Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: k7JNOQHwoaue4q8z/TCSXyKm9FgI33TGNJkIFRcPgvg=
Subject key identifier: D2:0F:43:83:35:D8:19:B9:F3:40:49:66:94:46:5D:19:D1:5A:51:70
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 0194BCA9DC15737063EF37C2C652C6DE6012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: 8ZGLlE4pfHRmEYvb7geNZAvh58SsqXr2FlRYNIdACro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:15:73:70:63:ef:37:c2:c6:52:c6:de:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=d20f438335d819b9f340496694465d19d15a5170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5e:f6:64:33:84:1c:be:68:48:3e:64:e7:10:
38:d9:fd:3d:c3:f9:ff:65:49:6a:6d:43:ef:c7:5f:
de:28:a5:7f:36:84:74:a4:92:79:e0:a6:81:14:66:
c0:fd:84:b1:a6:e2:e2:92:f0:9d:a2:8c:c0:61:a5:
1b:d7:82:05:ab:31:3f:39:b2:15:9c:f4:1c:4b:5c:
97:62:a8:35:e0:b2:8b:d3:0c:60:60:02:22:34:97:
d5:bf:ef:c9:41:e2:b0:3f:a9:30:ab:f7:ea:c9:74:
48:be:74:74:ab:41:e6:24:fb:9b:60:e2:3e:53:9e:
5c:d9:79:3b:89:37:bd:dc:4f:a6:65:98:7b:30:bb:
4b:90:c9:2e:ee:fa:67:a6:51:1c:53:41:15:1f:6a:
2b:c4:23:4c:d1:b1:66:3f:56:15:b8:db:20:1c:e6:
3a:04:80:3e:63:dd:c3:26:54:60:08:2d:08:ec:03:
26:d3:2d:5e:87:96:71:04:0a:33:4b:64:75:50:9f:
52:16:fe:75:5b:17:23:97:3b:94:4e:e7:4e:a1:04:
32:0f:bc:75:8c:5a:da:bc:34:ba:f5:e9:ef:5c:7f:
11:5c:6e:ea:47:7c:4f:4a:ad:b8:d5:34:da:c1:a4:
59:75:61:ed:32:32:df:c6:c0:fc:bd:0a:25:c5:62:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0F:43:83:35:D8:19:B9:F3:40:49:66:94:46:5D:19:D1:5A:51:70
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ad:35:7c:b5:53:3f:26:56:4d:c1:dc:1d:a0:57:a3:7d:ba:
22:2d:00:56:a7:42:7f:a5:0c:65:6b:6a:56:d7:34:e2:ee:4f:
1e:c7:b8:39:75:46:76:75:86:a6:4c:d7:58:d6:8a:37:2e:d7:
dc:a4:78:1d:26:76:b4:12:30:b9:f8:79:cd:a2:77:8d:eb:50:
ab:ec:2d:e8:15:0a:63:39:f7:4a:ad:6c:42:8b:9c:28:a1:5c:
95:37:6a:88:78:1c:20:d4:f8:78:5a:2d:88:3c:09:d2:58:39:
a6:42:95:ce:fd:9f:4a:9d:61:c7:f0:9c:60:96:67:25:eb:c4:
3f:ec:76:50:8e:37:d6:4b:57:b4:64:1e:44:12:47:5c:8b:e9:
0c:a6:bb:66:7d:c4:ee:34:0c:bf:d8:10:8e:5d:ff:16:00:e8:
c7:5e:c7:d0:3b:5c:9e:3b:af:ff:44:a1:fe:fb:cd:bd:07:51:
9b:a7:36:2f:74:d3:d0:b5:e1:42:ae:dd:75:a1:34:37:df:3e:
43:1f:14:e0:a8:0b:8a:dc:62:e3:13:51:32:21:6b:d7:aa:cd:
f1:c9:eb:9d:a0:89:a4:83:fc:18:a9:09:54:83:3b:12:8e:d7:
9d:83:ad:f0:17:f6:e2:03:11:97:21:2d:1a:d0:bb:2f:58:34:
81:77:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:10 2025 by rpki-client