Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
File: 2axioKJWftFz3CqtN25FXIW8trs.mft (raw, json)
Hash identifier: PDmLvCM42EajLYTa7uZ0rTQvO0bPez9yK45k9th7Ocw=
Subject key identifier: A7:4F:4B:1C:C9:C7:E5:36:A8:6B:88:EA:7D:AE:17:B1:3A:24:17:68
Authority key identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
Certificate issuer: /CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Certificate serial: 0194BBCDCE81FC6F77BE17CB852729BDF7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: 2axioKJWftFz3CqtN25FXIW8trs.crl (hash: RL4QW6BEp+gOeIMMcFtojCjN05xPOqcWCW42UIczaoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ce:81:fc:6f:77:be:17:cb:85:27:29:bd:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=a74f4b1cc9c7e536a86b88ea7dae17b13a241768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:e2:1c:fc:6d:80:96:94:1c:48:0e:86:14:
28:db:d1:14:27:4d:f0:18:0c:8a:f4:bb:53:88:41:
6a:b8:b4:5c:d4:4a:85:82:86:fc:1b:60:e5:3b:42:
90:f8:0c:07:5d:cf:72:2b:d7:10:43:0f:d3:a7:87:
4d:39:02:f8:ae:b2:22:f5:c5:03:2d:a5:c5:b1:bf:
9f:e9:23:33:e5:8f:ea:1c:84:90:d2:b2:49:8c:63:
aa:25:c2:0e:cb:d2:d1:60:e4:9f:85:a6:83:4a:3d:
99:10:88:71:e0:d9:a1:a2:7e:b6:b8:25:84:09:cd:
09:9b:32:6e:82:fe:fc:04:d4:d6:bb:f3:66:db:94:
dd:e7:18:2d:6a:84:bc:f1:6b:b7:4d:41:35:be:0e:
6a:b9:a9:31:04:76:49:d2:b2:48:91:5f:42:d2:20:
30:4e:46:80:41:3e:23:9b:30:43:f3:0a:a3:14:b6:
ed:8e:58:16:82:82:46:fa:c5:5d:85:f2:23:60:45:
0e:80:8d:05:46:d0:6c:57:e7:b3:77:41:94:7c:6f:
5f:ee:de:ca:c7:ed:a2:21:4f:ab:82:30:b9:04:c8:
78:a6:d0:78:87:55:4f:49:e3:0f:01:a9:5e:8f:dc:
21:37:2c:c3:c1:3e:23:39:8b:58:4c:17:fe:a2:96:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4F:4B:1C:C9:C7:E5:36:A8:6B:88:EA:7D:AE:17:B1:3A:24:17:68
X509v3 Authority Key Identifier:
keyid:D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7e:46:c0:63:e6:27:d5:54:d8:ff:9e:e6:90:d2:7c:b1:03:
2d:c8:47:fb:de:4f:5a:ae:2d:a7:23:d2:98:6b:8e:c0:b3:17:
d7:99:2e:75:8d:b2:0a:bb:3d:dc:97:9d:d8:f6:2f:82:7e:fe:
ac:af:ca:e1:14:dc:fc:f8:5a:b8:64:29:9c:df:c5:ca:20:ef:
84:d0:0b:10:f6:d3:29:e6:9c:d0:f3:06:c1:96:e1:60:6b:fa:
82:dd:b6:10:62:1a:0b:a2:60:5d:ab:00:05:2a:b7:ec:1c:5f:
ce:ea:86:df:b7:b3:80:33:31:48:d3:e0:0a:80:56:94:8a:a8:
10:42:ee:55:e2:a9:e9:3d:be:99:ea:00:f9:d0:cd:31:a0:2d:
45:9b:2c:c4:c6:0e:35:67:b2:4a:6b:d4:2c:5e:68:9b:22:12:
ea:86:22:22:8b:04:bb:a5:ae:9c:0b:a5:cd:f1:11:8d:8c:33:
42:2a:30:05:c2:94:08:4d:1d:34:09:d6:e2:8b:4e:ff:83:48:
dd:de:34:7d:08:6d:9d:45:75:af:1e:de:5b:e0:b1:04:38:b1:
73:9f:b1:7d:ae:58:83:f4:43:7b:64:c5:18:d1:70:07:07:58:
c1:35:3d:d6:9a:ec:68:83:1c:49:30:ea:29:ac:59:1e:e8:48:
d5:1b:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:11 2025 by rpki-client