Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: 0FUjzIzkqs0jzlJitfLssNKwmrsUlXQaWGkuZxi3BI0=
Subject key identifier: 9A:D5:DF:77:1A:A5:18:EC:C1:13:39:72:FB:D5:0E:C3:EF:20:99:F2
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 0194BBCEA7B9D7BBB33EDEA00040F0742348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: 5SL+JlVwECJIVQeZ8xff343DXs11GxqcqWF1v523yNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a7:b9:d7:bb:b3:3e:de:a0:00:40:f0:74:23:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=9ad5df771aa518ecc1133972fbd50ec3ef2099f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:aa:66:34:12:5f:30:e2:96:41:39:80:f5:
7f:01:1b:36:40:61:8d:bb:86:6b:0d:fd:f1:4a:b6:
19:9b:4b:77:c2:d6:77:70:57:79:97:59:25:4d:d4:
3a:c2:13:b3:8e:5b:6d:02:43:88:6f:31:4d:ed:dc:
47:31:1b:a5:b2:dd:79:fb:86:f1:81:d1:a5:5d:d2:
cb:d5:1c:a0:8f:0b:9f:13:fc:05:fb:92:37:b2:cc:
57:db:18:f3:6d:c7:56:ec:41:3e:87:84:57:6f:e3:
4a:53:a1:76:7c:a7:b7:91:99:a8:9c:d7:ec:a9:72:
96:f6:cb:0f:f7:e2:e9:2e:a4:d3:76:c8:c7:7b:cf:
e8:69:53:a7:03:a3:ec:ca:e9:6a:e6:9e:04:21:c6:
d2:2f:00:0b:4d:30:07:25:33:d0:d2:b4:e7:f6:ba:
46:77:d3:b2:31:66:36:86:b2:c6:63:9e:57:7c:5f:
bd:90:90:f5:f0:d3:37:f2:5a:e9:65:02:19:20:05:
2e:df:db:83:24:05:46:f9:44:47:83:ca:c3:30:51:
df:08:c4:b0:83:e0:82:39:3a:7a:3a:26:6b:cf:a3:
69:88:fc:83:8e:09:bb:66:29:72:59:c0:2e:90:aa:
ed:a9:38:bd:3f:27:d0:32:2b:56:7b:40:ca:e3:37:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D5:DF:77:1A:A5:18:EC:C1:13:39:72:FB:D5:0E:C3:EF:20:99:F2
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e6:c9:75:07:11:2b:c7:b1:37:a7:a1:f2:86:57:27:cb:59:
81:5f:e4:a5:98:1f:94:6f:05:45:20:eb:b7:73:75:fe:c0:65:
3e:18:60:93:52:37:2c:ce:61:bf:c3:9f:55:05:99:93:20:31:
c5:40:5d:d2:5f:c5:7e:97:79:02:44:44:6d:1b:6e:50:8c:82:
35:ee:e5:d6:22:b0:2c:4e:fd:92:07:a8:50:f5:ef:48:a4:f0:
9c:9a:5c:b2:c9:91:76:8c:2d:4d:88:96:b8:56:5f:ef:c2:c2:
02:bc:c8:eb:f3:09:6c:a6:9d:7d:2b:de:1c:7c:bc:b4:e4:fe:
a2:0e:22:73:43:9a:0a:de:91:8a:ab:73:89:a8:1d:00:2f:cf:
46:8b:60:79:19:80:cc:f3:9b:ab:7d:70:8d:d0:88:47:47:af:
fa:98:85:8a:9b:83:71:7c:e6:51:ab:4a:82:97:25:21:9c:32:
39:2a:38:74:c8:07:6f:9f:31:90:de:f0:05:60:7d:d8:0f:88:
93:e5:2d:0e:f8:5b:9a:d5:46:c2:78:b6:f0:7e:f9:2a:51:1e:
9c:b7:87:96:6e:5f:92:16:31:71:79:f5:18:77:d1:8b:65:72:
1a:5d:81:fb:b4:31:85:81:8a:1d:65:63:5d:fb:26:4c:2b:8d:
36:93:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:33 2025 by rpki-client