Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
File: dNUnZVf32kEAET2Fc5VmSBVA5hw.mft (raw, json)
Hash identifier: IznU1fAAiG/x0Anjzt0kjShLiKd9FPXPlJrvAT4kL0o=
Subject key identifier: 51:8A:A0:35:AF:93:14:17:4A:C2:AC:4D:B6:F6:AD:64:0C:45:C1:C1
Authority key identifier: 74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
Certificate issuer: /CN=74d5276557f7da4100113d85739566481540e61c
Certificate serial: 0194BC3C1903D04C3C5553003B2E6CA53149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
Manifest number: 06DC
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: dNUnZVf32kEAET2Fc5VmSBVA5hw.crl (hash: yDhad7Et2vOIrk8o+az6pBLG7abztuIO2jm2A91EyPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:19:03:d0:4c:3c:55:53:00:3b:2e:6c:a5:31:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d5276557f7da4100113d85739566481540e61c
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=518aa035af9314174ac2ac4db6f6ad640c45c1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:68:7c:92:76:1a:9c:01:8b:48:ba:88:44:
01:ab:40:ca:63:d0:07:f8:f5:ca:b8:fc:00:35:c0:
e9:71:62:e3:8f:ad:14:a5:0a:1f:ee:ed:be:6b:a7:
0b:5a:21:6d:c6:49:3c:61:87:cc:09:d1:68:d2:59:
33:4a:76:18:38:58:c2:3f:82:73:59:8e:a5:d4:d0:
f4:10:56:55:0d:6a:44:8e:72:5d:c2:b1:57:24:0d:
75:0e:ec:e6:df:a8:75:ae:de:50:8d:11:09:fe:60:
dd:74:16:b4:c0:3d:9c:5b:da:b2:98:32:f6:3b:73:
85:43:d9:30:1b:61:b8:29:ad:be:e4:1c:38:20:35:
33:fb:c9:1c:84:58:b9:d3:65:f4:1c:f6:41:14:74:
30:65:59:06:7f:e0:2b:17:e9:ab:be:cc:77:7d:4c:
36:4d:3f:0d:d6:d0:c3:62:c7:09:cc:cb:4b:f1:88:
e7:0a:e4:f0:cc:ff:03:fb:a2:4d:70:a5:30:17:0c:
f9:82:81:15:c9:93:45:e4:70:6d:e7:ca:f3:f4:a8:
19:e2:31:0d:54:a2:61:58:8d:d9:c5:c9:95:be:21:
ed:5c:c7:7c:ba:b0:40:8d:7c:ec:4f:86:24:e0:78:
29:2e:2a:c6:43:a9:59:37:51:c2:53:29:c7:e1:80:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:A0:35:AF:93:14:17:4A:C2:AC:4D:B6:F6:AD:64:0C:45:C1:C1
X509v3 Authority Key Identifier:
keyid:74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:0f:d2:79:fd:99:1c:21:99:8b:69:bc:77:a2:08:db:12:34:
14:69:bc:f7:1e:55:d1:06:9b:c8:7d:95:41:cc:98:ab:21:7c:
22:b5:57:45:80:eb:c3:fc:6a:92:9e:eb:ba:5d:95:c6:59:69:
27:de:4d:50:9e:ca:e9:41:f0:36:96:42:52:f7:6a:29:26:d0:
2a:49:53:c1:a8:52:1c:ec:b7:97:bc:dc:5b:1e:01:8e:be:45:
29:f5:b9:02:38:bd:cb:b4:4f:f9:77:fa:06:e5:00:c5:c5:34:
d2:7b:11:1e:7a:97:80:fb:c8:7b:44:8e:d6:03:40:17:27:1d:
5c:1d:ff:22:06:e7:bc:d2:3e:e6:c1:2e:df:66:6b:d0:41:99:
e6:bb:2b:1f:7d:1e:43:fb:55:c2:ee:a6:9e:cf:1e:63:e2:0d:
24:87:9d:03:6c:21:d4:5f:c9:f8:e3:01:5f:fb:a9:49:79:3c:
2a:71:00:7d:65:e2:f7:50:2c:e6:f9:c6:d1:62:6d:5d:d4:43:
73:31:89:36:1b:50:5e:db:42:03:f3:a3:15:27:6b:e1:9c:72:
46:b7:6b:ae:29:57:d5:ee:45:f6:0f:b4:f1:6e:d5:3c:65:a6:
a2:c1:5c:8d:d3:cc:fc:24:f2:55:64:89:ae:27:e6:56:c5:26:
88:6b:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:20 2025 by rpki-client