Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File: dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier: q5tA5jror/6hmjOamSzvnmSXBc4DgynNwuq4Yq7Keyw=
Subject key identifier: 7E:9C:F1:89:B6:8E:5B:55:2F:15:45:B3:76:F4:1E:05:92:FF:20:F6
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer: /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial: 0194BBCE78A5F830C2D8566D899CD0066A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number: 0F7E
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: wLNmR/vN23g+RDa9aKYCCC9kVHNlkZLdkMTtfU3CAzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:78:a5:f8:30:c2:d8:56:6d:89:9c:d0:06:6a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=7e9cf189b68e5b552f1545b376f41e0592ff20f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:12:3a:d6:e9:7d:d8:49:29:2e:5e:67:e4:
79:30:f6:35:17:88:2a:28:04:e9:ce:98:1e:df:fa:
85:b1:b6:67:24:11:55:69:d1:c3:a6:c5:b0:a5:15:
ba:18:fa:d1:ba:27:33:7e:5b:a0:fc:db:58:9c:a2:
cb:22:24:56:1d:20:78:ea:f1:cb:f7:42:be:99:7a:
5b:b7:f8:8a:b6:ac:83:da:c9:de:9c:14:08:ff:a9:
22:cc:28:67:cb:1e:38:65:47:ac:99:c2:b2:a9:01:
45:cc:6e:ab:c1:c2:d0:2a:59:ed:5b:50:54:74:65:
a1:46:f6:a2:ec:5f:c8:69:a1:3f:1e:5f:6b:80:2e:
1a:c8:b2:40:34:82:b9:20:74:aa:e8:06:87:5f:0e:
82:b6:60:25:14:8e:2c:b1:d4:50:b1:40:03:92:5f:
71:78:6a:6f:12:56:27:2a:ce:b4:84:66:a7:1d:3f:
95:d0:14:03:b9:ca:7f:0f:13:c1:53:0f:37:e3:a1:
5e:5e:10:f8:dc:40:5a:b2:90:81:22:54:61:5a:36:
1c:6d:9b:86:1e:82:b0:d9:cc:22:ad:5a:7f:4e:98:
17:f8:60:6b:aa:c2:b3:d4:37:6d:24:22:43:58:18:
43:36:e0:08:13:51:ee:e6:d5:97:36:3b:ca:7b:4e:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:F1:89:B6:8E:5B:55:2F:15:45:B3:76:F4:1E:05:92:FF:20:F6
X509v3 Authority Key Identifier:
keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d2:c1:d0:dc:54:7e:bf:fa:c1:8d:79:99:78:b1:34:8e:19:
4c:08:f0:d8:64:5b:4b:82:92:a9:64:f4:9e:44:4a:ab:ca:06:
03:85:a5:f8:20:da:0c:1b:8d:ce:03:89:66:d1:e4:32:1b:d6:
39:b1:f5:ee:7b:a1:2d:4c:47:a4:c5:c1:53:32:85:88:ad:bb:
13:ed:46:ca:a0:1a:95:94:ec:ac:29:50:74:77:14:10:b0:96:
83:a0:00:fa:2c:84:bf:e1:09:21:a3:91:ff:2c:00:55:68:cc:
84:d4:9a:46:f9:1f:52:62:e9:5c:69:29:8f:c1:51:16:35:f7:
7d:05:c8:97:84:56:a5:07:41:26:c8:02:f0:1c:09:d6:01:c6:
8a:fa:5f:4a:4e:b0:a0:0a:bf:15:68:c4:0d:42:bc:de:5d:aa:
65:6b:54:3a:c8:a4:49:20:d4:bb:26:45:86:7c:a8:dd:0f:3b:
f9:93:39:2b:3e:88:2c:74:f3:72:9e:ee:f7:5c:8e:b5:51:8a:
d5:7d:90:b6:d7:15:36:2f:0a:82:07:a0:11:d0:62:a5:c8:8c:
6d:31:64:01:6a:10:07:11:3e:1e:e0:9c:5e:e6:c9:5c:a6:4f:
86:c4:bc:95:b1:e7:74:49:05:e7:60:32:e8:bf:36:15:0d:39:
47:05:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:18:39 2025 by rpki-client