Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: 85NskSOfOo1ScjZYpgMJReKvTA2stqW8nPGRzHJuwfo=
Subject key identifier: 59:FD:08:E7:44:66:43:1B:56:14:CD:F2:B8:3F:E6:52:41:23:24:32
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 0194BCA991C20965A860A0AA30C70800D70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: S4BGlbb7Y49nRnEf19yhMFArKUvUTTaeYozNPLuBcBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:c2:09:65:a8:60:a0:aa:30:c7:08:00:d7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=59fd08e74466431b5614cdf2b83fe65241232432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:91:ee:a0:6a:96:a5:64:24:b6:1d:46:5c:
7d:d3:02:52:46:b9:eb:ba:3e:1d:7a:27:75:27:93:
6e:b2:f3:45:35:a5:71:32:11:50:44:fe:a7:06:57:
cd:f4:e3:c1:1d:ff:f9:a9:16:90:0e:31:34:1f:91:
f3:9e:5c:01:19:80:11:f8:1c:9f:58:53:e3:8c:3e:
ab:4e:1d:00:41:b5:1d:07:60:b5:32:a5:d0:b1:90:
82:a2:57:fd:c3:09:50:70:7a:4e:53:ca:2e:8b:ba:
34:5b:9f:d9:fe:ed:09:b1:9d:a7:64:f6:02:fe:d6:
54:12:5a:b3:2b:f8:e4:7b:31:d9:eb:79:90:64:79:
75:a9:f5:a6:4c:fc:b0:79:19:b1:bf:aa:47:de:17:
7d:af:e4:96:38:d6:8c:eb:7a:82:b4:c6:25:eb:ec:
f4:db:1f:51:cb:a0:46:8e:2e:3b:39:01:7e:b5:2e:
5b:7a:b7:d3:58:24:5c:39:3f:80:09:f2:a0:7b:8b:
dd:44:4b:83:8f:16:81:d5:4c:1a:18:16:3a:6d:20:
b0:ed:b1:27:05:82:de:7f:b7:c3:89:6e:e3:c9:f6:
18:af:ef:1b:37:e2:0f:e4:6d:10:a8:66:72:ce:61:
92:b9:96:a6:4e:b8:21:2c:69:ab:c6:ff:e3:81:d5:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FD:08:E7:44:66:43:1B:56:14:CD:F2:B8:3F:E6:52:41:23:24:32
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:14:6f:f0:4c:a1:9c:be:5b:de:c9:4d:a1:d4:e2:45:b1:73:
59:89:35:34:07:7d:18:1d:9e:22:23:f7:30:83:63:fa:c4:5f:
b0:87:9a:1d:a5:be:7e:29:fb:d8:e9:58:7c:a3:1c:99:4d:f4:
e0:58:6e:fa:82:ca:c2:e9:26:19:13:8f:eb:1b:0d:c8:26:09:
e3:09:5a:81:da:8d:64:b2:03:8c:05:c7:f7:c0:e5:e5:79:30:
8b:3d:1b:9c:03:f1:2a:79:ea:53:22:eb:7a:5c:7d:6a:a4:60:
5c:de:03:f9:df:8a:f4:3d:87:b2:ee:f4:40:71:0c:51:d2:51:
60:51:fa:68:97:d7:8f:71:dd:4c:8c:0b:f3:c6:01:0e:74:1a:
4c:28:5e:3c:db:06:5b:cf:82:2b:7e:ac:83:41:82:81:27:e6:
fa:94:01:b4:c1:f6:b3:a2:39:6d:29:fc:a8:1a:cb:3a:41:49:
7c:d4:53:e7:69:b1:ed:46:35:87:a3:3c:3a:56:6a:be:58:0a:
70:86:ca:c3:97:c6:21:2a:f5:4c:30:36:00:72:32:47:07:1b:
32:22:16:35:37:3f:2a:ef:a8:ff:a7:21:52:4a:90:a3:1b:46:
a6:d3:86:c2:93:24:4e:9f:26:44:c8:7a:6f:04:4d:21:62:c9:
65:af:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:00 2025 by rpki-client