Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
File: dLJ8XVaEhkhT31uBVyIS7eMizgo.mft (raw, json)
Hash identifier: 7u025/+PsHg8ylEzQ1oHSOz2Ikrv6bnEmEoqmhqNpog=
Subject key identifier: 2B:5E:8B:F3:22:5E:73:EA:BD:AA:E2:FE:C9:17:CD:BD:E1:26:37:AB
Authority key identifier: 74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
Certificate issuer: /CN=74b27c5d5684864853df5b81572212ede322ce0a
Certificate serial: 0194BD85693B36339C1F5192D5AEFCEA93E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
Manifest number: FF
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: dLJ8XVaEhkhT31uBVyIS7eMizgo.crl (hash: jyN6/XuxQiw7izNIFF6wD8lbKStJ1c0z9KXQkSgGXsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:69:3b:36:33:9c:1f:51:92:d5:ae:fc:ea:93:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b27c5d5684864853df5b81572212ede322ce0a
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=2b5e8bf3225e73eabdaae2fec917cdbde12637ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:43:dd:4d:f0:59:f3:cc:aa:39:b7:40:df:
7b:fa:30:ce:1e:66:c1:95:9b:11:c4:8c:21:a4:5b:
84:e0:20:8f:a4:5a:84:0b:4e:98:5a:98:a1:1f:49:
9a:20:30:1b:ab:c7:14:ce:7b:23:cc:8c:63:c0:83:
f3:18:6c:35:9b:4d:ff:96:e0:75:60:49:6f:a1:64:
d4:32:71:0d:cb:8e:6f:7a:f2:19:88:40:ba:96:d8:
02:ac:58:c5:3e:de:28:79:c0:d7:52:f2:c6:eb:39:
09:f4:44:c1:e2:36:51:52:5e:9a:bf:3f:e6:ce:df:
fd:bd:80:9f:09:cb:44:3b:05:21:1d:cb:16:55:c3:
29:b0:98:55:12:e9:da:5c:46:4e:83:31:32:c7:ab:
49:ea:57:f8:2e:3b:b7:df:bc:ab:a4:4c:6c:73:68:
5e:81:69:85:53:26:25:84:07:ba:5a:ce:28:37:61:
26:62:4b:95:88:f2:2d:ff:e2:0d:96:e2:15:91:6f:
96:19:ab:67:49:8a:ef:51:a8:36:6c:6b:5a:cb:7a:
46:9e:6a:b3:4a:5f:c1:33:42:cc:f2:ab:be:c1:8d:
a3:1e:67:36:7f:47:6f:4c:e9:d0:31:6e:a9:a1:c6:
9a:d3:3c:6a:11:9a:5d:ca:e4:74:9d:44:69:35:9c:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5E:8B:F3:22:5E:73:EA:BD:AA:E2:FE:C9:17:CD:BD:E1:26:37:AB
X509v3 Authority Key Identifier:
keyid:74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8d:57:ca:17:59:f4:2e:0e:fe:ed:66:59:15:d1:3b:90:2c:
2c:54:8b:8e:0e:1b:39:05:ae:d7:0e:c1:77:38:2b:9c:58:1a:
aa:3f:97:a1:47:e1:cd:8a:cc:53:35:c9:73:7c:bc:bb:86:0f:
12:ee:f8:12:0f:6c:11:b3:92:c4:bf:fe:9b:07:0e:d4:a5:3d:
8c:f1:93:3b:82:49:92:c8:d7:63:31:ee:7c:22:0e:1b:d0:0e:
ab:a7:82:c0:6e:01:0d:e4:40:04:47:bd:a7:b0:62:17:24:0a:
a7:98:e7:2f:77:f1:e8:6a:c9:65:36:52:cc:e6:50:9f:5e:a5:
57:fa:b5:7b:61:be:1c:e1:92:ce:81:ce:e3:dd:d5:4b:eb:c9:
32:0c:3f:de:5e:8b:34:86:0e:46:a7:74:d8:3c:31:e2:ce:f9:
2a:ed:95:9a:95:5b:87:0f:8a:0e:a8:35:4b:89:f7:32:79:4d:
8d:5b:97:b9:db:c2:85:8c:9e:76:00:09:a8:68:4e:20:b6:08:
5c:3c:50:b3:24:31:94:0d:7e:2d:88:12:01:4e:f5:e3:f4:6a:
e0:a4:62:ff:3d:e6:79:c4:8b:76:72:f1:d7:72:70:44:c4:ce:
a4:96:35:1c:a6:36:34:fa:7d:a9:44:68:c4:b7:91:36:fd:bc:
25:b7:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:52 2025 by rpki-client