20:
8a:68:eb:ff:e2:0d:93:8b:06:04:65:25:56:7c:59:
6e:45:fe:85:1a:fd:3b:25:72:68:94:86:37:69:21:
85:97:8a:f9:07:47:28:b2:6e:ce:3e:96:0c:ce:62:
ce:7b:e7:71:cb:2c:ea:a6:83:90:1d:c0:16:fe:29:
9d:21:65:e4:90:85:80:4a:56:1e:1f:d2:bf:5e:6f:
95:a4:05:73:e0:16:b2:7a:c5:73:c9:0b:1f:d0:5e:
df:43:1b:41:7a:8a:b2:62:f8:47:d6:a4:01:6c:01:
46:fa:f6:7f:f6:42:25:15:33:22:c4:2d:0d:25:5d:
b8:61:98:77:d1:75:f2:99:eb:be:29:da:e6:c9:6c:
71:e8:dc:92:a4:8c:86:06:8d:5f:b0:9e:bc:09:90:
9e:1e:0e:4a:6d:a6:a8:30:f7:83:32:ef:88:bf:3a:
1b:ec:16:4a:58:b5:fb:f0:54:bf:ee:80:61:6e:6d:
4f:52:45:9d:b1:ee:b9:ac:5f:ec:57:b2:8f:21:ac:
52:46:f7:a2:08:19:e7:02:c8:62:6f:3f:4b:d5:19:
19:a0:6e:4d:33:6d:1b:da:5a:e2:ed:96:93:05:7e:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C1:9D:A2:53:04:28:17:E2:3A:F9:27:21:80:32:91:0C:9E:E8:A2
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a2:63:0a:a6:b5:51:ef:6e:75:73:3e:6d:38:23:76:39:e3:
c3:6e:15:c7:94:af:2a:47:af:7e:3c:6e:7d:4d:31:62:ee:02:
31:04:26:c2:33:57:ab:78:e1:fa:25:77:de:c1:75:79:4a:f3:
47:3a:0a:e6:a5:3e:b0:74:df:cf:8c:6f:8d:bd:89:9a:a0:91:
d3:f6:98:fc:60:82:64:3e:e5:7c:02:02:a1:ab:0b:ab:57:d2:
51:ca:2b:1d:d9:ab:21:91:62:a6:cc:7f:52:76:2f:0c:d4:e8:
21:56:d5:70:d0:af:9f:8b:06:8f:3a:8b:32:80:39:3e:74:61:
88:7d:b6:e6:16:67:b9:e3:06:d7:98:1c:58:54:9a:fd:d3:6d:
75:f0:f4:3f:11:3b:f4:78:a7:f5:dd:dd:c3:6d:a7:f7:b9:43:
0c:c3:4e:b4:df:02:7d:6f:1f:86:94:a6:25:cb:dd:3d:c8:a7:
34:6f:b7:1c:e6:55:61:41:7c:e6:62:3f:b9:af:2a:b8:34:f0:
ed:ab:d2:dd:6a:df:f4:cc:22:fc:05:ca:65:db:50:27:75:76:
00:99:42:38:e6:20:de:f4:50:03:13:59:c1:bd:f0:20:38:f3:
32:f3:36:b6:ef:b5:8e:01:07:9e:20:3a:89:9f:49:7d:fb:a2:
45:4f:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:43:44 2025 by rpki-client