Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
File: 2jqEPf4emgiI_5tbQWQnRQvWjcE.mft (raw, json)
Hash identifier: M2x8BKxH9wXdBd9n2h4FqPtxRcIyfCk39xkcT14cUuw=
Subject key identifier: 0E:12:95:F3:B8:E7:7C:2F:F5:75:6E:F5:AC:8D:DD:48:03:38:28:45
Authority key identifier: DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
Certificate issuer: /CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Certificate serial: 0194BCAA0F9CEA54B566C5B6384A0C20AB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
Manifest number: 07E1
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 2jqEPf4emgiI_5tbQWQnRQvWjcE.crl (hash: o55cnZG62+L3iwvhUfsXxYIc6OfJqmiEunRguTDXjAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0f:9c:ea:54:b5:66:c5:b6:38:4a:0c:20:ab:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=0e1295f3b8e77c2ff5756ef5ac8ddd4803382845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:f8:54:a3:12:39:69:03:a0:69:66:94:3a:
a8:2f:ac:ae:9c:2f:d7:05:65:4e:10:4b:25:0f:c2:
7c:2d:55:cd:8c:1b:54:42:89:56:5d:03:2f:86:8e:
a6:5a:f8:35:39:54:94:57:47:f4:05:b0:39:22:87:
3e:19:e0:e2:33:a0:3f:8b:6a:52:16:85:c0:d5:14:
78:32:28:3f:6f:d1:80:c7:93:ca:51:8f:20:ce:40:
29:c9:1a:13:dd:a4:6e:bf:ec:b9:70:16:95:d1:22:
27:ca:20:a5:e1:f7:5f:75:54:88:f6:5d:b5:de:18:
76:fa:f2:1d:d9:e8:f9:e3:a1:8a:57:05:39:02:32:
6f:b3:84:83:57:03:73:3e:2b:01:6a:e2:5a:1c:d5:
0a:2f:36:24:3f:31:b4:97:e9:b5:5d:76:f0:cc:fb:
4b:cb:05:9a:e7:19:8f:c0:8f:f5:a8:75:d7:c8:78:
d5:2b:ce:a5:f1:8d:bd:5f:02:db:e8:19:33:36:bf:
71:7a:d6:41:00:ab:34:2f:d5:0d:ef:0c:e4:10:02:
19:67:ae:1e:60:29:cc:7e:10:97:3d:8c:0f:07:f4:
f2:48:ea:c4:da:88:7e:d3:a9:4a:43:41:0f:5f:30:
af:32:4f:38:46:02:3d:87:6f:f9:b4:5c:6b:87:1b:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:12:95:F3:B8:E7:7C:2F:F5:75:6E:F5:AC:8D:DD:48:03:38:28:45
X509v3 Authority Key Identifier:
keyid:DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:34:25:d6:2a:4a:16:cb:6e:e7:47:1f:fa:9b:1f:ca:69:4b:
bf:34:2b:1b:7c:d8:80:2b:6a:d4:55:47:42:82:05:bc:4d:87:
55:a9:46:b5:df:46:07:6c:7b:5c:11:d6:99:ae:2d:5a:e1:23:
40:ae:d0:4c:0f:b3:8c:d7:cb:7e:55:c7:86:63:7c:c7:ab:c4:
90:95:55:f6:69:36:44:77:21:9c:5b:87:31:50:e4:d8:2d:1f:
64:32:75:74:a3:6d:7f:7a:0e:26:b2:d0:4a:f5:3e:be:db:17:
de:2e:59:3e:94:c2:93:e6:47:17:83:08:12:77:fa:1e:c1:00:
c8:2f:ea:90:af:24:ec:fe:89:f9:ab:85:85:9c:f6:fd:60:b7:
94:cd:32:e9:e7:16:d5:20:e6:10:20:b7:59:fa:91:52:43:f3:
88:24:4f:09:b0:f2:7b:c9:d1:da:d8:91:ca:74:8c:c8:d5:31:
88:e7:63:73:51:ec:e9:df:41:5e:d1:6a:5e:00:b0:5f:fd:5e:
43:43:84:94:bb:19:64:1f:63:e6:43:11:fc:14:3a:5d:23:0a:
4c:d8:a5:08:87:89:a1:aa:7e:80:86:cb:f4:88:f7:c0:92:8d:
bc:1d:88:80:17:e1:ab:eb:c2:43:b8:32:92:bd:b6:e1:4c:c8:
7e:01:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:07:47 2025 by rpki-client