Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File: DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier: Slv7QAtuylZfYsI3Cl2jup+wh/WEbWcgGU20RLxePFo=
Subject key identifier: 0F:19:79:AC:1D:20:C3:17:DB:C3:55:9D:93:7D:44:AF:B0:82:4D:66
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer: /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial: 0194BC3C1A2DFF895368C133CFC70CDDA46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number: 071B
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: GnPNpLkd/VhOVZqi4WLjsBWJK46SPtLus+4F8AlKlXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:2d:ff:89:53:68:c1:33:cf:c7:0c:dd:a4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=0f1979ac1d20c317dbc3559d937d44afb0824d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:49:bb:11:07:77:c3:4b:75:9d:b8:f8:91:
e1:bd:b8:91:1a:8e:06:a8:79:db:0e:f1:83:8b:82:
12:3a:fa:b9:39:22:83:43:cf:fc:49:9f:32:3d:41:
7c:8a:a1:71:28:a0:77:31:71:f4:7f:1d:93:46:eb:
10:5b:28:e9:cf:85:92:60:56:9c:d1:5f:d3:4a:2c:
1e:76:04:0b:f9:b6:ee:2a:4e:59:31:9f:de:5d:07:
02:10:c4:96:e4:d4:62:53:48:7c:e5:6e:34:ca:13:
2b:c5:ba:c8:f4:bd:c9:e7:3c:19:52:a4:17:a2:9c:
31:6d:8c:4c:c5:5d:fc:b1:ae:11:00:2a:25:de:61:
a0:fe:7a:e0:1a:b2:11:c2:d0:86:4c:fc:19:0d:98:
b1:07:4f:e6:86:84:27:ce:7c:4d:e7:4c:71:40:84:
85:d3:5d:65:10:27:b6:c8:60:59:87:39:cc:1e:08:
90:83:8f:54:c2:ee:8f:ac:b8:7b:19:63:4b:2f:05:
b4:01:cb:7f:ba:e7:90:36:ae:bd:c5:ff:dd:8e:38:
b9:4e:44:f2:1e:10:61:97:9b:4c:0b:be:c6:2f:fe:
83:a8:9f:73:96:f5:8d:67:d9:5c:d4:ea:de:df:21:
34:25:97:01:e6:2d:20:4c:5f:62:ec:2d:68:48:8c:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:79:AC:1D:20:C3:17:DB:C3:55:9D:93:7D:44:AF:B0:82:4D:66
X509v3 Authority Key Identifier:
keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e0:a3:1f:a7:2a:b8:43:7f:33:e5:7e:ec:5a:d1:8f:95:a1:
be:b8:45:fb:de:56:c0:09:c4:0b:81:d4:1e:40:b4:71:95:9c:
c0:fa:eb:f2:1f:ed:5e:28:75:4e:9a:43:d8:b1:df:4d:58:8d:
71:20:fb:9b:09:2e:db:03:4e:49:59:c6:1a:75:8b:17:ef:73:
8d:c0:a7:37:14:dd:ba:c6:ba:83:89:fe:97:49:be:72:ab:13:
84:67:07:27:7d:11:a6:56:a7:4b:76:02:70:60:f3:a6:19:7a:
5c:9e:71:bd:6b:f5:a2:35:7d:94:84:7e:d2:2a:26:3e:c4:bc:
56:63:dd:fc:15:5c:59:5f:99:dd:be:50:6d:ca:79:ed:cc:2b:
96:f5:d9:cd:76:75:ec:cb:71:fa:b8:da:d8:90:cb:18:81:16:
12:2b:78:6c:f9:90:6c:65:19:b0:d9:73:64:a4:ab:62:f0:4c:
d7:43:de:34:57:6f:86:39:98:db:09:a5:f9:74:8a:50:2d:c1:
64:7b:6a:d7:cd:ee:17:b0:6a:8c:1d:13:66:4d:e6:07:d3:ae:
1c:27:86:c5:1e:4c:29:28:13:f2:50:43:97:61:d8:86:af:3a:
46:43:5b:40:ed:03:c3:a5:e8:57:d0:ca:25:29:85:aa:1e:fb:
d9:1b:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:18 2025 by rpki-client