Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4ec8dc-c2da-481a-bf63-8b2d1c19cd95/1/dNNYxvJ2diN9JfyqLX4uoFhpj5g.mft
File: dNNYxvJ2diN9JfyqLX4uoFhpj5g.mft (raw, json)
Hash identifier: NcLX+uO967ocQKTlwqIAlc4dLU1vhHUBvD1G5QAa0ZM=
Subject key identifier: 1E:0D:97:BD:5E:9F:E6:10:E2:46:DB:E3:F6:4A:71:B1:14:3A:08:57
Authority key identifier: 74:D3:58:C6:F2:76:76:23:7D:25:FC:AA:2D:7E:2E:A0:58:69:8F:98
Certificate issuer: /CN=74d358c6f27676237d25fcaa2d7e2ea058698f98
Certificate serial: 0186FDF868E79B141F5943A4AA0F5FD49DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNNYxvJ2diN9JfyqLX4uoFhpj5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4ec8dc-c2da-481a-bf63-8b2d1c19cd95/1/dNNYxvJ2diN9JfyqLX4uoFhpj5g.mft
Manifest number: 0A08
Signing time: Mon 20 Mar 2023 07:42:40 +0000
Manifest this update: Mon 20 Mar 2023 07:42:40 +0000
Manifest next update: Tue 21 Mar 2023 07:42:40 +0000
Files and hashes: 1: dNNYxvJ2diN9JfyqLX4uoFhpj5g.crl (hash: CVdTSfOeGbUgYEIojqqRrEn2RLgrls73CNH17EDTc7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:f8:68:e7:9b:14:1f:59:43:a4:aa:0f:5f:d4:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d358c6f27676237d25fcaa2d7e2ea058698f98
Validity
Not Before: Mar 20 07:42:40 2023 GMT
Not After : Mar 21 07:42:40 2023 GMT
Subject: CN=1e0d97bd5e9fe610e246dbe3f64a71b1143a0857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:39:d1:76:21:f1:0e:75:f8:ab:8c:90:ee:
36:2f:f7:81:ea:f7:74:c7:37:c2:8f:e4:e3:a6:f4:
0b:da:80:48:30:30:26:6c:65:28:de:d9:23:8b:1d:
a8:03:8e:1b:ed:46:b8:b2:90:47:42:48:3d:5f:1a:
97:46:2b:1f:20:d6:5e:39:7f:b0:35:59:56:a7:1c:
fb:ab:7f:59:dd:92:d4:d9:62:39:c0:72:e1:af:8c:
dd:ff:62:9d:9c:1f:45:e4:76:de:9a:e3:c2:67:ff:
a7:78:a4:fd:93:84:d2:c2:36:25:30:56:a6:94:e7:
cf:50:70:b4:66:1f:07:06:15:69:63:ba:6f:1d:f6:
6d:b0:4f:3c:a4:62:c6:7f:5f:78:22:77:c5:29:98:
c1:35:a5:12:67:2e:73:d8:44:b1:bc:6a:ca:85:5c:
3d:54:ec:5f:b3:a6:d2:92:85:5d:ef:60:83:73:8a:
ce:05:8a:c8:5f:74:a1:94:4a:2f:14:36:83:3c:cc:
c3:17:80:5a:43:67:94:de:39:f3:3c:db:2e:2d:c9:
bc:9f:98:ce:75:c3:7c:8b:c8:47:11:20:69:96:cd:
c2:f7:89:04:e5:63:86:44:e3:86:f3:7c:6e:50:da:
e5:17:b6:b8:53:62:1c:b1:c1:07:61:bd:71:9d:7c:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:97:BD:5E:9F:E6:10:E2:46:DB:E3:F6:4A:71:B1:14:3A:08:57
X509v3 Authority Key Identifier:
keyid:74:D3:58:C6:F2:76:76:23:7D:25:FC:AA:2D:7E:2E:A0:58:69:8F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNNYxvJ2diN9JfyqLX4uoFhpj5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4ec8dc-c2da-481a-bf63-8b2d1c19cd95/1/dNNYxvJ2diN9JfyqLX4uoFhpj5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4ec8dc-c2da-481a-bf63-8b2d1c19cd95/1/dNNYxvJ2diN9JfyqLX4uoFhpj5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:85:b0:5c:df:08:58:da:ac:8a:d3:7a:48:c5:e7:3b:fb:d5:
de:09:cc:04:4a:d8:ab:5e:b7:34:3f:fe:3d:f3:93:0c:80:cc:
2b:72:5b:24:81:90:92:fe:2a:47:d4:5d:63:9e:b1:7d:9f:47:
0d:21:96:5d:04:98:c8:4a:80:8b:f2:32:ab:4a:a8:c2:55:92:
7a:bf:b1:c9:6b:0d:5d:5f:d8:2b:b4:11:f8:d2:98:dc:c8:ff:
86:5a:a2:34:a5:55:f2:62:09:21:c9:34:d4:45:fd:e7:c3:a9:
97:e5:cc:eb:45:af:e5:b0:b6:2d:c0:03:23:98:3a:e7:43:e7:
bc:b6:14:e8:f9:8b:1d:6b:4f:d0:9d:0f:84:c4:5c:42:51:0e:
e5:9b:7b:9b:c7:eb:db:d5:dc:88:ad:5d:33:70:95:3f:d3:1f:
95:d0:23:39:d1:7a:96:fa:40:79:15:d9:54:90:ab:93:24:48:
64:f3:c3:0d:61:5b:5a:69:d9:59:e7:86:25:7d:ae:53:44:a4:
af:49:ea:8d:21:90:66:03:57:ee:64:4a:b3:a0:96:9a:50:85:
b3:e7:05:42:ff:d5:ce:1d:f0:ff:35:c1:01:13:7e:95:0e:84:
f6:f0:ea:fb:13:ed:44:e5:e2:43:c1:47:d4:f1:31:56:90:4e:
64:14:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:19 2025 by rpki-client