Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: lexnbUi9foaJ60X5VYsBvYydGKv0c/zH/9jnyagR4BM=
Subject key identifier: 9E:77:0A:B7:AE:DC:B7:19:EE:5B:58:64:5F:FD:32:80:96:02:7D:0F
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 0194BC3C4E4AA21673187DFB6C5D9F6E91DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: A+FT7y2103f4OZLdSGUgH3xj005tCNRDb5ddWX2RvDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:4a:a2:16:73:18:7d:fb:6c:5d:9f:6e:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=9e770ab7aedcb719ee5b58645ffd328096027d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:ad:30:74:7b:82:8b:35:24:a4:cf:71:eb:
37:5e:33:4f:be:d3:1c:d2:96:c4:6c:31:f9:df:95:
f8:2f:d7:e1:b2:1b:c2:af:54:ce:fd:85:1d:d4:68:
68:55:dd:f6:76:32:e7:14:4c:d5:5b:c9:a7:6b:0e:
18:2e:68:21:85:e7:30:25:71:7d:a8:8a:32:71:24:
b5:c5:87:8b:27:5c:54:64:54:1d:c2:9a:e3:f6:f0:
9a:a5:d7:50:77:1f:84:d3:fb:9e:df:d5:ec:ad:1b:
14:a6:30:7d:11:1e:cc:0d:5a:ed:eb:e0:e7:ea:88:
88:ff:9d:ed:6a:ba:ca:86:96:25:70:b2:b2:fb:3c:
69:93:78:25:b6:ce:eb:35:5c:56:ac:25:35:05:4b:
1e:4e:a3:b3:80:04:e9:6c:ca:bf:71:2f:3f:f1:27:
65:62:8c:a3:7e:60:45:fe:4c:40:4b:3f:39:de:5a:
37:70:e4:fe:79:31:c1:bd:48:9b:62:ed:bf:aa:fb:
a0:a9:c7:a9:23:4c:16:e8:6d:27:c1:52:39:d1:13:
9d:29:fe:65:29:c9:00:80:7f:a0:1c:9f:a2:9b:44:
61:8d:c5:56:5b:e3:f4:c3:89:cf:ae:b8:ad:bc:fa:
65:f0:79:b1:25:a8:b5:c7:bc:fe:23:ea:e9:bb:34:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:77:0A:B7:AE:DC:B7:19:EE:5B:58:64:5F:FD:32:80:96:02:7D:0F
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:e6:e1:59:98:e6:15:07:45:b7:01:90:f6:91:77:7a:69:
70:ce:1d:40:df:b9:b0:6a:44:9a:b6:16:3d:5c:87:82:c7:f3:
d9:76:84:f9:3f:a6:96:9a:36:2a:61:01:53:6e:13:36:3d:22:
e8:ec:0f:6d:10:8f:f0:f5:96:5a:84:1e:ef:7c:b7:ee:1b:0f:
45:6d:6b:41:b0:a5:eb:64:37:5c:73:0d:be:c4:ed:71:fb:32:
6c:97:bd:41:08:e1:96:1b:26:25:6f:7b:29:cb:68:75:65:9d:
ee:77:ed:3b:77:30:b9:47:b4:84:80:6c:a9:bc:a5:dd:ba:11:
35:8a:e2:39:da:32:a2:1c:af:3c:0a:40:b6:2d:5e:2e:c6:04:
95:c5:54:48:48:8d:4a:59:04:bf:c9:90:4f:cf:43:51:2f:c2:
8c:00:d2:d9:f9:39:fd:30:3b:af:cd:87:d7:cd:4a:92:93:21:
cb:61:a1:1a:81:02:e4:b2:5f:ce:90:6e:f6:14:23:e0:d9:e5:
47:a6:ff:2a:52:c7:58:1c:50:a7:40:92:9e:78:49:ea:1c:2f:
79:17:6a:98:f6:5d:c4:42:4a:95:86:43:e5:68:29:72:fe:b5:
3b:2e:8a:d3:8f:48:34:27:50:3d:dc:71:45:bb:7c:90:81:f9:
96:2e:76:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:53 2025 by rpki-client