Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
File: dqIj-utMXd95nTyiqWDAbB1tHZY.mft (raw, json)
Hash identifier: bc1XmUFPPxn6JSSIRqJ/HJ/qyg5Kr1y1VE2V4++7J80=
Subject key identifier: 1D:0C:34:DF:EE:A2:91:65:F2:76:2D:CC:0B:D0:73:32:DE:5D:08:28
Authority key identifier: 76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96
Certificate issuer: /CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96
Certificate serial: 0194BCE0D793411F9C280F908895750E362E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
Manifest number: 09D9
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: dqIj-utMXd95nTyiqWDAbB1tHZY.crl (hash: R0MhtOttJzKvyCp17x5VXrP9sq6A3tB7UgAqIwg5Lh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d7:93:41:1f:9c:28:0f:90:88:95:75:0e:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=1d0c34dfeea29165f2762dcc0bd07332de5d0828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:6b:c2:a8:60:a9:35:ab:db:3c:2c:48:a4:
1e:3e:a2:3b:95:00:27:5c:f9:06:5c:bf:ab:d0:e1:
34:3c:4e:99:67:5a:24:89:cf:c2:a7:40:68:82:17:
3f:9d:5f:20:5d:0c:89:32:8a:49:fe:55:a7:69:d9:
fe:2b:46:c5:ae:7f:0c:9b:d8:c9:16:46:35:47:07:
52:e6:02:66:03:43:78:09:5b:92:ea:64:7b:1f:7f:
96:dc:05:b7:ff:02:28:4e:c6:8b:6d:f3:92:20:db:
07:93:4b:89:ea:90:fc:73:d5:17:3b:18:39:4e:96:
b0:24:70:dd:4f:10:2d:1f:49:a9:9a:90:65:2d:59:
1b:d0:e5:fa:ca:e3:3f:95:4d:e8:96:c9:cb:1d:87:
a4:95:3e:64:7f:36:54:40:fc:f2:40:dd:2a:62:75:
03:03:97:4e:26:0a:e3:70:80:5f:49:1e:d3:99:95:
3e:fb:0d:ef:18:08:2f:b1:79:49:72:b9:66:45:bd:
8b:ed:98:6c:b1:4b:8e:f8:b5:4d:93:26:6f:18:7f:
cc:ec:78:9d:65:21:b6:12:97:90:bc:64:9c:53:30:
99:84:cb:30:51:94:42:23:d9:3f:7c:10:25:e6:c1:
5f:b4:cb:2b:e7:ea:64:81:70:81:33:55:48:89:ec:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:34:DF:EE:A2:91:65:F2:76:2D:CC:0B:D0:73:32:DE:5D:08:28
X509v3 Authority Key Identifier:
keyid:76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:e2:bb:39:3e:05:c0:3f:b0:ad:45:4c:ad:2d:48:8d:45:
e2:16:d1:09:da:80:8e:bd:2a:55:00:59:a4:7e:95:ac:71:ba:
da:ea:4b:f3:37:17:c9:88:79:34:47:dd:7f:c2:81:c8:87:e2:
2d:38:9b:aa:67:fb:14:83:4b:20:93:8e:c7:99:60:74:5d:96:
ad:88:61:d5:58:cc:d8:e6:06:a2:f1:ab:f9:5f:74:8f:f0:9b:
95:c6:40:62:57:bd:3f:97:47:d6:cd:59:78:75:aa:10:f5:b1:
dc:82:f6:40:d2:33:ea:6f:b0:6c:e7:d5:58:b0:59:d9:ed:be:
e8:10:a0:19:fc:6d:8f:cd:31:e9:36:d2:66:3f:16:7b:57:9a:
11:30:e5:95:c6:86:48:3b:c1:25:cc:19:0d:ef:1c:f9:dc:8e:
46:41:27:a7:85:9b:e4:33:18:51:9c:bb:45:ac:41:d5:20:3d:
c4:98:a9:24:fe:c0:44:8e:2c:15:a3:34:ea:52:1a:49:fe:06:
82:82:9f:5c:36:df:9d:2d:06:d8:bb:45:35:4a:fe:b6:81:3c:
b5:f9:b2:9e:8b:1e:3d:7a:30:19:8b:ce:91:68:c0:c4:60:a4:
56:ee:2b:3d:56:40:db:f5:4f:0f:11:36:0b:7b:b9:ec:e3:84:
20:d5:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:36 2025 by rpki-client