Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: qOiBwoBHUOdvDvQlEWkSKd0Wwql1o2R/tjUVfm9jB1w=
Subject key identifier: 31:18:7E:AF:50:AD:8A:E7:53:A7:A3:B8:3B:9E:F6:E0:C7:03:8B:78
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 0194BC3BE5051A882E38E6F3710605F84983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: G+HI8GxrYKxTlfLmDJEmfb1h3gUvqDNZmPCBr2Kk9R8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e5:05:1a:88:2e:38:e6:f3:71:06:05:f8:49:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=31187eaf50ad8ae753a7a3b83b9ef6e0c7038b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:1a:73:d6:28:48:5e:d0:78:e9:7e:1a:79:
7c:52:d0:9e:d3:93:94:4c:7d:a5:3d:1a:a3:7d:31:
7e:16:28:43:dd:56:a9:f8:5c:19:28:62:ef:89:36:
f5:cd:fd:7a:ee:bc:12:b5:31:c5:f9:d7:4f:d1:57:
9e:88:d8:71:d4:d5:49:b2:91:9c:76:37:3f:4d:a0:
98:83:c7:57:e8:0e:dc:e0:4b:7c:36:48:01:77:5d:
b2:9d:2d:d5:8e:e7:81:fc:3d:31:11:eb:c4:0b:13:
a9:96:24:1b:5a:e1:13:e7:34:15:db:55:27:e6:ee:
6c:80:b4:33:02:84:1e:9b:02:86:11:00:7c:da:5b:
74:ea:72:6d:93:7b:f9:7a:bb:fd:ef:18:96:e5:f2:
3a:91:a4:eb:74:a1:1d:08:1a:e0:b2:a6:10:0c:92:
eb:29:f3:de:21:93:f5:32:ea:05:ef:92:83:1a:f1:
77:aa:a1:6d:0d:25:a9:d0:3d:f9:7f:84:91:2b:79:
4c:c3:f4:3f:94:3a:1d:14:09:f5:46:29:ab:2c:a1:
22:d6:03:93:ed:36:40:b8:60:53:ff:0a:20:d5:79:
9d:2e:fa:08:c4:e0:e2:db:4e:56:d0:33:92:c9:d3:
c4:57:af:e6:95:6b:65:07:32:e0:e8:6d:2c:5b:3a:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:7E:AF:50:AD:8A:E7:53:A7:A3:B8:3B:9E:F6:E0:C7:03:8B:78
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d8:90:dd:99:11:e6:f5:e2:fd:ee:80:1c:4e:31:6c:03:42:
55:1f:56:6d:8f:76:a7:71:09:36:5c:df:81:d7:d1:6b:82:9b:
ac:a6:f1:a8:94:4e:a1:d4:47:77:32:63:d9:41:92:b2:29:1d:
66:f8:ba:a6:2e:be:78:c3:ce:7b:40:8f:28:98:27:0d:bb:ab:
fe:9c:79:f5:58:c8:da:29:d2:e7:6e:57:71:26:04:f0:bb:c7:
22:ea:36:a9:a0:f8:5b:25:60:6d:34:84:2e:03:8d:af:de:71:
ae:fc:b6:13:d7:56:26:9e:37:2b:a2:56:2c:c0:83:cb:6f:fb:
14:e9:8b:9f:d2:d7:b4:f2:39:cf:82:f7:af:1a:27:e8:6f:e9:
b9:1a:2d:d5:4a:24:97:4a:84:04:3a:8a:22:a4:5a:aa:b7:80:
40:0f:2a:1b:a8:c6:fa:e9:44:9b:31:67:83:bf:a1:43:81:4a:
49:9e:66:3e:fb:28:97:7a:bf:90:67:68:bc:c9:3a:45:f5:44:
42:d2:64:dd:98:39:b5:12:b9:3c:aa:d9:de:b9:73:e4:85:5d:
0d:1d:ee:00:36:e9:44:f9:c7:c9:91:f5:fb:e5:d8:32:f8:79:
d2:28:06:37:ed:13:c8:bc:18:f0:77:aa:0d:23:21:ff:b1:0e:
f7:15:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:49 2025 by rpki-client