Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: FC5LqLvllm1h9hoLESDpeGL+x+BEV6Xg9zdcheCaNCw=
Subject key identifier: D5:09:BE:E8:15:EE:87:BE:B9:24:B2:02:BE:8A:48:36:1E:BE:46:51
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 0195E1594411D2ADA5F2722FF93C4A73003F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 14BF
Signing time: Sat 29 Mar 2025 10:01:18 +0000
Manifest this update: Sat 29 Mar 2025 10:01:18 +0000
Manifest next update: Sun 30 Mar 2025 10:01:18 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: S+AJ79UxrZ9pZbxsw3YPyhXgRjBW5TViXkaUuUDuj54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:44:11:d2:ad:a5:f2:72:2f:f9:3c:4a:73:00:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Mar 29 10:01:18 2025 GMT
Not After : Mar 30 10:01:18 2025 GMT
Subject: CN=d509bee815ee87beb924b202be8a48361ebe4651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:00:85:ad:66:1e:19:8a:9c:10:00:0e:19:
10:04:a2:61:39:e2:66:8a:cb:4c:25:50:17:ef:06:
3c:e8:78:90:a8:4c:94:61:74:98:8c:e0:7d:4b:97:
7c:83:4c:df:5f:0a:1c:44:bf:91:11:4c:c8:d8:ab:
b1:f6:d0:78:50:78:ab:7e:18:63:34:cb:52:bd:37:
04:3b:0c:8b:8d:27:5c:25:1a:e6:b7:a4:6d:29:16:
54:59:ea:f1:8d:17:78:47:3d:f7:db:e6:82:e6:2c:
c2:db:70:93:68:68:17:1b:ed:08:1b:ff:a9:be:d2:
dc:73:1e:0d:19:9f:62:09:c9:9b:87:4c:bb:98:bd:
be:b8:f0:8b:8a:cf:2f:73:5b:9e:c7:57:20:79:eb:
83:9f:42:02:b6:63:98:43:78:70:1e:2c:12:c0:49:
df:11:a9:44:35:b7:ac:47:a3:cb:49:66:02:24:2d:
92:84:1f:96:54:4e:f2:12:dc:8e:ef:a6:9e:fa:d1:
0b:09:f9:ff:ed:ad:c4:5f:e7:17:97:39:20:d2:9a:
25:4c:12:40:d1:69:1a:da:bc:37:70:55:b6:02:ff:
eb:0f:34:13:16:da:fb:1c:87:7c:84:dd:a7:82:2b:
b9:cd:e9:f4:37:da:f3:a3:c9:5e:5e:9d:7f:51:f8:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:BE:E8:15:EE:87:BE:B9:24:B2:02:BE:8A:48:36:1E:BE:46:51
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2a:3b:3d:44:72:1d:08:ca:95:cc:51:5e:65:66:1c:2e:12:
fb:04:95:e5:14:4d:cb:65:1a:e5:a4:8f:ba:e8:74:af:25:97:
fe:65:cb:04:d0:35:fa:f9:9e:35:f6:40:18:ba:ff:cb:06:a2:
21:cb:5b:06:10:a3:c7:a5:5f:87:fb:ff:54:b6:ad:aa:fe:ab:
95:2e:11:d1:d7:de:2f:7e:3b:03:3c:14:40:5c:fe:3d:c3:5d:
78:89:e8:72:4c:c5:c5:4e:09:0d:54:07:a4:aa:ec:46:16:e8:
40:ba:b9:00:26:20:09:2a:22:a6:b9:c2:88:6a:c0:2b:46:97:
3a:cc:99:8e:3f:5c:b6:16:6b:2d:76:2a:cf:4f:5b:38:d4:91:
73:00:d7:5c:e4:07:10:44:fb:b1:bf:0b:69:59:ba:f2:fa:50:
ea:f1:03:22:34:1c:07:ad:a4:bd:70:10:3c:59:4c:88:2d:b4:
a7:ed:fd:9f:6d:f1:33:61:2b:a3:50:e8:7e:5a:0c:ec:6f:3b:
fd:c5:10:ac:a9:84:fe:37:dd:f6:27:97:cc:10:27:0b:8e:36:
6e:21:33:46:ac:36:ec:53:35:76:b7:52:27:ac:bd:97:3c:5c:
fa:78:1a:52:c7:8d:7a:ec:71:c1:7b:1a:e3:1b:cf:00:f6:3a:
67:92:26:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:26 2025 by rpki-client