Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
File: dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft (raw, json)
Hash identifier: 3JAZN68DHT0+LZC4iksbf5cMjvALMnCLXq9gW5mbNqI=
Subject key identifier: B1:18:84:D8:AD:31:4D:6A:10:93:10:37:8B:50:C7:6B:17:5B:ED:39
Authority key identifier: 75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
Certificate issuer: /CN=7571c892999bb4564bce480c921b6ff17205ecc6
Certificate serial: 0194BCA9C26A5970AA6A51FC9400482EFEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
Manifest number: 0409
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl (hash: FyGwSsjBJbsN1OJXtv0i4xOKKlTNewZ6/5yol5ElZP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:6a:59:70:aa:6a:51:fc:94:00:48:2e:fe:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7571c892999bb4564bce480c921b6ff17205ecc6
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=b11884d8ad314d6a109310378b50c76b175bed39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:ed:62:40:ba:26:0b:61:14:c2:92:c4:9e:
5a:30:dd:59:ed:24:67:7f:25:92:3f:10:a1:f1:a6:
94:d1:81:6f:1e:d4:cf:03:98:d6:57:57:0f:e6:4d:
fa:a5:88:95:8c:26:19:58:9c:1c:d5:73:b4:a2:c5:
50:68:83:c2:a0:b1:49:29:bd:bd:dc:92:ed:8b:b2:
66:8e:e0:4e:b9:2f:90:df:5b:fb:97:c5:a9:33:6f:
08:5b:98:9e:ee:c7:48:8e:17:15:37:11:c2:91:fc:
e0:26:95:62:a8:bc:89:ba:02:88:59:66:af:ae:97:
29:be:f2:2c:13:01:c3:4e:90:2f:0b:aa:69:3a:6c:
bc:d0:9b:84:85:76:38:4b:79:83:eb:30:0e:1c:d0:
05:7e:27:85:1d:2e:7e:f2:fe:ff:36:57:1a:32:11:
1e:ec:6b:e5:71:28:b1:40:0d:34:3b:77:db:cc:4b:
85:08:3e:55:e5:87:46:2b:b5:82:17:35:f4:3e:50:
ee:c6:e8:e1:91:22:ea:f8:ea:ff:f5:ef:91:53:78:
08:cd:17:3b:9c:fb:3d:13:c6:44:ec:3b:f7:fb:6b:
7b:1a:e6:b8:9d:b8:51:12:d7:39:76:26:b6:d1:64:
df:c5:6c:8b:c6:22:b2:66:23:17:2c:20:39:9e:85:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:84:D8:AD:31:4D:6A:10:93:10:37:8B:50:C7:6B:17:5B:ED:39
X509v3 Authority Key Identifier:
keyid:75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f1:23:93:fd:0b:1b:0e:ab:ce:fd:f4:b8:d2:3a:a1:1f:5b:
f8:b5:29:c4:a8:93:85:b5:ff:cf:e6:3f:d1:a2:14:df:a9:08:
8d:14:66:df:34:c4:85:07:9a:50:5b:40:32:22:fe:92:28:e6:
b2:34:fe:d1:3a:19:90:f1:4b:03:8a:c9:68:ed:8c:52:3e:be:
b8:12:0c:7d:dd:83:d0:0d:ba:67:4f:8f:a8:2b:ae:6d:90:8d:
28:ea:da:7a:e2:6b:7e:58:bc:85:fd:f8:1a:36:28:13:f3:21:
60:43:5c:df:12:55:af:62:5b:c9:50:fd:09:3a:f5:b6:c6:2e:
4b:b1:f2:d2:6c:ac:f5:79:c1:7d:92:97:24:37:84:71:99:dc:
95:23:56:34:e6:00:5c:7d:bc:75:f0:32:35:6e:07:fe:c8:61:
d3:1b:fc:45:a2:15:b5:29:5a:b1:3b:29:48:0c:03:8a:2b:39:
a1:03:23:9b:3c:4f:66:99:29:ef:8b:55:dd:04:5b:d6:ca:1b:
1f:aa:8c:55:97:08:64:50:42:98:2d:e0:00:eb:77:7f:1d:50:
58:1e:5e:18:52:46:85:fc:5f:db:8b:c4:6c:79:c4:b1:e7:8d:
99:2c:13:6f:cc:91:ba:82:0c:1d:31:be:a1:75:16:bd:53:2d:
f8:14:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:27 2025 by rpki-client