Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft
File: 2-DL9NZpKl5OHgHSsRL-pru_90w.mft (raw, json)
Hash identifier: HAVkH3hdCkGi3TmQDSn5RTBcNnAwn/jddpdoDw2egAk=
Subject key identifier: 9E:7A:88:1E:67:6C:4D:D9:B2:A6:0F:44:95:A4:99:A8:18:F7:3A:5A
Authority key identifier: DB:E0:CB:F4:D6:69:2A:5E:4E:1E:01:D2:B1:12:FE:A6:BB:BF:F7:4C
Certificate issuer: /CN=dbe0cbf4d6692a5e4e1e01d2b112fea6bbbff74c
Certificate serial: 0194BD4E6DE40CC5AAEA6EE9F2B6B84E7B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DL9NZpKl5OHgHSsRL-pru_90w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: 2-DL9NZpKl5OHgHSsRL-pru_90w.crl (hash: c2Bg8haEE+CrrwD/r6SAQDPDVWqvbukPwt2JAzu4SjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6d:e4:0c:c5:aa:ea:6e:e9:f2:b6:b8:4e:7b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0cbf4d6692a5e4e1e01d2b112fea6bbbff74c
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=9e7a881e676c4dd9b2a60f4495a499a818f73a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:e6:74:c0:03:3e:1f:7e:43:65:2f:94:91:
db:0b:65:74:99:64:81:d5:c1:d3:1e:4b:30:38:38:
8f:80:62:8e:3f:db:e0:76:7c:70:a7:19:1f:6f:21:
e2:01:7f:79:fa:8d:36:f2:f8:c8:1e:4c:0e:85:04:
06:ac:bd:22:57:cb:a4:3f:06:13:d9:ca:25:71:71:
c2:83:fa:72:99:67:6c:fe:0a:63:a4:92:a4:20:b2:
30:bf:a5:08:9d:30:c7:13:8e:cb:29:37:c7:0a:10:
0d:6f:a2:51:e2:2f:fa:9f:a4:22:83:42:e7:cb:8d:
cd:a7:c9:fa:9d:89:b0:08:8d:f6:60:2c:ee:82:ef:
0a:3d:75:92:6e:14:89:bf:ed:1c:15:13:2a:ea:85:
91:b5:f8:fa:29:0f:7a:b7:b0:5d:a6:d0:25:f2:dc:
c4:c6:4a:94:4e:ae:12:08:7e:1d:43:09:c9:ca:61:
40:44:84:61:f4:21:65:82:d7:9f:e4:aa:5e:39:4d:
d0:38:a3:d8:4c:f9:11:cd:44:1b:13:e2:89:e6:6a:
89:37:29:22:6f:0e:af:bb:09:ed:6d:d4:63:4c:28:
0f:4b:10:20:74:84:96:b3:0d:94:3f:02:27:77:3d:
cb:97:20:2f:e0:2e:a5:b9:94:8b:00:3d:74:13:b4:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7A:88:1E:67:6C:4D:D9:B2:A6:0F:44:95:A4:99:A8:18:F7:3A:5A
X509v3 Authority Key Identifier:
keyid:DB:E0:CB:F4:D6:69:2A:5E:4E:1E:01:D2:B1:12:FE:A6:BB:BF:F7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DL9NZpKl5OHgHSsRL-pru_90w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:37:80:b5:80:f8:e9:dd:10:b0:29:88:71:a6:ee:3f:f0:a3:
c5:98:ab:54:c7:b8:eb:69:52:14:a2:3c:bd:6f:e0:e6:0c:5e:
bf:3c:57:e5:72:b3:39:dd:a1:a7:0b:56:22:47:50:a0:12:d1:
f1:70:bf:58:69:e3:61:9b:36:b8:b7:a0:92:be:1c:69:a0:bc:
3b:48:26:65:b0:e9:3a:5a:2d:61:ab:db:35:24:c6:f2:ca:6f:
0b:12:0a:50:ca:04:dc:6a:a1:0d:12:4b:9d:0b:32:e9:02:8e:
5e:b9:31:39:68:c5:e4:08:d1:ab:42:54:c5:a9:41:7e:f7:d1:
71:66:5a:47:1f:6d:46:74:56:2f:d4:bd:dd:05:ce:c6:1b:88:
91:90:d3:a7:8e:c7:6c:3d:19:58:4f:aa:83:e7:fd:3f:b6:b4:
41:a5:6b:9c:9a:b0:e1:a5:0c:d6:96:b3:d1:71:93:b3:06:81:
0f:a5:ca:28:3b:e7:6e:00:15:4f:7a:83:da:6b:f1:75:b5:f0:
b7:98:b4:83:e0:e5:e7:7b:11:8f:b5:1a:4b:ac:cc:64:27:07:
a6:82:66:76:ce:52:83:9a:40:6f:37:9f:0b:c0:f2:ff:ee:22:
73:95:c6:4a:3c:4d:d1:e4:d6:38:68:f2:9a:1a:2a:1a:34:84:
76:60:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:02 2025 by rpki-client