Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
File: dGMPFkhbT5M4X5So7HEArUjF_FA.mft (raw, json)
Hash identifier: BdbiIn2ZlJnFHof1ImgdLkWRc014GT+9fcj1xa/AEu8=
Subject key identifier: 81:97:26:C4:22:C6:B7:83:1A:8A:BF:2A:19:75:BB:EF:49:83:37:F3
Authority key identifier: 74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
Certificate issuer: /CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Certificate serial: 0194BBCEEB5011B8A884A9884FCB8FE8C883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
Manifest number: 0B62
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: dGMPFkhbT5M4X5So7HEArUjF_FA.crl (hash: moZnMSGkhhgCdZ6bS9MTmJWcMubnQ52N1A1BiMdEtJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:50:11:b8:a8:84:a9:88:4f:cb:8f:e8:c8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=819726c422c6b7831a8abf2a1975bbef498337f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:a3:96:a5:14:3e:ae:fe:42:c6:cd:53:84:
fe:4e:4c:30:04:97:ab:a0:7e:60:e0:f2:57:a2:ab:
38:d4:af:8b:2c:17:83:97:98:06:25:ce:ab:81:ea:
da:d1:c5:1b:93:93:91:25:0c:cb:4d:5c:33:bb:14:
e4:01:e5:61:cc:da:cd:90:25:11:35:73:48:3f:e4:
a7:58:fa:e1:e6:a1:17:51:4f:c5:b1:95:f2:32:da:
42:af:08:b5:4f:d9:fc:2a:4f:41:19:97:ea:b4:ed:
79:03:37:67:fa:9b:c3:0d:58:72:a0:4f:7d:66:2f:
94:99:aa:0d:b5:2e:64:4b:20:40:bd:5f:59:d6:3b:
93:33:ec:53:44:8a:a9:e0:bf:1b:5e:1a:d6:f2:58:
02:30:f7:0e:ca:76:d8:d2:b5:b8:1c:1e:36:f2:1f:
31:61:af:b5:fd:3f:be:55:67:45:b7:41:45:e3:17:
d6:c1:67:77:e7:c7:56:d6:a1:b7:29:0f:8e:71:cd:
1a:f1:fd:5c:68:cd:ed:5b:ae:27:6c:54:49:01:62:
d6:22:79:05:b7:fa:42:27:5c:9a:fc:f8:d5:3e:27:
6f:7e:52:fb:12:be:17:4b:61:eb:a0:64:32:1d:9e:
7f:89:ea:33:e5:db:bc:b3:bf:2a:7b:25:46:6d:0e:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:97:26:C4:22:C6:B7:83:1A:8A:BF:2A:19:75:BB:EF:49:83:37:F3
X509v3 Authority Key Identifier:
keyid:74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:a8:a4:24:ec:e1:08:b9:16:ff:a0:1b:97:23:49:cf:71:
4d:45:5a:7a:7a:c8:8d:94:4c:a5:69:68:de:5f:5a:52:3b:27:
6e:24:68:c0:30:8f:db:27:02:b3:c7:39:e3:04:06:7b:3f:b3:
ec:77:4a:e4:ec:7c:1f:47:0e:f4:a2:bf:97:d8:31:44:1c:4f:
00:ca:ab:4c:15:8e:e3:da:51:25:fa:12:66:73:11:fb:12:52:
42:d9:3d:a9:97:02:51:bc:69:5e:88:32:56:24:6c:df:cd:9d:
11:e3:61:73:56:b6:88:55:2c:bd:03:b1:14:f6:0e:c5:dd:b1:
60:3b:06:9d:d9:89:2c:bf:91:d0:f7:2c:47:eb:72:74:a9:45:
fb:dc:d2:34:e8:10:c9:1c:c2:86:04:0b:46:ea:c7:e3:6a:3b:
af:a2:9a:be:e2:ac:dd:65:b0:76:01:fe:82:6f:e1:8c:75:4b:
0e:c8:4d:c5:c0:2b:a4:db:33:2e:a4:5e:50:61:04:3b:2c:24:
01:56:d2:68:7e:51:7e:21:e2:e0:68:5a:14:c3:51:6f:da:03:
41:a6:3e:46:93:a7:f3:95:06:7f:d5:57:3d:09:2a:9a:49:1c:
8d:88:68:32:66:e8:e5:6e:ce:cc:18:48:48:88:07:8f:8f:3f:
c8:3d:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:11:57 2025 by rpki-client