Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
File: dnECLoKiznV3Drwajw1F9E8scxY.mft (raw, json)
Hash identifier: wPZIwZPV9xsavFN9YybM1p74Gthfm9H09RU+RFucdrY=
Subject key identifier: 75:3C:1B:29:BB:E1:CC:4C:A2:7C:E8:D3:03:C2:64:AA:F5:37:31:14
Authority key identifier: 76:71:02:2E:82:A2:CE:75:77:0E:BC:1A:8F:0D:45:F4:4F:2C:73:16
Certificate issuer: /CN=7671022e82a2ce75770ebc1a8f0d45f44f2c7316
Certificate serial: 0194BBCE13BE67AD22F8E3DAEBCACEB494AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnECLoKiznV3Drwajw1F9E8scxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: dnECLoKiznV3Drwajw1F9E8scxY.crl (hash: gIclqfvWtd293PEsL3n1JYFuyl/P8JmaZkVhmnldOM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:13:be:67:ad:22:f8:e3:da:eb:ca:ce:b4:94:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7671022e82a2ce75770ebc1a8f0d45f44f2c7316
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=753c1b29bbe1cc4ca27ce8d303c264aaf5373114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:4f:ec:db:75:e8:01:bb:e3:a9:b7:98:94:
cc:d0:af:15:bb:b8:2e:8b:b5:23:4a:15:32:44:2b:
4c:79:a2:38:ae:a4:9e:b1:43:6b:c2:b3:92:72:2b:
15:2f:47:cf:ff:33:0f:5e:9b:b8:9b:8f:71:75:87:
5d:8a:f4:68:d0:43:8b:a0:0c:f1:07:d6:e1:67:19:
fe:c2:b3:a0:82:f2:4a:39:f2:4f:57:c7:e2:ac:4b:
82:91:8f:ae:ff:7a:28:5c:a1:e4:89:20:3d:43:b3:
c9:3c:7a:2e:bb:a5:b2:a7:96:a7:b8:94:db:c6:b3:
eb:1b:60:e4:22:44:7d:ba:72:33:4d:df:1b:18:59:
3a:aa:16:ad:6d:80:b9:d0:4b:d6:12:34:59:23:96:
6f:7d:47:d4:83:7c:31:be:01:c3:17:31:08:60:63:
6d:ed:5f:81:4e:30:73:df:4d:a8:da:a1:45:fd:3e:
ed:80:26:97:12:89:d7:b4:a7:e7:88:e2:b0:7b:cb:
61:ed:e6:97:28:e3:29:6c:be:30:81:a3:7e:01:e5:
cc:ba:0e:50:7c:7a:55:87:71:73:91:a0:76:80:66:
09:5b:42:7a:ff:e4:62:26:7c:58:5c:8f:3a:89:39:
23:30:60:8b:ee:b6:36:0e:e9:98:9b:d9:73:32:5e:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:1B:29:BB:E1:CC:4C:A2:7C:E8:D3:03:C2:64:AA:F5:37:31:14
X509v3 Authority Key Identifier:
keyid:76:71:02:2E:82:A2:CE:75:77:0E:BC:1A:8F:0D:45:F4:4F:2C:73:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnECLoKiznV3Drwajw1F9E8scxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6e:64:bc:6a:2b:5f:04:6b:65:4e:16:7f:6c:99:67:ac:5f:
2f:7a:a7:55:11:ed:b0:54:44:ef:5b:0d:85:30:94:56:53:e9:
21:da:50:41:79:db:ad:c9:4c:5f:9e:e4:0c:eb:fb:52:8f:1f:
b6:6f:22:5b:ff:84:72:b1:d7:89:df:cd:61:c3:ab:30:77:37:
4f:66:be:56:af:79:d3:9f:a7:a9:c3:7f:04:f1:66:a9:03:c3:
0e:fb:c6:45:44:e4:67:f8:45:62:74:3e:2e:3a:54:b8:3a:8e:
32:45:81:3c:09:c4:59:44:57:2e:74:15:6f:fb:47:61:7a:67:
51:52:66:e2:0c:7f:eb:fd:4b:9b:33:df:c9:7c:29:ee:e9:3d:
16:ee:a8:8d:f0:29:07:af:9c:fd:18:31:96:c2:b5:36:cc:b9:
26:f5:3b:5e:52:19:f4:c1:04:6c:63:d8:41:a1:28:b7:e7:9f:
fe:01:c4:8a:32:6e:d8:a3:e8:3e:92:cf:ea:8f:6f:38:2f:5a:
1e:06:20:f8:bb:39:50:9e:48:93:3f:bd:02:31:11:d1:6f:7d:
4e:9b:7e:f3:46:1a:ce:d8:77:39:06:e7:19:70:3e:2c:94:e7:
55:a5:d3:66:6f:20:31:2b:1c:21:a0:4c:92:66:8e:b3:38:8f:
d1:7a:e9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:42 2025 by rpki-client