Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: gL82jrFxt7sZ9oQkx9ATrPAKn66StejzcvU/C1BbJ8U=
Subject key identifier: 62:82:BF:1F:7B:89:6E:E0:5D:55:9A:5D:40:0F:98:C9:CD:52:24:C0
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 0194BC3C576C33C1A51094D2650D8DC2EC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 0462
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: BJjf/F/TfYrR74DjIYXK3h+vBuCLx6jyRegrpHj3k/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:57:6c:33:c1:a5:10:94:d2:65:0d:8d:c2:ec:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=6282bf1f7b896ee05d559a5d400f98c9cd5224c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:d7:eb:54:4b:ba:8d:d9:6d:d7:74:6c:df:
94:97:21:62:53:7c:82:86:e7:f2:6d:e2:16:64:cc:
e0:38:75:2b:bb:33:5b:ed:9d:34:0f:fe:6b:be:fb:
a8:a3:be:e8:d6:5f:b8:59:4d:d3:bc:14:e9:ee:0d:
a8:b9:fa:69:e0:04:70:83:3c:f9:d5:46:f8:04:36:
00:7d:78:60:3b:6c:a7:3d:5a:fa:70:d1:c9:7f:5d:
e8:f9:e1:2d:66:e9:bf:a1:16:86:ff:c8:e0:d6:ab:
a9:50:0f:8a:a1:06:df:7a:24:50:4c:41:26:f9:36:
24:ff:dc:08:f2:10:c6:c4:94:c9:02:de:9c:a7:f0:
36:a8:f8:af:9b:fb:e2:bd:c9:0d:04:00:61:17:81:
a8:0a:19:63:2d:c7:5b:66:1b:4a:04:a2:da:2a:38:
af:02:dd:f9:86:dd:15:54:ab:a1:40:d3:c5:52:b0:
71:18:79:9e:63:ea:60:f6:7f:9b:84:f6:9d:11:80:
e3:ca:6e:91:93:e1:e1:bc:8b:5d:5f:aa:bd:71:05:
8d:e9:a4:26:01:29:e6:82:cd:de:1f:df:b3:a7:27:
8c:e8:38:86:42:7e:57:56:dc:c1:4e:59:c5:65:c0:
d5:26:94:df:3a:e9:5c:81:c4:84:a8:28:31:e3:c1:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:BF:1F:7B:89:6E:E0:5D:55:9A:5D:40:0F:98:C9:CD:52:24:C0
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:35:2b:33:4e:27:99:2e:27:3b:9f:c4:2a:82:82:26:66:d9:
61:cf:b2:be:06:ba:20:7f:5b:bc:f1:3a:64:d8:0e:ab:71:5f:
6a:e3:0a:e8:fe:e5:09:d9:e9:41:c2:1e:a4:88:fc:e8:be:86:
23:b4:8c:85:bd:5f:6e:76:46:86:02:e1:1f:fb:dd:2c:73:09:
9a:91:8e:fd:20:09:d6:7f:2e:d2:cf:9b:50:ff:0a:12:51:0a:
75:74:ec:af:60:3e:b8:0b:2c:44:f0:11:5a:a6:93:10:df:7a:
f7:a7:c6:e5:9e:79:47:0d:df:d7:eb:34:dd:b1:5f:ba:85:5c:
c7:f4:08:0d:79:d9:ee:b1:ae:89:91:ee:5d:6f:0c:4d:e4:12:
ec:a4:dd:08:5f:ba:c9:c8:f9:e1:73:45:aa:ac:eb:ac:62:43:
55:1e:86:0a:a0:a8:a7:d4:96:02:6a:5b:93:9e:f3:e1:3d:80:
a7:4a:18:c5:27:61:97:a1:04:1d:e1:80:fb:a1:d0:22:6a:a4:
43:c7:19:dd:5a:b4:1e:db:bb:c1:16:dc:82:68:fa:fe:5e:c7:
e7:59:1a:e5:d2:a2:1e:79:fb:47:fa:51:6a:44:76:12:01:1d:
19:3a:42:4a:4a:d6:b6:0f:c2:f7:c7:fa:26:3e:c2:2c:e8:70:
c0:0c:ec:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:01 2025 by rpki-client