Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
File: dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json)
Hash identifier: KHcUslMJBgpwpSudKQJN2Yf16XUqA5DlEqiQQfvWIhQ=
Subject key identifier: F5:41:05:1B:9C:86:97:CF:F9:E1:68:05:49:20:98:38:70:F9:B7:CA
Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Certificate issuer: /CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Certificate serial: 0194BBCE9167ED2F8CA621EFD1CBCA07D1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: 0eq2y1cpdEU5NILZrj5KNandXcFPTBpEXEZv7+palC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:91:67:ed:2f:8c:a6:21:ef:d1:cb:ca:07:d1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=f541051b9c8697cff9e168054920983870f9b7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:ef:42:6d:8c:55:89:90:8c:9c:d8:cc:ab:
02:e5:82:eb:1d:bc:7f:e7:61:a0:78:0b:8d:13:79:
ac:2c:78:49:1e:c9:d3:2d:c5:4e:b2:58:f0:cd:f0:
89:d0:bb:29:e5:37:cd:30:54:e1:30:89:e2:57:27:
d9:b3:63:bb:83:85:f6:eb:74:dc:33:90:32:7a:70:
68:7f:d0:4d:e8:fc:48:60:19:44:24:18:d3:ed:59:
06:58:fa:16:9f:2c:78:05:d7:03:a6:e8:7e:e6:b3:
5e:ee:e8:e3:18:08:3b:b0:28:69:79:50:f9:6d:cf:
ad:e2:46:d7:3d:0a:b4:3c:af:5e:c0:c7:a5:8c:37:
2d:20:25:b9:f0:aa:11:95:66:df:fa:16:6b:21:cc:
68:32:24:14:bb:d9:de:3a:82:2e:c1:84:a2:f1:fd:
76:ad:c9:cf:4f:a9:f9:00:61:21:ab:6d:9a:59:aa:
a3:ed:16:84:2c:09:8d:71:17:bb:a5:0a:ea:84:20:
3f:fe:71:b6:52:22:86:ec:d6:c5:3b:80:14:ad:b4:
33:3c:18:5b:c2:f5:20:ba:42:e4:91:c8:5f:22:70:
76:e6:ff:59:9a:a5:d5:7a:39:a1:b9:8a:1f:85:78:
cf:94:3d:20:5d:83:1f:66:17:3d:46:cf:65:0d:1a:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:05:1B:9C:86:97:CF:F9:E1:68:05:49:20:98:38:70:F9:B7:CA
X509v3 Authority Key Identifier:
keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d2:b3:bd:dc:7a:91:50:8d:6a:ab:71:d3:05:4d:d1:40:d9:
7b:c5:2c:65:6c:1e:b0:a6:53:2d:91:3a:52:5d:a5:73:77:fd:
e5:31:db:ce:5b:d9:14:b5:1a:31:47:b0:a6:35:f5:9e:cf:17:
83:93:22:11:73:53:ad:79:73:14:e0:e4:a8:ce:7b:21:ca:be:
4a:b1:61:f7:2a:34:ed:6b:15:f9:fa:f9:e0:d5:44:d5:eb:eb:
53:d4:bc:2e:e3:80:59:6b:db:e9:1d:97:1d:9e:f9:c0:e5:e1:
bf:5a:c6:fc:04:09:69:69:bf:54:d9:c1:42:12:75:68:f0:57:
00:6f:c0:bc:7f:8b:98:4e:9d:1e:1e:ca:12:62:35:ad:ea:49:
3f:f4:9f:12:4e:53:c0:9c:56:4c:68:4b:82:39:63:69:51:43:
3f:33:87:59:6d:c5:9e:a5:82:25:5d:b4:d6:19:16:93:68:c5:
63:13:bf:f0:1e:af:66:3a:17:e2:d4:b2:dd:5d:14:f9:f8:0c:
ed:2d:2d:a6:0a:ee:58:81:7d:48:b0:76:32:c8:7e:4e:d8:aa:
7b:ee:f7:9e:d6:41:b1:fe:18:2d:25:ec:f8:73:c7:2b:be:76:
bd:db:f5:e3:aa:10:ce:3f:ab:93:b1:1a:5e:6f:49:a5:fb:8d:
f7:59:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:39:13 2025 by rpki-client