Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier: gQsHWnoZCON2b6Vq79ryIdllM52ClWaJe9wVFzdhNCI=
Subject key identifier: 77:3B:16:26:59:EB:A1:39:AE:12:04:0D:7C:98:06:CB:07:B7:8B:FA
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer: /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial: 0194BCA9B6716A81F589B2EB56998388C3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number: 026C
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: ZCzW5Qc/mOfiKgL6AXN3PpRmuj9MSUZRRqDqsSCXgmI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b6:71:6a:81:f5:89:b2:eb:56:99:83:88:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=773b162659eba139ae12040d7c9806cb07b78bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:95:2f:54:fe:19:ed:32:07:01:07:9d:cc:
91:16:a6:7f:40:99:81:45:61:3a:7f:e4:c3:34:b6:
e1:ec:13:d9:22:7c:2c:1a:63:d0:bf:55:42:2b:06:
37:87:3d:f3:4a:1b:72:ba:45:01:9c:88:3d:25:77:
b7:e8:12:ec:6d:4f:ba:17:75:d9:29:46:6f:9e:0b:
15:be:63:35:fb:f0:f9:1f:80:67:f9:86:c5:81:50:
ca:59:c1:38:aa:b9:0e:fd:bf:3f:3b:7b:0f:ee:e6:
f7:3e:b1:3d:eb:79:fc:65:7d:db:e0:eb:a8:19:8b:
76:a9:38:f3:a6:77:90:cb:10:e2:cb:19:05:06:1e:
94:3d:75:07:fc:10:47:4f:c3:74:4f:28:d1:47:6e:
02:f1:57:8b:0f:62:f6:73:4f:53:0f:8c:aa:fd:7d:
8f:26:15:c6:70:b0:18:6e:a0:68:7a:f2:2f:d0:60:
30:64:1b:bd:16:68:97:4b:03:a3:2f:5d:51:b8:76:
11:dc:ec:e3:ef:ab:10:d7:09:c3:1c:e9:dd:55:94:
7b:80:b2:c2:7d:3b:5f:64:a4:7e:52:33:f4:9b:d4:
59:ee:40:2f:bb:61:34:54:bc:dc:86:67:23:4b:b8:
94:55:c7:95:43:fd:45:12:0e:2d:96:1d:44:22:bd:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:16:26:59:EB:A1:39:AE:12:04:0D:7C:98:06:CB:07:B7:8B:FA
X509v3 Authority Key Identifier:
keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:9e:0d:54:a8:91:bd:09:b2:a4:b2:f5:5a:c0:a0:0b:49:
ec:23:0c:8c:59:70:b7:ed:bd:65:94:05:e9:84:93:6d:cc:1e:
d6:5a:98:61:97:1f:c7:ae:16:1e:75:0a:6e:e9:8b:54:2b:c9:
7b:25:a2:15:41:c5:99:73:3b:60:f1:a2:0d:5c:17:32:7c:49:
fa:2b:e1:e9:0b:2b:b9:5f:b1:a6:1b:d0:02:ae:2c:85:a8:0c:
57:85:8c:51:f4:6b:46:20:83:b5:e8:70:68:c6:14:09:f4:7c:
3a:a5:72:ab:ba:2b:52:a0:65:d9:60:4f:f8:d3:26:ab:0f:23:
63:4c:9c:e0:90:cc:97:cb:0a:d2:56:8c:c1:f2:c3:87:f6:69:
7b:55:ba:16:65:6e:a9:fa:81:3d:88:3e:bb:70:d4:ec:b8:e7:
81:a4:77:04:c8:16:33:9f:b9:fc:d8:5b:8a:14:ea:96:45:f1:
84:71:d0:21:0c:82:70:e6:1f:5d:9b:8b:09:38:2c:bf:5f:fb:
c9:03:78:ba:f8:50:62:5d:ec:a4:cd:82:eb:4d:df:c7:19:10:
58:1b:f0:4e:1d:e2:bd:fa:67:4b:c1:c1:cd:16:71:b4:5a:de:
58:14:03:d2:b4:90:8b:38:8e:51:b6:8b:18:89:5f:5f:11:a0:
1a:7b:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:08 2025 by rpki-client