Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
File: dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft (raw, json)
Hash identifier: hzuPIy2h9RPT7AYlsD8u0NJ3OujDPTw6hq2KcIwW9nY=
Subject key identifier: 9D:AA:C4:4D:63:44:E5:A9:F5:EE:30:A5:25:5B:AF:60:2F:35:C6:50
Authority key identifier: 76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
Certificate issuer: /CN=76d47c234a8b92f31d3989cc42219f80c947da19
Certificate serial: 01963CC11FB229369E0CA4C6B9C234E0F81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 04:00:11 +0000
Manifest this update: Wed 16 Apr 2025 04:00:11 +0000
Manifest next update: Thu 17 Apr 2025 04:00:11 +0000
Files and hashes: 1: dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl (hash: NV69q5UwaGINjvkROhgZ66v2ECOjKKvML6reOk1hsXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:1f:b2:29:36:9e:0c:a4:c6:b9:c2:34:e0:f8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d47c234a8b92f31d3989cc42219f80c947da19
Validity
Not Before: Apr 16 04:00:11 2025 GMT
Not After : Apr 17 04:00:11 2025 GMT
Subject: CN=9daac44d6344e5a9f5ee30a5255baf602f35c650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:26:6c:a5:2d:b4:c3:cf:85:a4:38:d8:53:
0f:c6:2e:64:49:c9:27:fc:71:84:c2:83:51:ab:3d:
0b:e1:88:ea:78:3e:76:e0:ed:30:fe:f1:45:af:c4:
ab:56:11:bd:99:bb:f3:f2:d9:2f:f4:4a:3b:c8:9b:
c1:c8:db:de:36:c3:f1:3d:70:14:b5:ff:ea:6d:ed:
cc:4d:84:88:70:76:d9:20:95:d3:ec:96:c4:ba:03:
0e:54:06:6f:85:07:2e:b5:8f:5c:e6:29:f0:14:69:
9e:e7:9f:f2:ed:7f:85:68:98:65:3d:8a:06:15:d1:
48:2d:f4:4e:6b:f8:aa:d0:1a:6d:86:69:2d:ae:54:
c4:f4:39:f5:8e:21:0a:2d:7f:f9:4e:51:5b:6f:ff:
89:7c:ea:30:34:de:82:4f:3c:a6:9c:72:7f:b2:2d:
24:dc:d0:a3:44:df:0d:74:fc:fd:b9:98:c7:21:ed:
58:16:33:1c:bf:51:67:24:03:7a:bd:ad:2e:57:dc:
2f:16:b5:9e:d4:7e:7a:6a:f3:9a:3d:a3:41:49:76:
f8:43:fc:96:74:3c:17:be:40:0e:e1:98:f1:7e:75:
48:dd:53:ff:f5:cc:30:5d:3f:52:18:76:96:8f:b1:
2f:45:ec:1a:49:ac:64:43:ac:d6:c7:f6:25:91:5e:
5b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:C4:4D:63:44:E5:A9:F5:EE:30:A5:25:5B:AF:60:2F:35:C6:50
X509v3 Authority Key Identifier:
keyid:76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a3:a2:45:44:5e:2d:db:11:04:be:03:a2:d2:5f:66:6c:3a:
23:d2:56:90:9e:c2:95:3c:02:22:9b:af:30:1f:49:5b:4a:12:
12:5f:cb:9b:74:e7:c7:a0:7b:fb:64:ca:cb:1c:e5:2a:91:3a:
78:65:31:72:3c:af:a4:eb:a6:6a:a9:43:71:57:ca:d8:4a:db:
61:5f:69:e6:0d:bf:89:4e:1d:8d:95:89:2c:68:c2:ff:98:71:
05:d7:8e:03:7b:25:24:76:c9:b7:7a:0a:4d:05:83:ae:31:ce:
56:b0:e7:aa:74:6d:10:68:c4:52:b3:ae:8b:c2:20:71:ef:c4:
4c:4b:8b:4e:65:03:80:2b:d5:69:bf:9c:d1:8d:a3:d3:ee:13:
f8:f3:48:da:03:9b:05:0a:20:23:84:74:91:f8:cf:70:5c:82:
30:69:37:c8:02:d0:0e:04:3d:b8:60:6f:2d:31:93:e1:bf:a4:
c4:8c:19:73:dd:eb:f5:3c:c9:0e:e5:3f:14:22:aa:f2:5a:2f:
1c:98:72:9d:51:f9:c2:4a:59:f4:cf:6a:ea:b1:1b:c3:a4:32:
ac:46:22:07:73:4f:85:06:16:25:3a:df:6f:24:56:0e:75:cd:
74:0f:b1:46:9c:f0:54:34:04:05:ae:9b:7a:26:0a:76:18:e2:
55:13:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:05:49 2025 by rpki-client