Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: EMdNLQlfFvilzkc9bK5HllqszZNVvdn1O7wNZVeOhiw=
Subject key identifier: E8:9C:10:5A:AB:B7:7C:B4:D7:6C:4D:99:93:A7:CE:0F:36:6D:0F:B6
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 0194BD17A0BE83EF565522B80C134C40D9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 015C
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: H+cwGw7OYgZZno28AsggRtjfZ/BFDfipoA3kFe7eVQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a0:be:83:ef:56:55:22:b8:0c:13:4c:40:d9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=e89c105aabb77cb4d76c4d9993a7ce0f366d0fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:e9:14:72:6d:3b:b0:ab:92:e6:0d:53:bd:
c2:3b:43:a5:83:e6:ba:67:bb:13:f3:84:61:ca:0d:
ff:06:7c:8f:b6:81:f3:e0:55:70:ad:9d:1b:ea:d5:
4b:dc:67:8b:50:c7:65:41:7d:92:0c:f5:79:fc:97:
00:f3:e9:cd:3b:ee:6a:66:b4:ce:c8:75:68:db:02:
19:93:0f:fd:c4:92:c9:26:09:d5:e2:e6:86:25:ac:
66:a8:e2:d1:8e:17:2f:bd:13:a9:1b:6f:29:07:8d:
1c:7f:ed:1f:4a:17:d6:27:ae:03:55:b3:e0:a4:1e:
54:51:aa:e4:85:2d:46:0c:c6:a4:48:f5:9e:3a:3e:
9e:9d:7c:42:5b:a8:70:e2:63:e0:15:41:42:7c:05:
4d:89:3f:84:18:90:b2:e1:0c:92:57:33:05:b8:40:
c2:a6:d4:7f:63:42:50:0c:47:6b:aa:95:c4:27:12:
8e:2b:2a:7a:8d:a5:98:76:78:4f:4d:9e:1d:3b:d2:
3a:d4:e2:5a:69:48:ce:c1:0f:60:77:12:68:25:85:
ea:72:5a:55:47:55:ae:ce:79:ff:00:dc:5d:97:2b:
6d:24:7f:18:bb:e5:fa:ec:15:74:1c:75:5e:75:ef:
5b:c6:c4:06:92:d9:eb:21:20:18:49:95:b9:67:7c:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:10:5A:AB:B7:7C:B4:D7:6C:4D:99:93:A7:CE:0F:36:6D:0F:B6
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:d7:cb:f9:0f:0d:11:e9:fd:c1:2f:ce:62:88:13:94:f1:
8c:a6:22:41:79:5b:3a:1d:05:b2:48:2e:e6:f6:bf:ba:4d:4d:
2c:b1:d1:75:f9:74:71:e2:be:56:58:1e:61:4f:43:19:94:7f:
56:7f:27:a9:07:dc:d8:06:c2:13:e7:ac:72:02:8d:ed:ce:42:
82:80:c3:55:1a:75:fc:ed:8b:be:5d:45:8d:bd:0b:de:ec:a6:
2e:f7:72:2b:fd:6c:46:62:3c:8a:19:26:58:af:c7:b5:bb:e3:
ed:8a:20:e8:91:53:ad:4e:6a:90:d4:a8:2a:75:50:e0:90:f7:
64:c4:e5:7c:5b:96:d5:a2:43:43:00:a0:17:e7:e5:bc:34:66:
fe:d7:15:19:72:d7:e2:ad:46:b7:ec:2e:51:71:91:f5:ff:0b:
8e:e2:90:a1:60:ae:29:2a:b3:42:71:e1:31:a1:1b:29:11:3f:
fb:d0:93:b1:b7:34:e3:3c:1e:9c:7e:a7:c0:7b:d0:34:80:84:
9b:f5:28:38:47:5b:1e:a0:6d:43:07:5b:f0:de:e8:a8:06:7d:
b6:18:47:43:ba:7b:36:91:ad:21:3c:c1:aa:99:bd:fc:42:f8:
e2:84:49:42:bd:c3:a2:d2:df:3e:ab:ad:5e:e8:f4:c6:41:6c:
c0:88:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:56 2025 by rpki-client