Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: 7OWqCaJ2OGpMib4yGAgc+/1ObpPtosymI8r2XGsXsxI=
Subject key identifier: A7:2D:08:F7:9D:AD:8A:FC:57:C1:E6:F8:6F:88:00:5D:85:D8:2D:84
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 0194BD17A859CAAC0A5E70DF0A42C7E75A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: Kh0eIAaaJX0H7Y6RYrdrzarvnIT8iMdNdLzqTpJ1RhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a8:59:ca:ac:0a:5e:70:df:0a:42:c7:e7:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=a72d08f79dad8afc57c1e6f86f88005d85d82d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:2a:08:6e:ed:f5:2e:2d:09:2f:41:4c:fe:
3e:b5:d9:bb:37:6d:07:7f:73:42:b1:4e:87:00:47:
6c:40:d1:a9:aa:ff:fd:75:ba:6d:6d:75:93:92:e3:
3f:db:2a:5f:ab:bf:a8:f1:83:b1:f5:fd:a9:f8:d9:
88:ec:1e:85:fd:a8:f0:3b:a9:91:67:a7:fb:84:6d:
4c:bf:ab:75:c2:5b:9e:d6:4c:34:f4:3e:80:de:59:
cc:7c:58:94:29:76:2c:9e:98:e1:6e:ad:bc:6e:2f:
fb:1f:36:7e:4e:e6:33:34:eb:7a:7b:f7:07:c5:fc:
b9:ca:67:ff:ea:48:b1:03:89:06:e0:1e:46:ae:ea:
7f:57:91:34:dc:81:6c:57:e1:0f:b5:94:16:0d:87:
8a:40:3f:3b:8a:b6:29:a9:d3:16:15:f7:4f:fd:58:
df:70:8c:f4:4a:b6:74:8e:e8:0e:a2:23:1a:d6:05:
f7:d8:a3:2c:36:70:8f:93:1b:df:c0:33:28:18:85:
72:ee:86:8d:db:98:e1:22:c5:5a:f0:31:ed:9d:c1:
69:1b:00:4c:f1:d2:59:ec:a1:e6:9b:c6:36:6e:03:
2a:fd:e2:22:21:0d:ee:7a:71:50:f2:7f:fa:33:af:
2e:6e:60:c8:6b:44:ef:d9:56:a0:40:e9:e5:87:a5:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2D:08:F7:9D:AD:8A:FC:57:C1:E6:F8:6F:88:00:5D:85:D8:2D:84
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:13:b4:f5:73:47:eb:34:b9:63:d0:b7:ac:42:19:0e:68:ba:
bb:fe:48:57:38:74:df:61:84:7a:d9:7d:8b:2a:b9:05:7a:2d:
76:8d:7e:e1:6c:34:c1:37:2f:7e:6d:71:01:7d:69:88:00:cb:
f9:f5:6c:ad:83:b7:f3:35:b5:18:cd:39:95:a9:09:f6:f4:87:
66:67:e0:8d:c0:90:83:60:a9:49:cc:6f:94:a1:27:3c:f7:7c:
be:d0:c5:b6:90:23:11:c1:99:8e:49:65:bf:14:5f:e0:41:4c:
29:dc:d4:1b:60:bf:41:ad:de:c3:bf:8a:20:29:83:88:48:f4:
12:81:ab:99:57:7c:8f:7e:43:d1:12:0e:34:97:94:e1:40:54:
41:b7:da:ba:d3:f0:eb:0e:2a:95:75:08:65:d0:9c:ce:d9:ed:
9f:12:ef:bc:84:f7:19:da:b1:48:46:77:d8:dc:c7:b7:89:08:
3d:20:fd:3b:a8:67:c4:b1:91:41:5f:3b:c4:fd:b6:d7:d4:c5:
d0:e5:7c:a6:2c:53:70:85:2e:3c:8d:f7:e3:67:a2:7f:ad:35:
f7:54:33:c1:36:95:33:c9:04:85:1b:7a:0e:3a:b8:4d:4d:83:
ce:6e:7d:b8:38:ea:22:74:87:10:3e:90:b8:bc:07:74:05:b8:
67:4e:c5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:16 2025 by rpki-client