Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: FFDUz5pO8JY4sCS8dpvam7rEBGKN1DnK/ucsAh9zVIs=
Subject key identifier: 64:E1:AE:AB:7F:E4:10:CE:78:AD:CA:F5:5F:1E:A2:4D:6B:B3:34:B9
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 0194BC3C6D26749DAAEA19BF3024BD213C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 0C01
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: /2oyabPsZTT4qTIGFpkX0KM0rM00LtzHBWHfMgKRJC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6d:26:74:9d:aa:ea:19:bf:30:24:bd:21:3c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=64e1aeab7fe410ce78adcaf55f1ea24d6bb334b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:39:3f:5c:c1:37:bd:99:83:39:df:0d:73:
ef:d9:0f:26:d9:bd:1f:c7:08:d8:c7:6f:57:b4:9a:
21:e1:31:f0:d0:f9:0b:dd:4c:b3:f1:5b:4b:ce:98:
c4:c7:70:b4:3f:92:dd:99:67:b4:50:cd:b8:e0:36:
a5:cb:c4:c3:1a:4a:66:06:06:ef:6e:69:e7:74:52:
15:b0:ec:32:b6:62:ae:ba:5d:31:b3:d1:d3:a3:24:
bf:8f:bf:67:e2:fe:62:70:f0:b4:e7:71:65:a0:02:
5b:8a:f9:25:8f:a8:8d:23:7a:01:da:b5:d9:cf:d6:
ab:a9:e3:f6:48:28:51:42:80:61:73:d9:d2:70:87:
64:c7:82:ec:3c:d3:35:37:a1:2a:c5:f3:c0:d4:32:
31:8e:f0:c5:ce:6c:82:3a:13:15:8c:7a:c3:aa:c5:
c5:13:5a:3b:fa:28:97:43:57:c9:80:93:5d:a6:c8:
fd:66:85:b1:46:7f:e9:8b:96:87:e8:2e:19:38:3f:
6d:d5:9c:ae:c4:4d:94:14:eb:7a:58:2a:f5:9e:63:
3b:70:b0:3c:83:ad:d6:ff:ea:f1:dd:10:55:5e:d9:
8a:ec:b9:0a:66:42:8c:b1:d0:ad:69:d1:e2:c5:c7:
97:89:87:33:0f:72:ee:8d:7c:9f:7c:3a:1b:eb:71:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:AE:AB:7F:E4:10:CE:78:AD:CA:F5:5F:1E:A2:4D:6B:B3:34:B9
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:6a:6e:18:a8:2a:e2:c3:36:1e:35:98:14:fa:e1:d5:e9:
62:ed:94:c5:a1:e8:b0:f4:b7:c0:43:8c:7a:cd:8b:e4:c3:3e:
1d:9f:a1:a2:b2:b2:75:45:65:ca:97:69:60:20:f5:2e:11:8b:
b7:33:76:b9:6a:87:00:0a:ff:1c:56:11:71:61:82:a5:e4:a8:
43:f4:4c:3c:c0:fd:9a:48:75:9f:19:e1:d1:2a:0d:1f:ca:12:
93:8b:3d:d9:9e:0c:d7:d9:17:79:fa:d3:d0:e9:34:e3:85:bd:
52:c5:f0:ba:dd:73:73:e8:ef:5d:3d:34:00:7f:93:38:c9:95:
19:c7:c2:ff:af:94:a2:7a:6b:1a:8d:38:04:30:f9:fb:02:6a:
3a:05:6b:6a:32:2e:03:1f:6e:e2:6a:8a:02:06:8a:d0:54:d5:
05:75:96:68:7f:cd:6b:cc:10:05:48:1d:ea:64:67:4c:23:67:
4d:d1:56:f6:2b:03:00:22:80:37:4e:73:f8:3c:d4:b1:6f:7d:
42:f1:76:31:a6:db:fc:20:8f:0e:9f:9c:21:29:80:a0:52:6e:
24:4e:95:fd:36:09:3e:2f:1e:a8:33:d5:68:33:fb:22:ef:6d:
a2:da:f8:d1:4e:09:c8:9e:0f:16:6b:13:b1:84:9d:0a:3b:37:
cd:41:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:58 2025 by rpki-client