Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
File: DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft (raw, json)
Hash identifier: VgECe63gYlMg2LoprNlmAvG8dgG3+y+7k5J66vQ+rD0=
Subject key identifier: C8:B2:BE:C2:F0:9D:F7:96:18:79:B0:D2:8C:59:17:1A:3C:D7:DE:54
Authority key identifier: 0C:47:35:08:6C:74:C1:4B:75:B0:F6:72:41:7E:30:75:CF:6F:41:2B
Certificate issuer: /CN=0c4735086c74c14b75b0f672417e3075cf6f412b
Certificate serial: 019386D1A7581DD7D69DC7F811365A50D0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEc1CGx0wUt1sPZyQX4wdc9vQSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
Manifest number: 0970
Signing time: Mon 02 Dec 2024 10:01:46 +0000
Manifest this update: Mon 02 Dec 2024 10:01:46 +0000
Manifest next update: Tue 03 Dec 2024 10:01:46 +0000
Files and hashes: 1: DEc1CGx0wUt1sPZyQX4wdc9vQSs.crl (hash: 0CU3GHDCjxMRG3B0CKJWyY8RoGbN1iinarOZjTWq3Yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:d1:a7:58:1d:d7:d6:9d:c7:f8:11:36:5a:50:d0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4735086c74c14b75b0f672417e3075cf6f412b
Validity
Not Before: Dec 2 10:01:46 2024 GMT
Not After : Dec 3 10:01:46 2024 GMT
Subject: CN=c8b2bec2f09df7961879b0d28c59171a3cd7de54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:3d:d4:6e:94:26:8a:9d:5e:17:d8:0c:8e:
62:9a:f3:12:03:82:6f:81:f8:b3:6c:cb:c6:7b:1e:
11:0e:ae:6e:f8:ef:bf:b3:33:29:ba:dc:9a:6c:66:
d7:b0:ef:e5:bf:7a:ff:48:fb:5c:76:cf:83:6b:6f:
ee:32:d6:fe:03:5c:8d:84:ba:de:b3:b4:64:b3:9a:
57:fe:8c:85:8d:35:44:ea:11:04:19:03:d5:3a:1e:
a7:cd:fb:e0:d6:01:62:de:d2:2e:13:b5:1d:6b:fe:
7b:43:ec:6e:6c:0c:17:1e:b8:f2:b3:38:64:f4:f0:
59:39:44:c5:e8:25:66:33:20:ce:aa:09:b7:36:a8:
53:3f:43:d7:1b:5e:71:4e:c9:66:2e:ae:d8:95:ac:
30:ac:4a:b2:dc:ed:62:73:25:8b:a4:d6:e8:d4:7b:
97:df:70:54:e7:34:54:34:93:35:43:f1:cc:6a:ff:
05:fd:8a:1d:8f:81:77:22:91:cb:a3:8a:4e:67:c1:
e3:76:38:74:fa:95:3c:81:d9:c1:b8:19:ed:7b:3e:
21:00:88:38:4b:37:a4:55:12:2d:a7:74:80:12:c2:
fd:85:1d:7a:bc:4a:e7:e5:ee:f5:1a:3a:34:62:60:
6f:e5:5e:80:2b:f8:39:72:69:3f:83:ae:ab:b5:af:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:BE:C2:F0:9D:F7:96:18:79:B0:D2:8C:59:17:1A:3C:D7:DE:54
X509v3 Authority Key Identifier:
keyid:0C:47:35:08:6C:74:C1:4B:75:B0:F6:72:41:7E:30:75:CF:6F:41:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEc1CGx0wUt1sPZyQX4wdc9vQSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:d9:34:b5:f9:b9:74:a4:1c:e1:a1:2c:e9:23:e7:09:8f:
ba:c9:00:cd:30:34:77:1c:c8:c9:e0:db:2c:c7:3a:91:96:8d:
9c:44:ae:eb:03:d7:60:ec:04:15:21:37:8f:17:dc:c5:10:5e:
7d:9e:d4:af:b7:85:6f:ad:b0:52:65:b7:4f:2d:38:74:d9:4f:
08:15:0e:4e:70:b6:58:79:a3:be:01:72:cb:32:d6:15:4c:47:
3f:89:76:ce:7c:b9:cd:23:dc:5b:8d:ea:1b:ea:24:c2:c8:6d:
c6:20:fb:37:f9:81:e9:45:23:84:6d:78:bd:a2:84:22:c5:f6:
c6:69:c2:59:4f:7e:3e:4d:87:48:3a:b8:49:61:0b:68:82:5d:
0b:4e:33:a6:b0:31:ce:eb:04:c5:6c:83:59:28:31:df:6b:e9:
9b:bf:ff:2a:cc:f6:59:18:1e:13:0e:75:1c:b7:63:6c:17:d6:
fc:34:cb:b6:54:98:ff:0f:e0:a0:40:90:df:1e:4f:b2:0f:a9:
8f:c3:0b:6e:03:38:ab:bc:10:88:40:b2:21:b9:51:86:77:b3:
90:07:49:2e:eb:3b:a1:38:75:e1:dc:cc:11:31:d7:31:c3:7b:
b3:f0:6e:b5:ae:d4:d6:a5:57:a2:f1:7a:21:26:89:23:0f:d1:
c0:d9:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:01 2025 by rpki-client