Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: bghSAA1sy1JohMLUB5nv2Xy2GWQtGT98ipKNrIgTWZQ=
Subject key identifier: C5:B2:39:72:68:D0:14:35:66:1F:83:3D:4B:8C:1D:7B:3A:E0:2A:6D
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 0194BC3C7033A6E7B16F813EA0ADB4445CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 0D1E
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: m+xp+A9w3egTyfKmKYqAY6mdLuRXmxGY/Xv63baH+1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:70:33:a6:e7:b1:6f:81:3e:a0:ad:b4:44:5c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=c5b2397268d01435661f833d4b8c1d7b3ae02a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:8e:ed:cd:77:07:e9:26:e2:6b:e7:4f:eb:
ae:02:e1:d9:bf:2c:39:cb:0f:71:ff:42:f5:bb:65:
d9:e5:6d:86:f3:24:3a:40:11:c3:ef:6b:bd:dd:db:
47:4d:82:c1:0a:61:d3:63:91:76:ac:77:2f:f1:a5:
43:c2:50:34:5a:03:f4:11:cd:7a:5e:86:32:3f:95:
ab:f2:83:c3:31:cb:0a:4d:77:d2:08:20:1f:d9:22:
19:bd:29:65:e3:42:f0:32:60:0b:8e:27:b5:55:c2:
6b:8d:51:57:b0:1a:95:d9:ab:96:bf:4c:44:1c:7a:
af:df:c0:88:a2:21:11:57:9e:70:75:6a:50:c2:6c:
22:44:7a:33:f0:02:af:98:ff:dd:a6:60:a9:7e:3d:
c9:d1:07:d7:ff:c7:f6:78:c0:ec:6b:c4:2e:fc:4e:
88:f5:dd:34:81:89:43:aa:c5:4d:02:91:50:4f:5f:
93:75:b9:99:56:89:15:4d:b6:2d:02:5d:cd:3a:29:
e9:60:bb:be:76:2b:db:75:19:94:94:b2:2f:ca:f5:
39:d8:46:72:7f:c8:30:3c:6b:b0:c9:a3:c5:1a:a8:
07:7a:d6:6a:19:66:da:0e:b2:70:b6:14:dc:52:78:
ac:21:68:ca:e4:c3:86:5b:3a:be:72:47:9a:a8:13:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B2:39:72:68:D0:14:35:66:1F:83:3D:4B:8C:1D:7B:3A:E0:2A:6D
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:d1:a7:1f:f5:9b:73:ab:03:c1:be:d3:df:e6:bf:59:2b:
01:3c:b0:62:7b:c9:72:43:5b:9e:08:90:f9:ec:fc:6a:c9:c1:
62:69:aa:22:d0:93:19:bc:40:2e:7c:6f:77:d3:42:59:fd:7d:
67:ef:48:a1:6a:1e:15:a1:77:84:2d:95:fd:24:40:50:10:89:
1b:4c:e9:86:19:df:15:44:cf:f8:f5:8a:97:3f:d3:e4:a5:4b:
50:45:9c:8c:6b:6f:3c:93:43:2f:1a:ab:5f:98:b4:2f:1e:cc:
a9:55:42:b4:4f:a1:bc:77:74:b9:ef:dc:cf:90:20:04:f5:45:
e1:c2:1c:6c:a2:ac:44:67:33:a6:3d:23:48:1d:02:0f:16:e2:
e2:ab:77:b5:7a:8c:aa:32:f3:b3:18:f5:2a:4c:7d:18:89:0d:
55:e7:c5:f1:9d:57:8d:68:25:e5:0d:f3:88:45:12:68:0c:87:
f2:3a:45:4e:1c:8b:1f:99:7f:bb:db:a3:0f:9a:41:59:e0:5c:
41:5a:35:f1:af:18:82:36:1a:4e:71:ca:41:b8:7e:ce:23:30:
2c:5e:3c:8a:a8:9d:fa:09:23:7f:ac:17:6e:5f:3a:ca:9e:4a:
8e:a9:51:54:06:c3:ab:d0:21:27:fe:24:f3:bc:08:56:aa:3d:
00:fa:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:34 2025 by rpki-client