Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: yvou6LOoySVk8Q8QczWbc5w767q0nmYyaeTZTjCbVuk=
Subject key identifier: D5:BC:58:CF:C1:D6:3F:4D:1F:50:46:FF:34:B7:A8:CF:37:DC:BD:D0
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 0194BD857022F27FF12995870448E4A6BB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 0588
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: bqP05I8FpgTTGGa4m+5vBFcii+5Zj0UxGoB27vgcnH4=)
2: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (hash: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:70:22:f2:7f:f1:29:95:87:04:48:e4:a6:bb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=d5bc58cfc1d63f4d1f5046ff34b7a8cf37dcbdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:66:de:4e:8c:0e:56:61:42:bf:34:bd:fe:
62:8a:91:bf:ae:7d:13:34:01:e5:ba:b7:54:13:0e:
4a:e8:69:89:3d:0a:93:c6:19:4b:66:f5:28:1f:40:
0d:8e:cb:05:af:68:e4:24:b6:ec:6a:16:ba:29:7d:
ab:40:5f:2e:09:d1:7a:5e:b0:35:bb:a9:6c:b2:ef:
27:ee:d4:43:1c:23:18:b3:62:07:4b:e5:09:63:77:
39:61:da:3d:77:8c:ca:25:81:5e:c4:4a:bb:11:78:
2d:12:38:9f:f6:16:f1:1a:5b:b4:ff:d6:b0:78:c6:
ce:ac:6d:06:5d:32:12:4b:42:c4:be:f4:8b:6c:5a:
ea:c0:78:f4:02:4c:d3:9a:e7:80:5b:a8:35:58:40:
6d:11:6a:b2:bc:75:d2:21:0c:bb:97:6c:da:ca:4d:
d4:c7:2c:05:b9:69:fc:f7:ea:c7:4c:22:e9:a8:a7:
59:2f:da:8a:21:76:1f:ac:b2:80:6f:87:68:d9:7a:
17:0d:7b:78:2e:aa:6f:3a:bf:1a:b7:b0:ca:1b:5a:
b7:9b:8d:67:6d:eb:d4:0f:08:8f:ec:65:d2:c9:86:
ac:a2:6a:92:ae:d6:74:ca:ef:b3:5f:d7:77:a4:cd:
7e:df:84:c0:6f:b5:5e:e3:93:fd:67:1a:81:8b:88:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:58:CF:C1:D6:3F:4D:1F:50:46:FF:34:B7:A8:CF:37:DC:BD:D0
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6c:a5:eb:3a:ff:66:be:90:d0:34:07:da:3b:57:05:c1:ee:
b9:4a:aa:04:cc:e7:b2:51:bc:c4:29:db:4a:dc:4c:d6:be:d4:
5f:bb:1c:e0:c6:d0:52:97:b2:39:23:39:7d:4b:9d:7c:2c:82:
33:a6:4d:d6:5a:1d:69:cb:ba:96:a2:53:02:e7:3d:67:6b:6d:
ae:49:58:c0:40:fe:20:98:66:85:8d:21:94:cb:77:af:f9:88:
30:12:ca:c7:8c:06:90:a3:1d:10:4a:a3:af:6f:7f:3f:a8:fe:
99:c6:5b:fc:70:7b:08:cc:73:8f:8a:d1:47:c2:58:af:35:39:
7a:e0:12:8a:b9:a0:20:a1:f7:c1:00:19:7a:b7:15:99:68:e2:
11:c7:e2:2e:ac:51:83:a3:4a:fe:68:11:33:b3:ba:04:59:cd:
cf:9b:af:78:da:f6:06:83:dc:a3:7b:7a:ca:a2:32:69:ae:bf:
2f:a0:06:e2:43:f6:8f:07:71:6a:04:2e:33:65:d7:fd:3f:5c:
43:b4:89:ae:9a:f2:3e:06:4f:d2:92:4f:77:b2:14:95:4b:e5:
1a:d1:df:f6:84:9b:d8:8b:75:aa:3c:d0:1b:8f:d9:7f:f5:c1:
32:6a:3a:8c:eb:2b:80:48:08:07:9d:a5:e6:47:6f:a4:57:67:
d7:15:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:01 2025 by rpki-client