Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
File: DtBp69i6c1aNl9ixv7Q84upNqd4.mft (raw, json)
Hash identifier: b4EoueP6MZhPucxG9Py3iwlufWzPMd2X3yl0lLd0nxk=
Subject key identifier: 5D:8E:53:7B:4E:4B:63:A3:43:BD:3E:4A:88:C9:23:FC:C4:3A:5D:EB
Authority key identifier: 0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE
Certificate issuer: /CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
Certificate serial: 01958325AF24C535E6A63BC895A10AECBAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
Manifest number: 148D
Signing time: Tue 11 Mar 2025 03:00:39 +0000
Manifest this update: Tue 11 Mar 2025 03:00:39 +0000
Manifest next update: Wed 12 Mar 2025 03:00:39 +0000
Files and hashes: 1: DtBp69i6c1aNl9ixv7Q84upNqd4.crl (hash: zW42Yq8Nnh7Zm6EdyyzqE3o0z/844vw4dGCPwXmZqSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:83:25:af:24:c5:35:e6:a6:3b:c8:95:a1:0a:ec:ba:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
Validity
Not Before: Mar 11 03:00:39 2025 GMT
Not After : Mar 12 03:00:39 2025 GMT
Subject: CN=5d8e537b4e4b63a343bd3e4a88c923fcc43a5deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:06:85:d0:15:db:2e:4c:1d:5d:f9:6e:39:
11:1c:b8:a8:f3:54:f6:69:00:3d:1a:de:f9:f9:51:
e5:7d:36:3d:0b:77:12:7e:83:eb:8e:bb:d9:7f:40:
42:93:ce:c5:5d:f2:f8:04:86:15:83:56:7a:17:2a:
26:4e:b9:e5:f5:0d:3b:eb:cb:22:c4:63:e1:f8:45:
53:94:06:36:38:6e:23:55:1a:6d:ea:7b:10:c6:8a:
55:bf:2c:83:31:28:20:e7:88:0f:02:8b:b1:64:c3:
a3:41:34:f5:51:ce:ae:2e:31:c2:2b:22:57:c5:63:
3d:ef:0d:70:0f:37:aa:11:f1:f8:98:fa:11:6d:a1:
e2:6a:33:54:b1:64:8f:ab:41:9b:97:0c:5c:de:0e:
8f:c1:ed:fb:be:5c:c5:b6:12:8b:5d:b2:af:65:0c:
92:46:69:10:0a:98:15:94:50:93:cd:74:a9:2b:be:
bf:6c:84:6d:0e:4b:52:c4:ee:73:e3:b8:36:a2:eb:
4d:d7:2b:f8:2e:a9:65:a7:c0:ad:53:70:a2:54:4e:
7a:43:80:87:ec:f4:e2:b5:c9:f9:df:6c:f3:55:af:
78:4d:de:4e:60:1b:50:2c:9e:79:f3:3e:24:49:c0:
4d:20:d6:15:1e:39:46:20:b8:e8:06:dc:52:23:f4:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:53:7B:4E:4B:63:A3:43:BD:3E:4A:88:C9:23:FC:C4:3A:5D:EB
X509v3 Authority Key Identifier:
keyid:0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:63:e6:12:d5:0e:ba:08:7b:6a:46:fd:c7:c6:4a:59:7e:05:
9d:45:9e:67:99:73:49:d2:8b:e2:1d:47:87:47:bd:48:7f:49:
6c:b2:d2:70:50:f0:19:51:ca:c8:dd:2e:da:f0:83:32:ee:22:
04:74:fe:2e:67:93:75:2d:25:fc:96:37:36:58:1e:ae:cf:2d:
18:04:a5:cc:fb:f9:78:70:28:e3:ab:e0:bb:b7:20:80:c9:47:
de:ae:6d:87:6d:2b:b1:91:2d:7f:7a:01:10:24:a6:3e:00:09:
35:62:6c:f9:0c:f7:ab:33:92:c1:7f:d5:03:1f:74:b0:18:e1:
bf:f7:80:68:ad:75:0c:3d:ff:6c:70:5b:9d:e2:1d:2f:8d:00:
98:e5:8a:34:6e:3f:cf:09:0c:ff:28:96:e1:c9:45:49:84:20:
73:0a:ce:0c:eb:ca:b9:e9:ea:f5:84:75:35:23:34:7b:ef:ec:
c8:58:9e:f2:e1:a6:e6:54:97:c3:6a:c8:27:ed:8a:a1:f0:a4:
7c:b6:67:c0:62:ac:cb:34:9b:aa:db:19:ed:c5:3a:d9:83:8f:
ab:93:cd:ed:d8:55:ee:24:f8:09:d4:d6:88:85:4e:12:7d:10:
0a:40:c9:60:f4:81:44:11:83:3a:dc:db:ef:8d:e7:ef:9a:ff:
36:a7:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:54 2025 by rpki-client