Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File: dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier: 8YqHsEpwqBAIaCe2Z//kk9ACIFaMFEGvNuIexnZ2QNY=
Subject key identifier: 39:F6:4C:BE:0A:EC:70:76:5D:3D:1F:F4:2C:D5:EF:89:12:5E:C2:2F
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial: 0194BC3C7BF2321FE7105200A989E62B425E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number: 0C01
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: OObybOaszKH9LuDbds+4xdPqu6wishOgBJGIYlu2u68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7b:f2:32:1f:e7:10:52:00:a9:89:e6:2b:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=39f64cbe0aec70765d3d1ff42cd5ef89125ec22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:86:32:21:2e:ff:93:3d:14:b4:49:08:e0:
a2:e8:d2:f8:dc:7c:6a:a4:0f:a3:71:44:35:6a:b7:
1a:17:a9:1e:18:2a:62:0f:0d:ee:80:36:f4:d0:cd:
9e:15:df:e8:38:4f:25:62:6d:c2:3b:58:50:9f:d1:
ca:c4:80:7f:37:ab:d0:89:37:b3:a4:59:ab:c5:51:
48:06:2f:b9:ce:f2:d4:3b:54:6b:cc:ac:f2:e4:0a:
6f:18:61:e0:ad:30:e5:11:57:96:3f:95:c1:1f:01:
09:79:a2:41:33:29:1e:09:38:7e:50:f7:0d:00:db:
cb:f8:b4:03:8f:e5:c6:81:20:d6:e7:d0:40:1e:4d:
a0:3b:16:01:65:cd:61:bc:66:ba:87:f2:be:c7:a9:
7f:f3:58:89:a1:ba:bb:2e:d0:6b:09:22:c2:c9:a3:
22:c6:b1:a9:21:86:ac:96:e0:9f:b0:bb:8b:d5:da:
fc:d3:7a:e0:c3:29:92:16:04:42:e9:18:90:64:4a:
81:7b:d7:a8:68:03:d8:2e:2f:68:e1:9f:4a:7d:b5:
9b:2a:ef:0f:1e:40:73:4b:94:b2:03:00:3e:38:78:
c4:f5:d8:13:20:65:04:65:59:fd:79:1e:9d:46:65:
f8:15:e9:ef:8b:88:4f:2d:9b:bf:c9:27:e3:a0:fc:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:4C:BE:0A:EC:70:76:5D:3D:1F:F4:2C:D5:EF:89:12:5E:C2:2F
X509v3 Authority Key Identifier:
keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bf:2c:74:bd:6e:4a:b4:23:65:a5:55:f3:b1:62:26:e0:63:
59:56:03:db:2e:15:f2:e2:11:a9:f4:53:d6:92:1e:23:20:8b:
42:b7:0e:b4:d1:87:8f:7e:da:df:f2:08:d2:be:5b:b7:b8:ea:
cc:9d:08:7e:53:5b:5f:0c:03:00:f6:60:8f:61:05:90:1c:f7:
49:06:7e:c9:55:76:c5:4e:9c:7b:54:a0:27:8d:ab:40:2a:31:
1f:7a:3d:71:00:46:50:c6:42:e8:2e:b3:81:8d:ba:7b:b0:b0:
d4:c1:f8:d7:73:47:f9:dd:13:7c:1f:c4:3d:f8:5e:2f:7c:3e:
bb:f8:55:a8:2c:ea:28:7a:6f:70:f2:26:45:bd:a0:5e:62:74:
de:4e:a0:49:00:c4:3a:f2:80:c7:ce:ee:4b:d2:fc:a5:84:9f:
2c:b5:ad:37:d2:b1:4f:5b:1a:c2:46:1c:85:93:e1:a3:4d:ba:
dc:f1:ad:22:fe:c8:69:92:25:88:0a:71:55:d5:35:b0:4a:3a:
24:10:b5:95:ea:38:a1:1c:36:fa:f8:93:6e:8d:a2:37:da:f9:
79:0c:bc:fd:a7:da:e3:8e:00:fb:07:5f:55:aa:ce:31:ed:78:
6d:09:3e:fa:70:6e:65:fc:51:20:bb:7b:95:f5:d9:9f:50:9f:
a0:0b:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:01 2025 by rpki-client