Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: LMu0/VtQ9AaNKU44r6rpjbSa+NUXDvjD4pKxA7Cg7Lk=
Subject key identifier: 0A:E7:EA:63:3F:FE:B0:0F:E8:CF:D8:A2:82:BB:26:59:D7:03:B9:90
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 0194BBCE3BA2590CD811834FE021C53A5CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: WnE8o9jo/dIYXKdluQAGCt98PvfppIlYn8Bz4/U1VHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3b:a2:59:0c:d8:11:83:4f:e0:21:c5:3a:5c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=0ae7ea633ffeb00fe8cfd8a282bb2659d703b990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:6a:8a:b6:3b:ac:6a:9f:30:37:9e:71:f1:
ff:c6:ed:53:89:75:73:29:a2:36:1d:76:ae:17:85:
82:6d:2f:15:e0:ad:4f:ab:59:b0:19:9f:51:ef:ab:
21:1d:65:3c:d6:86:0f:2b:6e:2d:2b:3f:4d:e5:9a:
ca:60:79:c1:b7:d8:24:7a:7b:63:12:83:ec:2f:7a:
d3:df:51:58:ff:bd:b1:a5:83:d1:82:7d:3f:1b:b6:
9e:09:8e:14:3c:7f:50:86:8c:b3:84:0e:84:18:16:
0d:84:4c:70:16:28:f6:4d:a4:13:d8:ad:0b:53:70:
ca:ba:80:22:c7:7b:fd:0a:31:3b:4a:44:5d:c3:b6:
80:d2:74:96:4d:7d:f6:9f:9a:fc:06:9f:6f:a0:78:
93:8d:5d:20:ca:c3:16:64:f6:f9:95:10:58:1d:89:
54:45:36:29:d9:4c:bd:60:b6:aa:62:63:e7:b9:b2:
57:aa:82:ec:e9:fa:39:c3:fb:60:b7:ea:e3:16:df:
bc:e6:58:92:85:9a:89:8a:b4:62:b9:63:f1:0e:1f:
99:01:4e:d5:84:0a:18:4d:08:6e:35:37:51:fc:40:
e8:ab:eb:28:29:00:c9:66:ce:7f:7c:4b:49:a8:84:
d1:e0:c2:93:cd:a5:ac:24:99:74:ec:4f:7f:c1:de:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E7:EA:63:3F:FE:B0:0F:E8:CF:D8:A2:82:BB:26:59:D7:03:B9:90
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:f4:58:00:68:8b:7c:94:d2:27:db:1b:18:be:a5:ca:35:
7a:d8:5d:49:f2:a5:36:4f:18:fa:1f:a5:cd:49:79:66:16:79:
90:70:8a:96:bb:44:5c:f1:5f:8d:4d:90:be:e2:9d:d7:0d:43:
7d:1b:02:27:6a:f3:73:32:bf:e7:22:05:b6:7c:82:43:7b:14:
27:e2:75:4f:00:cf:c9:7e:fa:61:ce:49:b0:ea:72:33:d8:7e:
8e:db:60:5a:c9:a8:3c:e0:d2:f8:87:4f:7f:d2:77:b2:0a:3f:
3f:96:4b:a2:dd:88:a2:00:8b:ae:11:94:07:4c:32:5d:12:7e:
cd:ae:2c:e2:6c:fe:41:08:48:2c:55:ee:c5:4c:86:f4:94:7b:
58:ef:57:8a:99:fe:16:c4:9e:e1:4b:77:18:d2:0c:7e:a0:49:
25:fa:65:0b:4b:18:7b:a6:bb:c6:d7:a4:1a:03:b4:c7:4c:25:
74:e2:d2:9c:24:e2:61:db:90:5e:d9:36:b3:fb:78:07:ab:6f:
81:e1:e1:f4:d0:46:e8:62:d5:88:6b:dd:f6:0f:ab:43:99:df:
d8:5f:89:7e:de:44:0d:41:31:a4:20:13:08:73:89:0a:f6:fc:
b8:75:78:8c:82:06:6b:8d:8f:c3:a4:cf:10:f6:1e:33:96:a1:
f0:e5:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:27 2025 by rpki-client