Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json)
Hash identifier: c2aAtTCjzlYirL7bdgsPyrvcPTcEOb2n4+BWtfc4hwY=
Subject key identifier: C5:9B:D8:24:33:42:66:34:E6:2E:A6:68:2B:69:F1:61:43:1C:3D:C6
Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4
Certificate serial: 0194BD176CA7B6F5D3F7730E38AE5F4A5E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
Manifest number: 0DFC
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: omRnx8ISFusGrlOHp9J3lloCniGLCuqK0YAQmPuMuJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6c:a7:b6:f5:d3:f7:73:0e:38:ae:5f:4a:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744327750414d349dade02233497cf47655cd3e4
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=c59bd82433426634e62ea6682b69f161431c3dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:ea:9a:df:af:b3:59:32:d1:bf:0a:88:27:
55:e0:0e:ea:ee:d5:6f:7d:1b:d8:bd:99:66:ce:90:
bf:3a:d7:27:86:db:3a:b6:d9:14:f0:a3:5c:21:4a:
2d:4a:b3:a6:4d:91:d3:0a:ee:f8:b2:44:14:d0:5b:
a4:f7:20:70:e3:e0:fd:62:3f:81:6b:87:a4:20:6f:
b8:4b:16:c4:2f:1b:cf:81:bc:cf:c6:4d:ff:1d:c7:
ba:74:52:bc:ea:37:65:67:df:42:2d:9c:9b:24:b7:
78:af:d9:81:74:cf:99:56:97:61:54:7e:35:d1:95:
ae:c5:34:4e:19:2e:4d:4f:06:f1:80:35:22:8f:8a:
5d:f4:ce:af:d7:6f:f4:bd:4a:c4:cb:c1:05:17:de:
ac:66:47:84:46:92:b5:62:e7:79:bf:e2:5f:a1:f3:
9c:a8:5b:ff:d9:9c:50:c7:c7:ac:6b:f3:55:77:22:
39:ff:26:da:26:31:4c:61:ca:3d:96:cb:af:df:55:
22:34:46:bc:5c:ee:23:40:4d:36:59:97:bf:25:b5:
44:1f:56:76:0b:f2:ec:7c:73:f0:b2:4b:eb:d3:2a:
5b:d8:ca:b7:d0:ed:28:4b:c5:83:d2:03:04:af:05:
29:85:17:b6:9c:0c:10:aa:36:95:f4:64:56:25:bb:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9B:D8:24:33:42:66:34:E6:2E:A6:68:2B:69:F1:61:43:1C:3D:C6
X509v3 Authority Key Identifier:
keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:ad:4e:ce:75:1b:f5:81:c7:e8:d1:bb:31:58:0a:09:fc:
47:bb:d4:81:45:1b:64:11:c6:84:a0:c2:f6:ce:ff:35:69:d3:
46:37:48:37:62:82:d1:52:d4:d2:65:d0:8e:8d:5c:9c:8d:a0:
d8:b9:77:7b:be:ee:0f:83:be:f7:22:d5:9c:3f:a6:29:02:bc:
8a:bd:31:bf:c2:d6:95:55:e3:6c:3c:02:e8:54:7e:c4:26:43:
27:32:8f:ec:96:a4:f9:5f:b6:64:fd:f5:5c:5d:26:bb:3d:e3:
14:7f:a4:6d:4a:d9:43:ac:f2:a3:07:e8:2d:69:19:6f:4a:17:
39:49:a2:4a:79:00:af:9c:07:21:c1:f7:66:19:d7:5c:0e:94:
aa:12:2e:8d:91:50:fc:a4:44:e9:b3:80:f5:e1:31:0e:a0:e0:
5b:a8:75:3a:2c:4b:02:01:79:57:46:ab:7b:4c:1a:f6:ce:04:
6f:c7:08:88:92:b1:bf:61:d0:92:ca:a2:b4:ce:28:02:7c:25:
c9:a7:3e:29:e0:41:56:e3:aa:c1:9b:27:64:f7:6f:e1:21:02:
73:18:64:53:27:87:f8:43:51:52:61:c9:4f:cb:7d:f2:d2:db:
e8:cf:b4:b7:6d:13:06:67:b5:ef:c8:9c:a7:0c:6e:c7:18:7a:
1a:da:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:42 2025 by rpki-client