Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: Dc8geCREs7AIyd9DGdg19zIcfi5Vl4/NSyKcuZmQzR0=
Subject key identifier: 38:C5:90:7B:81:6C:EA:0B:8C:E7:A8:86:B8:C7:A0:57:7F:48:B3:0F
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 0194BBCE0F3B942AC091F1146F3D1003FC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: Ta+dSBDqvvw35zCMc9pwhwpJWrws8OXXMniy+SeVwX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0f:3b:94:2a:c0:91:f1:14:6f:3d:10:03:fc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=38c5907b816cea0b8ce7a886b8c7a0577f48b30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:e6:15:40:b1:87:cd:45:1b:f2:d5:80:3f:
e3:ae:ea:34:70:cc:af:c0:33:1c:bc:48:44:30:e9:
96:71:9c:e5:e2:9d:f6:09:14:70:48:4a:45:53:2d:
6c:20:df:76:a6:7b:4a:8b:44:57:31:01:57:1d:d8:
02:a5:16:f5:17:be:2f:b4:c3:24:3e:ff:6c:60:a7:
e5:0c:85:e1:99:ca:ae:9e:cb:be:f6:a4:f0:ed:f9:
9a:b5:d3:56:07:58:96:58:5c:01:3b:05:22:d4:5d:
7f:e8:8d:15:a2:48:da:36:4c:e0:f9:2d:a7:1a:37:
c7:a7:2e:ca:b5:92:d3:87:8e:cc:aa:00:69:05:ec:
6a:83:c1:3e:a2:f1:21:3e:13:db:1a:f1:2f:92:9e:
34:19:ff:58:41:0d:bc:1b:d0:5d:fe:24:f4:72:e3:
fd:39:66:f7:c1:86:ec:f2:30:a7:56:e4:c4:23:e5:
f2:95:7b:c9:ce:64:84:3e:a1:ba:19:c4:f6:0a:b4:
a5:bf:34:10:55:b1:5a:c7:16:86:9a:d0:7a:7d:e6:
01:d3:b4:65:39:7b:f1:ff:60:5e:59:cd:ae:b4:0b:
ac:a7:cf:a1:e2:c6:82:ab:2f:57:d5:ab:9a:b9:7e:
ce:61:ab:b7:20:3c:49:9f:38:f9:ac:e6:4c:43:6c:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C5:90:7B:81:6C:EA:0B:8C:E7:A8:86:B8:C7:A0:57:7F:48:B3:0F
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:8e:e5:b8:07:31:95:3c:fb:4d:06:8a:87:75:e7:d0:93:
9c:b0:dc:f5:ff:b7:c8:c3:b1:79:f3:58:a1:03:ca:67:3d:2c:
0a:0b:59:b5:8a:9c:0d:2f:91:fb:62:1d:21:6d:04:2c:e9:41:
0c:5f:7c:fd:85:8c:ab:02:bc:e5:e0:40:66:29:43:db:26:e6:
1e:d8:40:ae:74:ea:81:c6:c3:b7:74:c5:38:5c:de:57:ab:5a:
4e:c1:22:82:c8:3a:11:29:72:89:b6:cb:14:1b:bc:63:a0:1d:
11:dd:c9:ab:18:21:93:29:12:5c:4d:ce:c6:2a:f0:8d:eb:31:
b5:4b:fc:83:59:92:e7:0a:86:c8:65:30:4f:a1:7e:eb:28:ad:
88:3d:16:5e:88:cf:98:35:3f:14:f4:e5:21:7e:fb:4b:d7:5e:
a1:87:46:ad:26:ff:49:99:87:c2:f5:99:04:0f:73:28:8c:ea:
c4:ab:4c:1d:e3:b9:80:62:e3:ab:cf:5a:bf:9e:11:88:c8:51:
04:8f:23:19:9f:03:a8:ca:2d:9a:9a:50:fe:55:06:04:9c:df:
8f:55:7c:05:21:19:4c:ea:69:a7:b4:e6:6d:7e:b6:79:1a:35:
81:b9:94:01:c6:74:da:78:05:b1:a9:e8:6a:df:8c:bd:39:2e:
dd:6b:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:53 2025 by rpki-client