Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File: DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier: X7t3UVIhageEZ9iTKdECSrjHKY5oMd0oAQV2E52hrQw=
Subject key identifier: 28:F9:8B:05:A7:C5:36:3E:A4:69:10:AF:6E:6B:50:2C:75:3D:EE:3F
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer: /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial: 0194BCE0B23587D176BB8F3D4197541F35E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: qdKxKB5NQS/50O5Ue3OYNm6V194YUp0dQ8iipxz1yGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b2:35:87:d1:76:bb:8f:3d:41:97:54:1f:35:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=28f98b05a7c5363ea46910af6e6b502c753dee3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:6e:ea:d9:ec:4f:4c:42:9c:2a:1c:88:fe:
ae:62:14:81:74:b1:af:0e:dd:8c:fc:b9:9a:a6:20:
bb:af:76:f0:91:3d:65:17:9e:c6:4b:ab:10:fa:d6:
c6:e2:56:ae:57:c9:12:b5:d9:fd:d6:2c:5a:f6:a6:
f5:59:73:23:d6:d4:07:ee:0b:57:ff:6e:db:13:73:
ba:02:0f:36:4f:c4:37:85:b2:9c:28:af:db:57:1a:
23:d2:6d:8a:71:bc:9d:40:84:99:b5:95:47:c8:8e:
7d:34:96:55:2c:7e:c9:f4:80:f4:01:88:7a:bf:0d:
ac:78:1c:0f:ae:b1:2e:89:12:7d:82:00:f1:69:87:
d8:c6:89:53:3f:84:66:02:68:64:6f:fa:51:e9:cb:
97:7c:34:0b:32:31:a7:20:43:0a:5d:40:6d:b0:ed:
50:a9:c9:25:41:e2:6a:a1:14:aa:69:6f:ac:ae:87:
3b:15:d6:8b:06:0e:ea:98:26:21:51:97:60:9c:3e:
3d:f4:70:67:6c:6f:7c:ec:9e:7f:1b:30:88:33:da:
26:61:8f:0e:80:d6:44:f9:18:3e:3c:25:28:08:14:
d9:9c:1e:6f:bb:5c:39:a4:b4:7c:f0:70:d1:bf:d0:
d0:ff:d0:da:ec:d7:ff:da:13:1c:bb:83:d1:8b:05:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:8B:05:A7:C5:36:3E:A4:69:10:AF:6E:6B:50:2C:75:3D:EE:3F
X509v3 Authority Key Identifier:
keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:41:1c:cc:6f:4c:3a:23:c7:9c:65:b6:82:5c:c4:8a:8a:d2:
72:60:f9:ee:33:16:8a:d7:89:fe:60:2e:05:aa:df:74:e5:57:
a4:f4:47:51:eb:b9:29:1c:5f:81:54:3a:71:2e:04:a9:ea:7a:
91:3d:91:b4:b8:25:6d:25:db:68:5d:23:92:95:14:78:d2:65:
c5:84:d5:32:b8:31:25:d5:36:16:73:92:6a:f1:2c:bb:7c:36:
cc:75:72:87:87:98:bb:89:da:d1:23:f2:33:32:f1:de:42:29:
7d:4d:11:f5:57:3e:45:4c:e4:da:29:21:e5:a6:33:e3:99:18:
48:e6:da:fe:fb:41:6e:81:ae:5b:98:ab:0b:34:34:29:08:90:
0f:99:48:09:c6:4e:1d:43:3c:7b:f5:f4:40:ce:d6:dc:b8:85:
23:50:29:ed:da:94:d4:46:3d:5d:47:b8:55:29:b3:7b:fb:0d:
52:92:f7:4f:16:0a:b5:80:5e:0d:e3:b8:0a:99:e3:08:0b:0b:
bc:42:c3:23:70:ca:5d:a2:57:d5:3b:e3:66:15:a5:24:c0:1f:
f7:3f:06:55:c5:54:02:bb:69:0e:67:b8:65:59:af:93:17:40:
b3:b6:28:47:22:85:20:55:7b:c3:de:bf:49:4e:aa:26:7f:2d:
05:bd:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:57 2025 by rpki-client