Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: EthNDcxIszxtFYyChEZSsG2bQIp8mQd6mF5Wz5lPdy0=
Subject key identifier: E2:C3:49:33:A8:9B:2F:06:AC:DC:89:B9:20:B6:60:A1:AD:F9:26:B3
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 0194BBCDF7E35459EECADAA347B537AD01EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: qTgOI+E7fGBJVv/VrhyE9ncOuypm4VwAARpvBkcm8/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f7:e3:54:59:ee:ca:da:a3:47:b5:37:ad:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=e2c34933a89b2f06acdc89b920b660a1adf926b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:74:2b:44:38:8a:a1:b2:cf:2c:99:af:28:
38:25:59:d9:dd:f0:c1:69:b4:dc:57:71:d8:af:41:
0a:bc:55:60:4e:8c:23:91:08:b4:b7:3a:78:c8:cc:
b2:21:33:a5:63:e3:7c:85:c4:3a:81:35:95:ec:69:
d5:f5:10:70:ff:bd:2c:94:3a:65:21:1c:bb:d7:89:
1e:8e:df:0e:2b:9b:e2:b0:0d:97:79:78:1d:64:7b:
e4:8f:48:fe:71:68:0f:76:be:27:c2:81:a5:72:e1:
69:c8:a9:10:cf:49:3e:84:76:ec:43:de:35:bd:50:
2a:31:f3:dc:14:f3:23:dc:b7:d9:1d:4a:17:60:8c:
dd:9e:e2:74:2a:aa:71:fb:02:3e:79:de:27:5c:a7:
17:52:9a:69:53:73:59:b8:8c:5d:2f:0c:b5:60:c9:
d9:3c:03:4b:0c:45:3b:a9:3f:f9:53:b1:08:4a:10:
3a:62:a0:82:cb:1c:42:cf:a2:e0:d6:92:4a:73:4f:
08:22:ff:b4:7f:96:da:a7:a7:94:b8:a9:73:13:79:
89:a7:17:4a:21:8f:3a:52:c0:73:e0:2a:44:31:96:
e0:a2:46:00:1b:bb:ef:29:a9:1f:4a:30:a2:c8:77:
3a:b2:3e:7e:9e:7f:d1:1d:77:ea:f3:4c:b4:b0:a9:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:49:33:A8:9B:2F:06:AC:DC:89:B9:20:B6:60:A1:AD:F9:26:B3
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3d:89:bb:20:66:b0:42:92:9d:3e:a3:5d:31:d9:8e:bf:3e:
25:56:81:80:27:24:11:17:a1:49:c8:f1:c3:a5:59:13:ee:c7:
bb:3f:ea:43:49:9d:e0:e3:68:4a:a2:7f:47:7e:e2:56:ab:74:
dd:e9:48:83:c9:b1:38:15:66:6e:6b:18:21:29:c0:0e:f2:e9:
a7:66:f5:0b:b4:e6:80:1f:29:7a:ce:d0:98:cd:2a:25:25:03:
64:36:00:38:31:bc:d7:73:da:dc:5f:4d:0a:7c:fd:6f:ae:27:
c5:08:87:57:2d:b5:72:5b:f8:45:2b:6e:93:30:02:79:31:78:
d1:d4:c1:41:91:5a:e5:56:d1:10:22:b8:82:59:db:7b:03:dc:
59:d6:06:cc:dd:f5:53:c4:78:78:c1:8b:eb:d6:16:20:2f:e6:
8a:3b:88:97:a8:96:11:fe:44:ce:69:ab:f2:31:5b:9c:c6:3d:
74:65:c7:af:bb:c7:d2:b8:21:45:e5:bd:7d:d7:94:46:4d:01:
2a:c1:15:02:ba:c1:75:f2:74:7f:f2:0d:36:a1:55:91:8e:59:
9b:6f:43:67:8a:38:42:6a:1f:b6:54:0c:6a:29:13:30:a4:3f:
1e:41:07:c8:11:aa:a3:32:5f:68:95:32:e7:ff:66:78:9a:59:
cf:ce:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:15 2025 by rpki-client