Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File: dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier: sX+yLFedqAl8HGeoX0xqYPKmhV7tl7ldFKsd0D1keK0=
Subject key identifier: 9B:13:87:72:F3:B5:0E:3F:08:85:94:ED:A6:9B:CE:78:C9:A0:FE:A9
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer: /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial: 0194BBCE0FDEEF97B2D94509BC825B495835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: +amWQjhThfokgJ0WbDEzTmgkjQz5oDUPa6BBcO8CwcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0f:de:ef:97:b2:d9:45:09:bc:82:5b:49:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=9b138772f3b50e3f088594eda69bce78c9a0fea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:b1:bb:7f:0e:f1:7b:e7:6c:16:28:63:8b:
24:3a:41:e2:9a:7a:bd:2b:48:1a:6e:c5:ba:51:1c:
a9:9d:13:1b:5d:dc:40:e4:c1:b5:bb:9e:28:c7:f8:
9b:82:c2:7f:31:68:3d:3f:45:85:1f:88:3c:55:8d:
4b:7e:89:d6:23:d1:85:bb:3c:42:9b:9b:81:28:6c:
c7:18:23:14:a7:c9:fc:80:2d:fc:c5:bc:1d:1f:ff:
7d:a3:29:b3:53:2d:f5:1b:97:64:a6:50:d4:90:be:
a3:36:a1:95:42:f1:8e:62:ca:e6:0e:14:0a:c1:8e:
f5:c8:6c:7b:cd:39:da:bb:4d:84:60:1d:48:75:6d:
d9:02:70:84:a2:5d:0c:0c:7e:47:01:d8:18:84:12:
b2:60:f8:a9:32:d4:a8:93:84:c3:ed:f0:a0:20:b1:
f3:26:48:74:64:8a:e5:89:82:4d:f9:25:c9:11:12:
45:9c:73:46:68:b3:c1:a3:04:10:bc:da:14:02:b4:
91:0b:e1:9b:bf:9d:4d:0c:63:13:9c:dd:96:b7:1a:
45:34:a3:14:1e:60:e6:79:d1:f7:3f:62:43:95:bb:
58:c9:15:31:23:a8:56:82:62:91:5c:9e:4d:a0:6c:
40:20:3b:f5:dd:1b:62:15:43:03:d2:5f:dc:8c:28:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:87:72:F3:B5:0E:3F:08:85:94:ED:A6:9B:CE:78:C9:A0:FE:A9
X509v3 Authority Key Identifier:
keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:61:d9:3e:8d:80:87:72:a3:17:a9:d7:5d:1e:9f:d6:1e:
b0:cf:9d:5b:7e:60:0d:a0:19:ce:d0:1f:97:76:f2:6f:11:7a:
40:05:d8:5a:39:ea:bc:56:03:05:cd:f3:06:3c:c2:82:93:a6:
bd:a5:f9:21:c2:ba:d5:20:86:56:38:b7:a9:da:3a:5d:9d:32:
eb:43:83:b7:bf:eb:0e:85:39:79:ba:b0:de:f8:65:62:e2:ad:
dc:20:4e:8a:60:c6:24:08:9b:98:20:5e:74:2a:21:f6:6c:a7:
e9:a0:4b:76:04:c7:02:9d:4f:8c:a4:72:f7:7c:5f:d9:fe:fd:
1b:56:44:7c:90:b0:61:d4:ca:8e:8e:bb:4c:b6:cc:9f:b5:f4:
48:49:b5:ce:37:4b:77:f1:88:8a:23:9d:50:d4:03:47:2c:42:
0f:bd:81:de:3f:1e:5c:a5:43:3f:65:09:e6:e8:09:48:2e:1b:
fd:25:b2:cd:bc:92:d7:96:ee:80:bc:c3:10:ba:5f:80:49:6f:
ea:8a:45:e5:c5:ce:ec:d7:71:85:75:73:ad:48:97:07:22:d5:
17:c4:1f:f8:d8:b5:9f:83:bc:af:ca:50:d2:01:57:77:cf:c1:
4c:6c:55:54:c4:04:72:85:b9:91:a7:e4:71:4a:72:6d:51:ba:
1c:09:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:54 2025 by rpki-client