Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: GtnbOJzYzDt6wHvR/ivVIz/KBksjX0ZuPufKmtKbIvg=
Subject key identifier: D1:1B:2A:99:FC:25:2E:57:23:2C:D3:19:EC:13:34:BB:60:30:CC:C3
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 0194BBCDBA29537BCA1E06AF4832E4674FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: INVxMWV9AO1nD7MJjUHbr8/sqYxFlRiiREYzJ70YYqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ba:29:53:7b:ca:1e:06:af:48:32:e4:67:4f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=d11b2a99fc252e57232cd319ec1334bb6030ccc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ca:80:6c:e3:02:00:bb:14:2d:6e:4f:45:f6:
cb:b4:0c:92:32:0f:52:44:0a:b2:53:92:bb:7e:9a:
ca:b8:71:6f:cf:c8:61:aa:c6:c7:f6:93:70:b1:aa:
0e:a4:45:d6:e2:8f:8c:ef:9f:12:a9:61:a8:b0:8d:
c3:9d:d4:2a:ea:13:7f:3b:42:69:14:49:9f:a6:e7:
ae:ac:6f:18:83:2b:5f:2d:e8:9e:f6:cc:23:52:cc:
70:cd:13:b0:c9:11:5e:84:5c:53:b4:57:23:4d:12:
ae:37:e7:20:3b:0a:4a:12:72:f2:a6:73:4a:61:aa:
e9:79:1d:3e:96:00:6a:ce:3d:b8:0c:a6:c7:1b:78:
3a:6d:66:fe:27:60:7a:0e:09:83:c7:42:a5:4d:ec:
57:36:cc:a2:59:24:3e:e4:ea:f4:02:a8:82:0f:2a:
87:48:4c:00:ad:c2:b8:c6:c3:ab:a9:ff:01:5e:93:
6e:2b:2f:ee:63:0a:ac:03:bb:d8:93:97:e5:bc:68:
e4:2a:d0:9c:df:bc:fe:75:f1:2d:a6:30:14:34:4e:
08:88:86:fc:2d:67:96:df:14:93:1e:2b:36:11:6a:
55:d6:0c:fd:0a:05:01:ca:03:8b:5d:4c:46:f6:7e:
35:95:23:e8:ef:ce:3c:97:5c:87:0e:42:70:40:d7:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:2A:99:FC:25:2E:57:23:2C:D3:19:EC:13:34:BB:60:30:CC:C3
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c9:3f:48:b9:06:2a:2c:13:5a:ed:85:df:9b:ab:8c:51:29:
c4:93:4d:61:02:ee:4c:57:18:2f:5b:e9:89:a0:46:02:ab:22:
1e:1d:55:56:36:12:43:6a:43:88:27:55:9b:71:e7:b1:05:ee:
b2:af:6a:8b:68:7e:a9:d3:f5:aa:fe:71:96:5c:b8:92:12:77:
66:f9:f9:a4:09:dc:77:1f:34:fc:89:21:47:5c:ed:da:73:ef:
95:7c:8a:21:89:ed:a7:b9:be:1d:55:2e:d7:d5:d9:8c:fe:5a:
fc:bc:65:b5:bb:d9:5c:0a:de:f5:c3:87:4b:f2:77:d5:6b:36:
45:10:a2:3b:9f:12:58:e7:84:38:46:f2:8a:b9:e6:0a:9f:0f:
2d:15:c7:ad:bc:bc:49:5d:95:4c:0f:9f:7e:79:48:ad:b8:a8:
2f:41:8e:38:74:09:98:8e:ed:f0:a3:25:f9:7e:4e:3b:ed:c7:
b3:56:71:66:a5:0c:34:1e:f7:95:c5:cb:3b:76:ac:97:31:db:
f5:f5:5c:a4:28:cb:9e:bf:22:9c:b0:01:3c:d1:87:8d:7d:b2:
2c:78:bd:59:02:e3:a7:cd:4e:d5:ee:f7:5c:6c:96:20:e0:aa:
c5:17:d8:14:b6:8f:3c:8d:9a:c3:11:76:5b:27:de:ad:5b:79:
77:01:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:09 2025 by rpki-client