Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft
File: 2h2OAPPwRejexhV_FCYkG18SbQ0.mft (raw, json)
Hash identifier: 43/OZD9uuz0IC8vFJ4ExHI9iuR2fJ2EhjdsNhc7bFsE=
Subject key identifier: E5:8E:9B:A0:0D:D3:F5:C4:0D:16:33:98:A2:D5:CA:B1:BB:D3:BB:3F
Authority key identifier: DA:1D:8E:00:F3:F0:45:E8:DE:C6:15:7F:14:26:24:1B:5F:12:6D:0D
Certificate issuer: /CN=da1d8e00f3f045e8dec6157f1426241b5f126d0d
Certificate serial: 0194BCA972DBB90530924CB6F1D4399E1E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2h2OAPPwRejexhV_FCYkG18SbQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: 2h2OAPPwRejexhV_FCYkG18SbQ0.crl (hash: ghdGA1Vi6R1EDlYflKCW422BCv2nym5UBbPlOBXE88o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:72:db:b9:05:30:92:4c:b6:f1:d4:39:9e:1e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d8e00f3f045e8dec6157f1426241b5f126d0d
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=e58e9ba00dd3f5c40d163398a2d5cab1bbd3bb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:56:82:6b:07:82:1a:e7:2b:0b:53:f5:32:
47:b4:73:b3:15:41:f2:b0:d9:f5:bc:57:d9:27:a1:
c4:9b:4c:7c:a0:99:b3:f1:51:cc:6b:6f:41:06:90:
4f:c4:75:7d:4b:ab:53:4b:06:89:40:b9:31:40:30:
23:dc:c7:22:d1:5b:41:7d:99:d7:7a:91:f4:17:d4:
c9:75:86:7d:0c:84:79:41:b5:a4:c3:5f:5c:79:9b:
22:cc:8b:1a:3b:a0:3a:09:97:b3:e3:ac:31:57:b4:
eb:6d:92:93:05:a1:a7:b7:5a:94:79:be:97:1a:10:
f7:f5:6f:39:2c:29:56:70:f6:81:22:f7:f8:1d:73:
e8:39:0a:ac:7e:f1:96:88:46:8a:f3:8b:06:ff:cc:
86:e3:7a:5d:53:67:72:e4:dc:38:52:22:c4:ba:bc:
d8:67:f3:d1:03:59:5b:e1:a3:18:7b:f8:61:e1:6b:
6e:a1:1a:c2:37:62:78:9c:3b:d9:2c:ea:37:40:25:
26:07:66:23:d6:2d:0c:74:e2:9e:71:35:6d:6f:96:
cd:e2:ad:da:75:fa:9a:d7:b4:f8:fb:30:79:d1:64:
08:94:f3:f1:96:d1:6f:cd:91:03:68:dd:c0:55:ad:
fd:bc:b7:5a:73:e3:c8:81:24:cd:b1:44:9f:57:6a:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:9B:A0:0D:D3:F5:C4:0D:16:33:98:A2:D5:CA:B1:BB:D3:BB:3F
X509v3 Authority Key Identifier:
keyid:DA:1D:8E:00:F3:F0:45:E8:DE:C6:15:7F:14:26:24:1B:5F:12:6D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2h2OAPPwRejexhV_FCYkG18SbQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6f:e2:5c:7e:50:1b:91:ae:33:cf:70:df:f3:a6:a8:0f:74:
df:9a:8a:aa:65:95:96:57:f3:05:66:bb:7b:e6:6e:a3:c2:f1:
e7:18:4a:db:d8:ce:80:a6:c5:c7:a0:6b:e8:d6:f5:21:68:79:
e4:c7:91:5c:a7:56:2e:c5:7b:35:57:ef:9c:b4:45:5b:33:15:
ae:c8:40:16:5b:20:93:0d:90:d9:60:3a:de:fb:e3:01:4c:8b:
06:9d:67:b2:21:cc:6c:39:72:5f:9d:de:09:5b:b0:fd:e6:39:
17:da:fc:dd:86:b8:14:ad:68:83:c0:33:82:97:c2:a0:2a:c8:
4c:4d:79:bc:91:a4:9c:5e:5b:d6:5d:87:1f:fb:d5:fd:74:a7:
ef:c7:82:25:31:71:a6:9c:d9:c4:40:9e:19:24:33:ce:e1:93:
cd:cb:62:09:7a:72:47:58:6f:5a:a0:02:8c:b8:02:b9:04:50:
dc:5a:dd:0a:39:19:9b:27:9b:b8:f0:55:da:a4:2f:cb:08:7b:
e7:7b:00:6d:3d:37:03:52:10:0f:d9:fe:ef:5d:77:2c:a0:75:
96:b0:60:e5:85:1d:fa:e4:87:52:d7:06:36:b4:19:7c:49:09:
7b:f3:b0:e6:45:0c:ce:e5:ce:47:36:cb:4e:24:16:6d:be:d2:
7e:ff:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:03 2025 by rpki-client