Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: xBrwdbodhZwFAKw7YpxON+v27cZg/N+oDHGQcANfnJ4=
Subject key identifier: CD:37:80:93:2F:8A:9B:71:16:ED:21:78:8C:E9:14:B5:90:D2:4C:CB
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 0194BCAA26FBA1174429767D38A24347D75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 1105
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: HfDGTd4Yf+uuEeuEupmCnWF6c4nol5+r8nAlGQ0UW8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:fb:a1:17:44:29:76:7d:38:a2:43:47:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=cd3780932f8a9b7116ed21788ce914b590d24ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:f9:f0:fc:f6:e3:e2:29:8b:8a:f7:2c:da:
19:5c:99:d9:83:4b:e3:16:87:8e:8f:0a:d8:81:71:
75:72:6e:eb:a4:db:14:b8:c5:dc:cd:5e:11:5d:81:
5b:4d:25:81:81:81:a3:ae:04:f6:4a:24:f7:a8:54:
7e:bb:97:70:b5:6f:b7:b7:97:d2:06:6c:0e:a1:f3:
e9:d7:5b:5e:70:1a:68:94:54:93:d7:cb:0c:63:e3:
aa:42:95:2d:8a:b1:d9:22:be:0a:9e:cf:9e:47:50:
4f:36:51:24:1b:99:47:67:ce:b2:1e:77:f4:4a:a7:
a7:33:85:aa:3b:c0:cf:e6:5c:0c:c0:88:72:6b:e6:
9a:59:26:5f:f7:33:36:e4:27:e8:7e:ca:91:a9:ba:
38:9d:4f:57:17:bc:18:e7:62:4b:bf:7f:fc:6b:48:
d5:e4:c6:64:9f:95:cb:72:76:40:f4:9d:cc:2d:c0:
95:fc:dc:bb:49:e7:bf:63:c7:a7:7c:bb:32:e3:64:
ff:77:be:7a:a8:f2:f3:ec:9c:c0:63:0d:d8:1d:87:
15:50:9a:83:dc:28:8d:93:ac:79:7a:6f:b0:70:b6:
ba:0a:02:ce:42:76:e5:c2:25:5c:c4:b0:ab:09:e0:
97:6f:26:05:36:37:14:82:52:19:2f:d9:30:9a:9a:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:80:93:2F:8A:9B:71:16:ED:21:78:8C:E9:14:B5:90:D2:4C:CB
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4e:02:25:78:76:cb:6f:8d:a5:66:9b:4c:67:64:80:2b:4f:
db:1c:78:d2:f8:bf:3a:25:81:73:a9:a7:4e:c1:90:55:10:84:
44:30:db:16:59:dc:0a:a5:e9:14:7c:77:25:3b:e1:f5:34:4a:
74:50:c9:91:94:a2:68:cf:d5:dd:d4:49:c2:ee:62:e6:c2:a4:
83:78:fc:83:e9:2a:31:b1:eb:ee:a4:50:40:09:3f:6a:e9:63:
10:df:d8:f8:72:f9:fb:7a:14:8e:95:2f:cb:d2:da:a4:9c:5f:
2f:fb:4a:cb:50:96:29:e2:65:1f:d0:90:07:f6:72:8e:85:f6:
78:30:68:ab:8b:93:e1:04:6a:6d:d3:cb:2b:7f:35:cc:04:8b:
09:5f:31:52:46:4b:ad:63:6d:74:b1:15:88:49:62:99:a1:d8:
e0:06:96:95:33:33:40:81:a9:45:84:9b:94:f3:96:8f:58:10:
b0:64:7b:15:c0:e0:04:d7:2e:8c:2c:0a:30:2b:39:71:11:9b:
e7:2b:3e:e2:3a:4d:0f:ae:47:61:21:80:93:ed:8e:3e:f7:39:
2c:93:20:ad:46:47:eb:d2:f1:50:45:4f:01:80:05:cd:fd:65:
f2:b8:eb:0d:6b:7e:59:34:f0:44:b2:d1:40:1b:09:23:2c:32:
e1:f2:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:02 2025 by rpki-client