Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
File: doLdOwLxwpVedAMvV4kT9s6WMCM.mft (raw, json)
Hash identifier: Ep+NyHpvZoX9bDOUQ/zflt7J0PE61fWAQAuaeCXrbTI=
Subject key identifier: 2D:D5:30:2A:28:8B:35:3F:5F:8D:E2:31:90:FA:15:91:A1:9E:80:E9
Authority key identifier: 76:82:DD:3B:02:F1:C2:95:5E:74:03:2F:57:89:13:F6:CE:96:30:23
Certificate issuer: /CN=7682dd3b02f1c2955e74032f578913f6ce963023
Certificate serial: 0194BBCEAF4676E7C5DD347FD55CB251E70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doLdOwLxwpVedAMvV4kT9s6WMCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
Manifest number: 0B1E
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: doLdOwLxwpVedAMvV4kT9s6WMCM.crl (hash: b2Pt51RSiLkzaGVb2sTb04ahl4wvR0g9XNxOgqworGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:46:76:e7:c5:dd:34:7f:d5:5c:b2:51:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7682dd3b02f1c2955e74032f578913f6ce963023
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=2dd5302a288b353f5f8de23190fa1591a19e80e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:92:34:c7:6b:ac:9f:05:6b:d5:67:09:f6:
bf:81:63:f4:c9:63:01:5c:86:75:ec:01:68:df:d7:
b0:5c:83:77:6b:eb:60:b0:bc:73:bb:9c:64:5f:25:
cd:46:0a:16:21:79:3d:1f:82:ce:8a:a8:bb:3b:00:
2b:66:8c:d7:47:e7:53:60:c8:22:45:1a:dc:56:4d:
b0:b3:88:12:a8:1c:96:f8:bf:e6:60:02:56:99:86:
22:cc:17:a3:64:c1:f0:f1:5d:a8:d1:bf:f3:78:59:
d3:e1:32:4c:7a:b3:93:a3:c1:98:23:f8:f6:42:a2:
6c:7a:99:28:1d:b5:e8:ba:a9:96:33:29:66:64:8e:
63:96:b8:42:42:74:bc:a9:56:87:61:38:db:61:42:
e6:82:75:52:dd:67:e2:68:6e:f0:18:5b:b8:d5:d0:
be:83:7a:2f:91:5e:1d:f9:cb:c4:f3:63:9c:98:3d:
a1:8b:e2:85:31:8d:5c:e7:21:5b:55:90:eb:d7:83:
66:07:22:c4:c3:cd:7d:0e:a6:47:06:b0:4f:eb:7f:
8a:fb:e7:e3:0b:bd:66:9d:03:94:20:90:66:b1:22:
9e:f4:50:f1:b1:cd:97:bc:30:c6:75:37:e8:60:05:
17:93:52:8c:dd:66:97:b5:b7:59:fa:59:b1:0f:5a:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D5:30:2A:28:8B:35:3F:5F:8D:E2:31:90:FA:15:91:A1:9E:80:E9
X509v3 Authority Key Identifier:
keyid:76:82:DD:3B:02:F1:C2:95:5E:74:03:2F:57:89:13:F6:CE:96:30:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doLdOwLxwpVedAMvV4kT9s6WMCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:08:15:d5:19:05:82:57:a8:0a:ba:5d:34:0b:6e:54:14:e3:
1d:7e:b0:63:1f:99:47:62:65:00:f7:e1:07:a7:39:57:b7:a8:
ca:14:bd:89:b8:c5:f0:22:f8:6a:2c:27:60:bc:0a:49:a4:6b:
00:d4:b0:34:dd:15:a1:98:44:0b:f1:f3:b9:d1:2c:ac:38:bc:
f3:1d:8a:20:21:8b:35:21:01:6a:e8:84:9d:19:4c:ce:4e:cd:
a8:16:54:ec:99:bc:2a:7b:0a:af:b5:f4:36:e3:c3:d2:5c:fb:
2f:e5:e9:e7:a9:64:27:c8:76:a8:b3:fa:d4:7e:7c:ed:35:b4:
98:81:c1:df:51:0a:93:2c:fd:7f:a0:24:54:b5:13:22:56:ec:
90:ae:7f:3a:28:11:ee:7b:37:46:c1:00:f5:92:79:ec:31:5d:
c0:37:4a:34:d5:39:a6:b9:34:2a:4e:ab:32:85:f4:6a:36:49:
36:da:4e:fd:9d:ab:06:3d:6f:84:02:ba:ea:c3:b4:60:00:a9:
24:a5:98:36:ca:a7:e4:c1:f3:20:a0:1c:4a:80:e7:01:26:0b:
bb:3a:96:9e:b7:de:29:1e:88:b0:f9:f2:0f:1d:c6:3d:26:28:
d6:dc:b4:b5:37:55:96:27:4c:8c:82:93:0b:b7:a4:3b:54:2a:
c7:ae:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:36 2025 by rpki-client