Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: ol/eZPN9CpoJNrQTvdETcN95slaEkFjrpm1N33aakKg=
Subject key identifier: 4E:0E:1D:D4:98:D9:BF:1D:6F:B1:F6:49:F5:40:78:55:88:28:2D:A7
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 0194BBCEEEB260407408B8126D7D5AA9E705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 0CEA
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: lmvW1AENrYVE1RHfg9gJZGmt6BuWyTHk/FvSz1E0Q6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:b2:60:40:74:08:b8:12:6d:7d:5a:a9:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=4e0e1dd498d9bf1d6fb1f649f540785588282da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:34:71:7a:fd:fd:1e:77:6e:1a:af:74:e7:
11:f8:17:50:9c:97:fd:dc:1b:7d:c5:c4:94:13:2e:
0b:fd:7e:0a:5c:10:07:3e:e4:b0:95:ff:f7:c0:a0:
c2:95:96:9e:e0:f8:5a:ff:f1:a5:d5:9c:d9:95:43:
08:10:5f:45:ef:ca:35:4c:51:06:2e:7f:d5:a3:df:
4d:e4:28:ae:e7:bf:f7:cb:2d:3a:32:17:c6:89:96:
a3:5e:bc:bf:c9:5c:eb:77:84:d2:35:4d:76:a8:2d:
a1:6d:35:f4:66:a6:86:b2:be:c6:6f:1d:61:51:48:
94:89:87:14:72:3a:f5:7d:66:df:2f:63:b3:38:bb:
b3:ad:21:e1:91:05:87:08:5e:73:a5:b1:68:a8:4b:
5f:ba:2f:3c:cd:ca:fd:1b:9e:02:7c:05:49:58:fa:
1d:13:9e:8f:73:35:5e:d0:6c:01:96:21:ab:b7:83:
1b:56:d0:3c:7c:66:e1:fb:44:d2:ef:41:fc:ec:c1:
23:a4:7b:8b:d2:fb:3b:bc:b1:f2:c5:be:ab:ee:e2:
d0:76:d3:3a:9e:63:f6:98:34:e0:5b:3a:1d:9b:82:
40:88:32:68:5c:5c:a6:e1:7a:2d:35:90:ca:db:56:
08:17:0b:74:e0:ca:f1:fe:77:da:9b:21:81:c5:4b:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:1D:D4:98:D9:BF:1D:6F:B1:F6:49:F5:40:78:55:88:28:2D:A7
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b4:14:d6:45:90:b6:de:ef:ed:bf:6d:f4:d2:13:4d:3a:b9:
54:58:16:5a:22:28:0f:22:91:ef:c4:09:19:11:d0:d8:2f:41:
fa:b5:4b:08:cc:8f:61:37:4e:19:4a:b9:3c:50:ec:d8:c9:60:
5a:7c:15:5e:da:b1:06:3d:d8:ca:f5:17:c0:66:6e:68:8a:72:
3f:4f:c4:fd:00:64:cf:5c:c1:36:9f:5c:57:89:c8:62:e8:e7:
e7:ab:16:83:59:69:da:09:ac:3e:c6:af:84:e5:87:8d:47:c2:
ac:13:24:59:ae:1a:0f:8f:cd:c7:91:b9:4b:c2:67:a7:70:42:
c3:94:9f:69:b3:a9:d6:29:94:b6:e1:4e:e6:94:3e:87:8a:6b:
61:0e:7d:63:a3:ee:52:d5:24:60:ca:28:80:dd:aa:6c:05:83:
6d:79:9c:0a:2c:0b:00:4e:ef:65:2c:9d:97:76:19:17:d7:57:
e3:a2:42:f3:d8:41:cd:f0:80:3d:f1:e4:40:76:5b:3a:ce:18:
fa:3c:f7:99:24:0d:a5:5d:8b:bd:bb:25:da:64:a0:d2:e1:2b:
d5:4f:0f:db:22:e8:41:a7:b0:95:fd:3f:34:be:47:4a:15:d4:
05:61:da:4c:b9:78:e4:74:ab:92:86:34:b0:d4:df:af:cb:9e:
0a:8e:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:34 2025 by rpki-client