Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ce1bf4-c0ac-441a-8592-142bf31b69e1/1/dzulwBfR2nlR7iE-NqR1B5chPvg.mft
File: dzulwBfR2nlR7iE-NqR1B5chPvg.mft (raw, json)
Hash identifier: E8RIyV3lCOWT0ZlOz8PKR99zJSGk/8Uy8SxmfpdPCtY=
Subject key identifier: 5A:BE:DD:09:7F:7F:A5:5E:9C:68:16:9C:0A:19:EB:2F:DE:3F:D6:A9
Authority key identifier: 77:3B:A5:C0:17:D1:DA:79:51:EE:21:3E:36:A4:75:07:97:21:3E:F8
Certificate issuer: /CN=773ba5c017d1da7951ee213e36a4750797213ef8
Certificate serial: 0185A48E57BAE22618051F75B7B720D8A0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzulwBfR2nlR7iE-NqR1B5chPvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ce1bf4-c0ac-441a-8592-142bf31b69e1/1/dzulwBfR2nlR7iE-NqR1B5chPvg.mft
Manifest number: 0C17
Signing time: Thu 12 Jan 2023 05:57:49 +0000
Manifest this update: Thu 12 Jan 2023 05:57:49 +0000
Manifest next update: Fri 13 Jan 2023 05:57:49 +0000
Files and hashes: 1: dzulwBfR2nlR7iE-NqR1B5chPvg.crl (hash: uAKdMQxP4teJphSWPI+67sEJFjp5uJAWFLYTW7GdL10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:8e:57:ba:e2:26:18:05:1f:75:b7:b7:20:d8:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ba5c017d1da7951ee213e36a4750797213ef8
Validity
Not Before: Jan 12 05:57:49 2023 GMT
Not After : Jan 13 05:57:49 2023 GMT
Subject: CN=5abedd097f7fa55e9c68169c0a19eb2fde3fd6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:41:c2:13:d4:d3:bb:c9:2f:7e:a8:cf:a7:45:
e5:bf:18:7b:f1:fd:a1:52:c5:a1:5e:0e:4d:9e:ea:
9e:37:f8:f6:58:0b:23:3f:63:24:c8:8b:69:56:ff:
95:55:f1:20:0c:f0:71:40:5c:0b:f4:f1:70:8b:1b:
fa:b4:47:2c:b7:e0:e5:1f:b1:e0:18:c5:3a:29:cd:
66:d2:ff:da:37:2d:25:ed:ee:e3:c2:c7:78:ae:07:
08:98:4a:61:21:78:dc:c3:58:8a:ea:f2:e9:2c:a6:
03:4c:1e:29:c7:f7:f3:c5:be:91:cd:57:fe:4e:01:
7e:ae:e9:51:26:f3:ed:32:ec:b1:10:02:a9:ac:f0:
3a:eb:46:98:68:f5:f1:1c:64:93:82:c2:8b:7e:ce:
05:5f:25:d8:ad:cb:48:f3:b5:ff:a9:ad:cd:c3:32:
65:d2:13:63:ca:b8:34:2a:25:5e:97:f9:c9:c4:5e:
09:ef:4a:df:12:e8:42:d5:0f:a3:ea:ce:59:28:2d:
93:ac:ce:28:49:bb:74:d0:12:8f:af:69:13:87:00:
2c:2e:0b:79:b4:ec:96:e4:50:ae:52:93:f6:14:bd:
28:c9:8e:8d:12:04:40:89:b1:33:75:6d:e9:35:36:
c6:35:85:12:00:1f:2a:0f:37:e7:4d:53:64:b9:d8:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:DD:09:7F:7F:A5:5E:9C:68:16:9C:0A:19:EB:2F:DE:3F:D6:A9
X509v3 Authority Key Identifier:
keyid:77:3B:A5:C0:17:D1:DA:79:51:EE:21:3E:36:A4:75:07:97:21:3E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzulwBfR2nlR7iE-NqR1B5chPvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce1bf4-c0ac-441a-8592-142bf31b69e1/1/dzulwBfR2nlR7iE-NqR1B5chPvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce1bf4-c0ac-441a-8592-142bf31b69e1/1/dzulwBfR2nlR7iE-NqR1B5chPvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d8:b8:89:02:b8:6a:f1:e6:62:96:28:85:cd:d8:e4:37:9c:
0d:a7:91:d7:db:bc:f3:ca:1e:28:b4:17:db:32:0e:aa:45:8a:
93:41:a0:aa:69:2d:85:57:ba:5a:a4:ad:b0:3f:44:87:aa:19:
bb:31:e1:a4:2b:80:6c:07:73:a4:3b:e5:3f:5e:47:7c:6c:68:
d0:a8:4c:50:04:54:9b:cd:76:33:d1:21:43:ad:b5:6b:d1:9c:
df:d1:69:5b:91:b2:1e:15:68:02:bf:bf:d8:ea:ca:76:3d:ee:
81:3d:44:44:b6:7c:28:90:76:ca:65:f9:b9:3b:2b:0e:ab:03:
44:f1:a4:78:81:cf:33:2f:78:2c:9e:76:d8:b0:4b:38:6c:48:
92:2a:9b:9f:55:85:b8:f6:5e:0b:8a:da:48:a9:e3:dd:de:cb:
9b:a4:e2:ec:82:07:8a:25:18:4e:d0:f6:a1:06:2a:65:2d:aa:
dc:00:7a:4d:ec:f7:ba:8d:a2:4b:15:e0:26:b1:bf:a7:b7:1b:
de:c4:75:74:96:0e:60:40:58:39:7c:28:e9:e3:93:59:44:a5:
f2:27:f8:37:08:c4:3c:0e:66:c3:4c:6d:4e:04:2d:64:b6:1e:
2b:58:97:e7:19:bb:18:6a:d5:fa:e0:05:e2:44:76:58:ae:ef:
52:2c:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:08 2025 by rpki-client