Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier: T3Fi2Ph3pcGmQLPMO1yO7K5mFwl9IyK68poU8YB26J8=
Subject key identifier: A5:0D:8E:39:7D:8A:B8:C2:BA:F7:DC:16:7B:61:1F:96:EA:C2:E6:58
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial: 0194BBCDCF47D27D49FE1233A03505AEA88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: J9q60q2BliAjez2gCtOHZNCcOYeum6RzGRus6qeFcOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cf:47:d2:7d:49:fe:12:33:a0:35:05:ae:a8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=a50d8e397d8ab8c2baf7dc167b611f96eac2e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:79:75:20:cd:48:b1:de:30:73:a1:d7:98:
9f:9f:83:41:58:33:98:da:b0:85:27:3e:23:6b:3f:
47:59:b6:ba:a0:1b:2c:81:d7:a2:08:3f:dd:3d:96:
68:59:ee:26:49:11:df:32:18:81:0a:2a:0e:ed:f3:
0d:6e:13:6b:cc:b4:74:99:4f:bf:ea:fe:f2:f2:7d:
24:0c:e9:ab:35:4a:df:3e:77:a1:01:92:69:c3:d2:
92:78:b7:94:b4:3a:c4:a8:b6:85:05:78:29:d9:20:
4c:5f:14:6b:e0:62:2b:0b:0d:3d:02:33:eb:f9:6d:
18:86:af:11:63:dd:f8:c7:11:c1:c2:77:08:14:64:
bb:46:4d:ca:02:05:f9:53:00:04:5f:ea:e2:9d:8a:
7f:ff:85:be:1b:ac:79:28:53:0e:13:be:03:21:58:
79:19:4c:4e:32:cf:4c:80:a2:ff:1d:b1:5f:87:75:
2d:ee:33:c7:68:d4:ec:2a:41:ef:ac:06:38:4e:92:
06:2e:78:50:8e:09:c2:60:9a:02:0e:7f:8a:8b:fc:
fd:38:d4:55:79:d2:c0:41:d0:2a:34:4d:f0:1f:0a:
5b:79:31:36:f8:2a:37:39:99:cd:7b:16:0f:77:07:
e8:f1:b3:d1:2b:a0:f3:42:06:d3:cd:04:7c:e2:7c:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0D:8E:39:7D:8A:B8:C2:BA:F7:DC:16:7B:61:1F:96:EA:C2:E6:58
X509v3 Authority Key Identifier:
keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7f:17:ae:3b:83:4d:67:ab:b9:8d:da:d2:7f:ed:45:00:d5:
39:1d:a3:ef:e2:e4:cf:da:04:ff:61:7d:eb:67:3b:f9:e1:72:
a4:98:72:b1:0a:bf:48:39:50:ff:52:5d:b3:3e:80:9f:01:d2:
ad:dc:6a:db:ad:1b:47:8f:cc:b2:b3:d7:48:d1:9b:8b:08:e1:
79:71:11:4e:e2:f2:ef:4c:a3:90:28:57:3f:63:26:32:ef:cf:
e2:a0:b4:18:e5:38:ec:f2:b2:34:31:20:c4:49:bb:c5:21:d7:
57:68:8a:ac:a3:bb:ed:3b:4c:7a:c8:66:a9:41:74:63:69:66:
5f:c2:5c:b0:69:be:df:44:d8:0f:c5:ab:3a:14:f9:00:aa:b4:
35:0d:05:3e:de:2c:1b:1e:a5:ae:80:13:3e:f0:47:e3:cf:b3:
46:9f:9f:14:b4:17:1a:42:c6:5f:e3:02:ad:a9:3e:42:14:e8:
1d:09:88:34:8c:96:1b:2a:56:9e:00:75:22:f7:ee:83:66:81:
94:44:ae:53:69:8a:dd:e9:75:c8:bb:4a:28:35:94:bd:a9:86:
47:dc:06:c1:b4:79:6e:f5:85:e8:8e:c5:9f:8a:91:21:d3:19:
f9:08:34:68:63:93:5a:73:92:74:a6:11:43:46:a9:1c:95:fc:
9e:76:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:43:48 2025 by rpki-client