Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft
File: dZxU7z8HSxxmiPmXVM2KONmfbKw.mft (raw, json)
Hash identifier: 3n20KjkSaEoFYRjmgXYWeXYF6sTJ4R8QurKEdadSKi4=
Subject key identifier: A2:D6:27:41:74:56:14:1F:1E:3C:A9:B2:A1:9D:B1:28:C9:81:12:03
Authority key identifier: 75:9C:54:EF:3F:07:4B:1C:66:88:F9:97:54:CD:8A:38:D9:9F:6C:AC
Certificate issuer: /CN=759c54ef3f074b1c6688f99754cd8a38d99f6cac
Certificate serial: 0194BC72B8C016252D5E80679B7D17D007AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZxU7z8HSxxmiPmXVM2KONmfbKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft
Manifest number: 07CA
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: dZxU7z8HSxxmiPmXVM2KONmfbKw.crl (hash: Xfaz4b/XYgBCheCZX5V5MwU5KqERjOOKRlq308xL5/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:c0:16:25:2d:5e:80:67:9b:7d:17:d0:07:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c54ef3f074b1c6688f99754cd8a38d99f6cac
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=a2d627417456141f1e3ca9b2a19db128c9811203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:8b:8a:aa:98:82:a0:4e:ab:20:e7:3c:b2:
71:6f:6c:a3:e0:a1:5d:1f:66:c0:1d:bb:f6:15:f2:
c5:45:42:3d:3a:ed:47:15:f2:f2:89:3a:18:5a:14:
cc:bd:3b:2c:94:ea:38:33:7f:f0:2d:3b:e5:11:2d:
23:e2:bb:9c:b6:d5:0e:8f:1a:1f:83:19:d6:93:08:
62:98:18:e9:cf:9a:bb:39:62:1b:2e:9d:44:cf:f9:
02:a3:bf:da:41:2c:b5:e2:7d:20:ce:fc:2d:54:53:
75:15:9c:8c:13:4b:7f:bf:0b:07:6b:6e:6f:d1:1a:
15:b5:e5:e7:d8:d0:bf:77:6c:c2:2e:4f:69:f1:a3:
34:e0:6a:d0:5e:23:b2:1b:fb:ff:1d:8f:ba:88:65:
3c:84:b2:fd:7d:ae:8b:1b:4a:f2:f0:64:33:b6:92:
94:2e:63:ed:0d:f8:63:9b:1a:d6:5f:43:b4:c1:55:
d5:4b:34:22:8c:d0:34:ae:59:42:ba:02:9b:13:24:
1b:58:45:67:f9:39:01:22:21:8c:b2:81:7f:37:eb:
94:4f:50:5f:43:40:80:24:9c:5b:a7:35:04:ce:23:
41:3b:9c:6a:97:85:bb:6e:8a:41:74:29:2b:e6:b3:
b9:0a:c3:26:58:25:7b:f5:96:75:d2:b6:19:f1:e0:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D6:27:41:74:56:14:1F:1E:3C:A9:B2:A1:9D:B1:28:C9:81:12:03
X509v3 Authority Key Identifier:
keyid:75:9C:54:EF:3F:07:4B:1C:66:88:F9:97:54:CD:8A:38:D9:9F:6C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZxU7z8HSxxmiPmXVM2KONmfbKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5beaa0-4a31-4168-99b4-44d29657bab7/1/dZxU7z8HSxxmiPmXVM2KONmfbKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:22:43:7a:77:15:58:d5:85:81:e8:68:78:5a:50:3c:c7:21:
94:bd:d7:cc:4a:6e:8e:b5:b8:60:ba:af:25:0e:02:9e:ef:72:
0c:f4:08:9f:33:b4:07:7c:50:09:29:19:d8:fe:12:e3:03:b2:
80:51:bf:d6:e2:3e:de:3e:69:5b:71:16:4c:a2:6e:7a:13:e6:
70:1d:88:6f:94:2c:f0:2d:fa:a6:e8:d9:1d:26:26:b0:10:4d:
bf:8d:a7:d6:1b:fa:04:cc:06:9f:66:68:ba:ce:77:a3:d3:29:
88:e6:16:ae:89:d2:70:de:6d:84:8a:98:3f:eb:84:31:c0:ab:
62:37:de:5a:73:19:1d:e5:12:8c:7c:8f:b2:56:bc:cd:27:27:
c8:8d:a7:68:e8:84:e6:82:57:37:a8:bd:7f:ad:77:aa:89:57:
cd:6f:cf:c5:29:51:8a:58:c3:4b:fd:1b:96:22:7d:42:51:9f:
58:2d:5f:14:22:96:1f:09:18:5f:58:de:3d:fd:a1:0f:6e:d3:
2d:a9:ab:57:63:bd:e3:43:12:63:e1:eb:4e:d3:9b:a8:d0:59:
eb:12:2e:2e:45:f8:63:92:df:e1:84:bc:9b:56:50:72:8c:f6:
20:a0:b0:1b:6f:37:38:f9:14:a2:4a:21:4f:ce:0c:69:65:b8:
4a:b7:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:31 2025 by rpki-client