Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
File: dXFLWBraGW41UcCM52JDvgWLROs.mft (raw, json)
Hash identifier: BeyBQWW2jIUIaMk4J08m8U1SEWy8DAGf0eXMh7/oVmI=
Subject key identifier: 88:98:45:E1:20:9B:E2:39:92:EC:28:06:17:16:C5:F4:E3:56:26:72
Authority key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
Certificate issuer: /CN=75714b581ada196e3551c08ce76243be058b44eb
Certificate serial: 0194BC72F6E95DD3D9FDAE38983F9343A658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: dXFLWBraGW41UcCM52JDvgWLROs.crl (hash: lEZ65yH0grHkQZQPkL4hIU/9xGW0eUjKf/Ds2Rar7/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f6:e9:5d:d3:d9:fd:ae:38:98:3f:93:43:a6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75714b581ada196e3551c08ce76243be058b44eb
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=889845e1209be23992ec28061716c5f4e3562672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:c3:3b:16:4c:c9:eb:61:5b:94:53:29:56:
b9:99:c7:43:92:30:f0:d2:9b:50:00:70:91:53:2a:
0b:e4:7a:c2:0a:ce:70:ee:1e:c2:47:0b:e1:65:86:
50:76:85:a4:78:13:5e:49:a8:a1:62:6e:3d:e6:cb:
c9:47:34:78:76:36:e5:cd:75:e5:2a:e2:98:8f:d3:
42:49:9c:95:a6:1e:9c:95:76:05:8b:ba:57:a7:39:
5e:15:02:13:14:86:e4:82:1c:e2:df:0c:4d:36:72:
14:aa:6a:4c:72:22:08:29:02:cf:97:cf:86:f8:30:
d7:2d:df:99:02:7a:79:9e:0f:60:d3:87:66:16:e2:
e1:05:9f:d1:b5:82:31:62:5a:e9:a0:cc:73:26:a4:
30:a5:18:c8:1d:66:07:3f:05:f9:ac:23:ae:df:2c:
7d:e1:9f:51:b4:a1:f1:5f:2b:d0:2c:c7:a4:ad:6a:
1f:8d:00:95:83:ad:b1:9b:1a:6b:19:36:00:d9:c6:
1c:75:12:d9:b7:0a:29:88:a5:23:5e:04:f0:26:c0:
62:9f:85:84:86:cb:5a:ed:4b:98:33:45:c7:24:ed:
b8:7c:47:32:0b:6d:fa:3f:ff:37:d1:d2:da:d2:0d:
c0:7d:7e:c4:29:77:12:fc:f6:5f:cf:e5:70:df:c6:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:45:E1:20:9B:E2:39:92:EC:28:06:17:16:C5:F4:E3:56:26:72
X509v3 Authority Key Identifier:
keyid:75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:51:5c:92:06:8d:db:49:06:ed:f3:0d:cc:ba:cb:74:49:
f7:e5:33:6d:5c:34:84:5b:ff:db:50:e8:50:d9:58:c3:e2:23:
9e:9f:d8:ad:7d:32:61:8b:05:51:e2:95:c1:1a:11:0e:f4:49:
56:cd:7f:3b:57:e2:aa:6d:b4:03:ee:e2:13:8b:94:17:f4:72:
60:2d:59:56:89:28:83:81:c6:97:91:84:a3:e6:d4:66:5b:07:
47:79:f1:47:83:44:01:9c:f4:48:fb:8b:4c:a6:e7:ce:1c:7b:
35:2a:28:cb:7d:48:a2:1f:c2:60:29:bb:86:41:d2:9b:7b:99:
a6:56:2a:95:a3:f1:4a:25:6e:67:00:20:e9:5f:15:d2:3d:66:
da:4c:8e:22:69:ea:76:e3:ef:f6:61:42:df:ca:bf:34:47:ba:
89:82:cc:98:57:1f:70:6d:f8:80:7e:3e:f1:7b:2f:19:3e:49:
70:bb:ff:00:89:49:f1:77:82:9c:64:ea:12:b3:37:29:47:43:
ab:fe:24:f5:4c:b7:5a:9c:85:e8:6b:ed:23:51:d3:af:b0:f2:
ed:a3:fa:c3:52:dd:f3:cd:a8:5e:8a:e1:56:76:1c:da:a7:e0:
56:91:e1:03:77:ef:c6:b3:3e:52:f8:e4:35:eb:fb:39:ec:7e:
80:47:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:29 2025 by rpki-client