Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: EBUzd/FfLMV4U80aEDPle9+nPZW8+FpH3FIePu5TUPs=
Subject key identifier: 6E:A9:CE:5D:20:42:77:E6:9D:33:4A:8B:94:4D:55:8C:CE:7C:26:01
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 0194BC72ADC3776096CD424E1544F6583706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 1245
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: oX+J/1VYPRuNoUBAiRSDqcZ8CBOxtJrp4FGx80Luc3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ad:c3:77:60:96:cd:42:4e:15:44:f6:58:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=6ea9ce5d204277e69d334a8b944d558cce7c2601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:fb:6a:3d:44:a4:c3:32:b5:22:12:7d:5d:
92:86:4a:7e:57:2e:2d:31:df:32:f2:2c:24:75:c1:
6b:d8:a4:ac:f3:dd:f5:0b:98:ba:50:c0:42:66:09:
05:b4:3b:bf:9c:fc:6a:78:5e:1a:5e:99:57:bb:ef:
a7:e0:20:4b:46:5e:51:02:2c:9e:e9:cd:a3:05:56:
06:dd:d7:c5:d5:b2:a1:5e:86:e1:c6:d3:30:22:9b:
13:04:e4:30:1a:f2:85:09:88:58:10:1f:f8:b9:44:
55:4f:b7:c6:ca:88:1f:07:26:69:92:56:ad:30:ef:
3c:7c:d2:7c:91:a7:59:d5:2b:39:68:5f:bf:c7:97:
0b:cd:3b:e9:f9:7a:f0:c6:4c:95:06:0b:00:27:8d:
de:f7:83:fb:46:dc:eb:7d:79:80:01:66:79:08:62:
22:7b:df:cc:6f:07:9b:60:ee:c2:63:0f:50:37:26:
b2:62:ad:24:b1:ac:8c:27:6c:5c:c7:1c:7d:40:36:
1d:22:96:96:36:bf:04:a0:12:5a:3b:37:9d:91:ed:
5e:c0:65:9f:eb:41:9c:12:1c:23:b9:59:88:12:1b:
85:d6:dc:05:35:f8:60:e8:c5:35:2b:87:f7:b4:9f:
85:5a:6a:b4:21:77:1f:48:ea:8c:2b:61:11:ec:9b:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A9:CE:5D:20:42:77:E6:9D:33:4A:8B:94:4D:55:8C:CE:7C:26:01
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5f:62:c6:28:0a:3e:c3:5f:9a:c9:fa:ad:1b:c8:bb:49:5b:
09:ae:37:bf:9a:48:62:ea:e8:38:91:f5:f5:48:31:b8:64:55:
50:36:d2:24:3b:20:34:16:01:e3:4a:19:7d:b8:53:c8:83:65:
22:b5:85:20:c9:8b:bf:e2:23:db:f4:aa:ee:51:e3:99:45:2b:
53:d5:0f:fe:ba:16:f2:86:32:f3:a4:26:90:fc:5f:72:f5:b1:
8e:58:0d:15:f5:c5:f1:26:50:7b:16:42:dc:76:5c:ec:46:e6:
e4:3c:eb:02:5d:f9:be:74:bb:32:50:1f:b7:55:f9:72:af:86:
35:00:f4:28:63:82:76:97:5c:54:61:0a:af:7a:f6:16:5b:54:
8e:6a:55:dc:bb:7f:48:ff:ea:92:79:3b:0c:78:e6:84:59:5d:
71:b5:e9:33:ba:68:92:0b:39:f0:40:9d:f1:b7:92:e8:93:1d:
24:83:20:69:40:fe:0b:4a:20:f3:87:be:37:aa:e9:ab:1a:87:
60:01:3a:70:5a:90:d0:ca:5e:c2:1e:20:87:23:8d:04:93:14:
20:87:96:e3:38:b8:4c:21:5f:5f:c2:da:4f:bd:4b:80:a4:3c:
d7:a0:53:95:0e:3e:f8:5b:71:a4:11:d8:12:a1:46:bb:e4:58:
83:37:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:01 2025 by rpki-client