Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cf7d34-ca81-4ad0-9205-84d2b4b8585c/1/da3DiG95f5Tnth3vkMH0xk9xRPw.mft
File: da3DiG95f5Tnth3vkMH0xk9xRPw.mft (raw, json)
Hash identifier: gWpQ2O85Bvgc4MB9jdv5pxzmgWLWLHIlbsJmo6tuYrI=
Subject key identifier: 48:E2:05:72:59:97:98:28:3F:59:51:C6:B3:52:BF:9F:DA:F5:63:50
Authority key identifier: 75:AD:C3:88:6F:79:7F:94:E7:B6:1D:EF:90:C1:F4:C6:4F:71:44:FC
Certificate issuer: /CN=75adc3886f797f94e7b61def90c1f4c64f7144fc
Certificate serial: 01944413348F88B6D98711AEA07FA7776E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da3DiG95f5Tnth3vkMH0xk9xRPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cf7d34-ca81-4ad0-9205-84d2b4b8585c/1/da3DiG95f5Tnth3vkMH0xk9xRPw.mft
Manifest number: 0550
Signing time: Wed 08 Jan 2025 04:01:36 +0000
Manifest this update: Wed 08 Jan 2025 04:01:36 +0000
Manifest next update: Thu 09 Jan 2025 04:01:36 +0000
Files and hashes: 1: da3DiG95f5Tnth3vkMH0xk9xRPw.crl (hash: NwOys/eZHU6QEvuh2Qfe+gDAS86DXqbaQbiVWYWlPPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:44:13:34:8f:88:b6:d9:87:11:ae:a0:7f:a7:77:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75adc3886f797f94e7b61def90c1f4c64f7144fc
Validity
Not Before: Jan 8 04:01:36 2025 GMT
Not After : Jan 9 04:01:36 2025 GMT
Subject: CN=48e20572599798283f5951c6b352bf9fdaf56350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:6a:73:39:bf:34:33:75:22:77:05:a5:d6:
d6:e3:13:6c:e3:bb:02:fe:fe:3e:60:44:b4:8f:0c:
32:52:4d:18:01:e3:8e:3a:0c:1a:ea:33:05:77:04:
16:2f:dc:30:13:47:20:3d:87:a5:23:d3:43:d0:4d:
d3:54:39:fe:7d:3d:67:ea:c4:18:bf:cf:20:f5:43:
66:30:2f:a6:80:7f:3a:28:88:b1:cb:06:f3:9b:16:
55:3b:f3:14:3d:91:6e:04:17:ca:57:2e:2d:2b:7a:
95:8b:3a:37:cd:9c:b4:ee:27:51:e8:1f:f1:11:a3:
89:fd:31:0f:57:cd:39:d0:09:96:b4:6a:a9:cb:5e:
a6:75:b7:10:fb:5e:4f:88:9e:0b:a8:3d:bf:11:42:
87:95:1b:c2:0d:fe:d2:60:6a:9c:56:01:d8:c0:c3:
5c:1e:ad:0d:ad:4c:0c:1f:21:ab:0a:51:ca:1c:f6:
1f:58:df:f8:d4:1f:ef:ea:fc:8b:f5:27:b3:af:71:
c4:c3:64:f0:62:17:0d:72:8e:6d:0e:2c:ff:55:77:
14:bb:a5:eb:92:55:4f:0f:1f:8a:97:36:8a:2c:5b:
29:90:ad:59:7f:cb:ec:70:4c:e8:f6:a7:b6:17:a1:
9f:cd:43:b1:a0:40:68:33:60:56:94:04:74:3f:b4:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:05:72:59:97:98:28:3F:59:51:C6:B3:52:BF:9F:DA:F5:63:50
X509v3 Authority Key Identifier:
keyid:75:AD:C3:88:6F:79:7F:94:E7:B6:1D:EF:90:C1:F4:C6:4F:71:44:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da3DiG95f5Tnth3vkMH0xk9xRPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cf7d34-ca81-4ad0-9205-84d2b4b8585c/1/da3DiG95f5Tnth3vkMH0xk9xRPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cf7d34-ca81-4ad0-9205-84d2b4b8585c/1/da3DiG95f5Tnth3vkMH0xk9xRPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0e:a6:55:c9:85:54:09:3f:66:4d:77:4b:71:22:d7:e2:b4:
60:d6:21:30:c5:53:35:6e:a7:5a:f6:2a:a6:27:ee:a9:89:97:
70:3a:f4:2c:ba:cf:bb:4a:bc:e5:86:67:ae:c5:cd:aa:f9:9e:
5a:95:0f:5a:e2:ad:7c:51:f9:06:04:22:c9:6c:d0:99:11:c2:
67:d9:9a:77:1f:3b:15:bc:5d:ec:2d:01:62:ef:09:14:d6:04:
e3:5c:d9:2f:41:12:2f:f3:54:06:85:e4:19:5a:c1:90:37:ed:
a2:1e:6f:fb:69:54:b2:29:ea:c5:6f:dd:7b:ce:81:f1:25:eb:
cd:9d:eb:65:ac:43:53:d9:a3:8c:11:b3:4a:96:43:63:dd:6b:
0c:00:b9:4d:fa:37:bf:b2:26:f5:96:b9:fd:77:09:74:2c:4b:
70:60:2b:ec:5b:35:00:46:4b:92:fb:9f:49:a6:60:bf:3e:3d:
87:05:f5:4a:d1:69:3b:85:31:29:8d:fb:6b:05:4d:50:20:3e:
bc:f3:91:bb:da:bb:77:72:7f:73:0f:92:91:7c:70:b5:1e:b3:
7f:42:9c:67:49:58:1b:7a:c4:97:c1:27:80:98:24:fe:bc:31:
11:23:f0:db:ee:a7:bf:e3:bb:06:76:7e:0a:02:fb:0a:00:10:
bd:d3:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:44 2025 by rpki-client