Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
File: do5xE0z2ctauj2b8RNW-5iTNAqM.mft (raw, json)
Hash identifier: Wd2ae7YXwxKlxsH30kkySf9t9c+/pzmL0f+rl6ykI88=
Subject key identifier: 79:AE:CC:AC:BE:8A:06:1D:9E:F0:7F:FD:69:B4:F1:5C:33:5A:C0:4C
Authority key identifier: 76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
Certificate issuer: /CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Certificate serial: 0194BCA9B1EBF228415B48ED1038C439918F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
Manifest number: 047E
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: do5xE0z2ctauj2b8RNW-5iTNAqM.crl (hash: HgupfzAbEcRJiUXKWZqnAlGOTZTlUdcWXbus0tnPIgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b1:eb:f2:28:41:5b:48:ed:10:38:c4:39:91:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=79aeccacbe8a061d9ef07ffd69b4f15c335ac04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:68:bc:33:81:06:53:ac:a5:23:29:b3:14:
2e:14:f3:22:fa:3b:77:f9:ac:ed:e7:ce:36:79:d4:
f8:40:f1:d8:c2:7d:07:fc:42:5d:52:4b:79:59:b9:
94:ee:66:d3:7a:e5:62:37:42:a4:85:84:df:fb:a7:
46:c6:01:ed:42:22:a4:c9:bb:66:6d:01:7e:53:bd:
d5:e0:51:9b:d1:2c:d1:7a:30:bd:de:10:3c:f4:ab:
19:b2:16:2e:a8:57:bc:1a:8f:d2:c6:fa:b6:d8:a8:
26:75:4d:df:5d:ca:0d:7e:9d:c2:e5:a3:ad:3f:a2:
c3:c1:bf:2b:28:ef:9e:06:e5:d2:79:eb:91:d6:ae:
45:0c:0b:89:fb:56:a3:10:df:a9:d2:a2:1b:71:51:
ab:b9:ae:ca:42:0b:5e:86:df:be:94:cb:4e:fe:57:
30:50:85:16:e0:51:ee:5c:61:98:ff:b1:44:cd:c0:
10:de:40:c4:ba:8f:dd:4b:8f:01:9e:d0:5e:ca:2d:
84:13:6a:5b:33:77:4f:62:65:44:cf:72:9a:d1:d3:
70:77:c8:02:20:6c:4e:7b:c2:52:25:ec:29:b3:6e:
18:57:29:79:0f:e9:bf:03:f0:84:14:e6:f8:f2:0e:
26:70:59:dd:5c:3c:da:4d:38:30:20:48:f3:69:8d:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AE:CC:AC:BE:8A:06:1D:9E:F0:7F:FD:69:B4:F1:5C:33:5A:C0:4C
X509v3 Authority Key Identifier:
keyid:76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:53:e6:d6:04:f0:72:d8:06:7e:9b:d8:da:1b:7e:b6:dd:
41:4c:50:5d:6e:3b:86:fc:7d:83:e2:90:1f:9e:3c:b0:27:02:
2d:63:66:b3:13:52:cb:a3:69:47:df:8e:b0:ae:fd:96:c9:64:
6f:99:7d:ff:8c:3b:8b:6a:ef:f0:88:85:a1:30:d2:94:de:e8:
32:9b:d4:6f:95:39:83:b1:ce:4e:8a:d9:53:95:da:10:4e:d9:
dc:29:32:7f:30:f6:a4:92:00:49:88:28:7e:67:e7:c0:30:7e:
01:5d:f7:59:dd:20:04:84:8c:fd:f4:28:6b:5f:f0:cd:d8:84:
1f:11:5d:e8:0b:c9:14:22:86:a0:cf:ea:10:fd:bd:f3:18:b1:
65:21:2b:b0:ec:e1:b2:84:f5:79:09:26:4e:68:5c:59:51:cf:
1f:17:44:4a:55:94:ac:38:37:d1:90:94:17:59:f5:5c:99:02:
4f:9f:d5:93:03:f0:48:61:46:c2:39:96:7c:e0:8a:4c:93:e2:
ab:5f:68:b2:f5:72:28:28:6a:c9:1b:d6:84:4d:7c:42:15:63:
2d:1b:7a:5e:f3:94:b4:5e:3e:a0:ff:90:01:25:55:3d:a7:eb:
97:cc:81:1d:79:8f:9d:01:d6:15:9f:4b:fd:c9:ec:67:6a:ff:
20:23:0b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:43:58 2025 by rpki-client