Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier: Wtr22sT53sD20bciddu7a40DXoqZmIv/0+hpTWA4Jm8=
Subject key identifier: 05:CD:BF:25:FA:19:C0:E8:48:05:BA:51:B7:F9:F7:8E:B7:9C:66:88
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial: 0194BBCE2AF53A926C2550C46D6832BF4806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number: 0ACE
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: uuFjJWmbRTRERPvRpdG7qhKnxCr/vDzf6lvl/Nf9zWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:f5:3a:92:6c:25:50:c4:6d:68:32:bf:48:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=05cdbf25fa19c0e84805ba51b7f9f78eb79c6688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:b9:f4:d2:cf:7f:7c:37:89:7a:b5:a0:82:
cd:4a:dc:af:1c:40:25:3e:03:77:6f:18:7e:82:f6:
a7:2c:6c:2b:98:99:69:1e:15:de:46:52:b8:ef:59:
0f:09:91:fa:10:0e:f8:28:30:08:59:ea:2a:67:f0:
56:93:18:0f:4d:e1:86:a4:2e:1c:a6:63:a2:4a:c0:
07:ac:88:1b:eb:48:51:71:d2:7b:20:b3:21:83:02:
93:dc:be:29:e0:23:12:64:21:20:61:fe:f2:d1:b9:
36:7e:bf:3c:ae:88:20:12:b4:df:c1:0a:59:b8:f5:
72:46:d6:58:a6:81:f9:f3:9c:6d:6a:be:d8:61:87:
7f:d0:7d:6f:7c:cc:62:5c:32:53:4a:df:1f:da:03:
23:ea:fe:3a:2b:96:a4:c4:f9:16:d9:c4:81:bb:8d:
4f:c3:c4:a4:5a:54:86:7f:e0:bb:c5:e7:b0:ee:8e:
e3:48:f5:26:a1:02:4a:80:05:23:8a:cd:75:f3:ae:
c7:43:ad:dc:2d:50:fc:ed:23:de:84:ee:b6:f8:f9:
52:48:cf:2b:21:a6:0b:06:d2:cd:06:7d:54:36:62:
ca:f8:a3:81:cb:f7:8c:77:7b:35:f4:a0:55:a4:8e:
aa:1f:80:13:4c:00:44:20:3c:b9:ad:a1:3c:7b:fc:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CD:BF:25:FA:19:C0:E8:48:05:BA:51:B7:F9:F7:8E:B7:9C:66:88
X509v3 Authority Key Identifier:
keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:91:d0:99:21:48:f7:75:4c:5b:a7:c1:b6:d0:5d:6d:dc:bf:
fb:a3:ef:ba:d6:e2:b0:79:62:e2:f3:5f:11:1c:70:f2:dd:db:
4f:32:d7:3d:96:ae:cb:89:4b:24:88:3e:32:e0:ba:43:29:55:
51:a1:16:61:6b:7c:db:10:74:ec:8d:7b:f1:2d:a6:a2:5c:37:
68:cc:03:60:3e:ae:53:1d:b4:7b:59:74:f1:af:10:b5:2e:d5:
d3:35:e9:83:ef:4b:0e:d3:af:85:3f:f0:82:1f:8a:1e:11:7a:
76:a1:05:e7:8e:49:87:ba:38:59:c8:de:b3:16:d3:1b:17:73:
f9:00:d7:9a:72:6d:eb:f8:37:56:65:c2:35:00:73:8a:10:41:
18:8c:8a:8d:49:bb:9f:db:54:3b:60:b1:c8:24:6c:e5:e5:c0:
33:0e:b3:6b:c8:de:65:25:09:fa:b6:8a:b5:0a:b1:e9:76:5c:
a5:7e:03:c2:1e:08:af:a6:8b:50:43:e2:cc:d8:c8:3d:55:65:
c8:97:1f:55:ed:26:f2:91:8d:34:11:ac:5d:f4:ce:b9:94:8d:
f3:d0:00:e5:35:9f:1c:b9:9c:92:e8:56:3f:c9:2a:23:79:d0:
c6:db:bb:3a:93:a3:88:e8:63:17:5c:b6:54:74:fa:86:da:53:
b9:b8:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:49 2025 by rpki-client