Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
File: dkVpLUvTDPnpidVbrI0I53FEk6s.mft (raw, json)
Hash identifier: OdycM4wibjbu9TkBQ1vILrOElTmewBS06jNQGhOVdDI=
Subject key identifier: 04:1A:B2:6F:4C:7A:E1:F9:39:78:F8:76:12:29:C0:25:96:F1:A6:DD
Authority key identifier: 76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
Certificate issuer: /CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Certificate serial: 0196F213521ADB9F1FA87772BE639D549ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
Manifest number: 1552
Signing time: Wed 21 May 2025 09:01:14 +0000
Manifest this update: Wed 21 May 2025 09:01:14 +0000
Manifest next update: Thu 22 May 2025 09:01:14 +0000
Files and hashes: 1: dkVpLUvTDPnpidVbrI0I53FEk6s.crl (hash: XU/wjZH0H5qJzzKSvctzDQm+/ipesm1hmCc4wtEhM/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:13:52:1a:db:9f:1f:a8:77:72:be:63:9d:54:9e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Validity
Not Before: May 21 09:01:14 2025 GMT
Not After : May 22 09:01:14 2025 GMT
Subject: CN=041ab26f4c7ae1f93978f8761229c02596f1a6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:1d:15:d6:61:0f:d9:65:4e:d7:95:2e:a6:
e4:f1:9f:4a:ce:57:d2:ff:b8:6b:a9:30:6e:9b:8d:
5f:5c:cf:32:e1:81:bd:ee:65:bb:6f:a3:1b:5e:f0:
a3:e2:a5:19:42:35:1d:14:47:19:2a:ac:ef:8b:6b:
1f:69:b4:47:06:10:16:2f:9f:84:fd:49:d8:8c:3e:
5d:17:e6:aa:b6:68:74:3f:7d:23:e6:07:c0:ff:5c:
34:7f:dd:4f:e8:3e:26:67:a0:9f:e3:48:0d:f3:08:
93:d2:f5:8d:9e:f6:e2:8a:25:64:16:20:12:56:d9:
65:99:87:a4:47:8d:12:67:fd:f8:6b:19:3e:4a:f0:
93:af:8f:ce:38:c3:0f:35:db:f0:12:a8:25:93:a7:
bf:ab:f0:2e:e5:f3:a2:5f:6a:30:5d:49:c1:87:21:
48:3f:e6:34:9b:76:d8:77:aa:8d:af:d0:a7:b5:d5:
7b:5c:69:58:09:e5:e3:0d:e9:85:95:8a:50:17:95:
6a:7d:ba:be:a5:02:f7:f9:88:31:22:f5:1b:c5:bd:
6f:53:ae:63:26:9d:a2:74:12:0c:a6:6c:62:5f:93:
4c:31:51:b9:cf:88:1e:cb:f4:1f:f4:24:9e:7d:74:
6a:ae:88:cc:94:54:7b:1e:33:24:79:13:59:41:0f:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:B2:6F:4C:7A:E1:F9:39:78:F8:76:12:29:C0:25:96:F1:A6:DD
X509v3 Authority Key Identifier:
keyid:76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:18:20:bd:e0:c7:b7:58:ff:ef:b3:7e:38:3d:f4:0c:8a:
c1:4e:86:3b:4d:7e:c1:d2:23:02:e5:79:66:19:72:c0:6f:39:
7c:db:29:e4:5b:e9:2a:dc:87:5b:70:cc:37:80:92:be:af:fc:
c2:ae:09:5c:e0:8f:23:87:56:c6:4d:bf:b2:de:39:3a:7d:71:
53:88:f2:b9:1e:c7:e0:64:77:6b:d8:69:f0:1f:c2:01:7c:72:
f3:7c:a8:b3:0c:4c:9c:f4:2f:3f:cb:90:6d:c1:db:bb:f0:9f:
96:fa:aa:43:ec:0e:08:4e:9b:d4:ff:9f:ba:0f:d5:da:e5:30:
76:a3:8d:6c:9c:de:0f:1b:4a:d0:1c:18:92:3e:1f:9f:1e:2c:
a1:58:30:ee:de:fd:9b:a3:d8:59:91:5e:ae:b7:9e:ef:68:e7:
01:2a:44:e2:dc:f6:58:5b:db:14:3c:77:d6:5a:be:d2:d4:65:
d3:72:7e:e4:17:9d:a2:2e:a0:3d:b8:05:c3:69:f2:11:1e:fe:
7c:e6:cd:9d:35:32:68:47:76:84:83:5a:3f:06:64:01:07:c9:
d3:25:99:db:ff:00:7c:40:f1:8a:cf:0b:2c:8d:d1:0b:6a:40:
90:86:fd:5d:2f:42:ca:ea:a3:fa:27:3f:e0:cd:66:61:23:64:
82:30:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:20:42 2025 by rpki-client