Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: 2ovS/jfWCy2IfUFeVqYqP5L93p7/rk6RfpVSjy83V8E=
Subject key identifier: AC:3C:00:E0:05:A2:C0:87:71:57:69:24:13:2C:01:4D:5D:48:A6:9B
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 0194BBCF0361CA106C04FE132694AF487F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0925
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: S4pOTcZdGfUaNhzTelL+FRS9T9Q8k5NUwJVCkMmFsNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:61:ca:10:6c:04:fe:13:26:94:af:48:7f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=ac3c00e005a2c08771576924132c014d5d48a69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:e8:17:97:75:5a:83:aa:fe:18:4b:89:1c:
f7:de:5c:3e:0d:aa:9f:e8:29:e1:49:2c:1c:1e:e0:
75:30:e9:62:52:4b:fa:ee:78:f7:00:9b:4a:29:b6:
fc:b5:9a:bd:f0:4b:7d:b4:59:b6:fd:31:34:a3:cc:
65:61:fd:84:25:24:48:5d:e5:39:29:86:9c:a4:87:
0b:f5:12:8b:30:43:61:5d:a3:d7:d3:65:c0:ae:31:
35:1c:ba:3d:42:ea:01:61:b0:f6:b2:a1:6e:4f:20:
d3:e0:69:ad:29:ed:7d:1d:f9:eb:e3:43:9e:42:4f:
9c:56:b2:76:81:b4:97:16:6d:60:d9:54:e2:35:3f:
70:4b:26:88:6f:b7:f7:38:2f:5a:ab:eb:44:da:19:
d9:6e:af:2e:e0:fc:ca:b0:80:f9:f5:c8:0b:25:03:
46:c8:db:11:0b:c8:49:c9:e7:fe:60:63:00:96:7e:
2c:fd:7a:c9:2d:52:f8:58:47:c7:43:f7:29:c9:a7:
38:b7:ec:73:ff:16:e8:ee:e6:8a:bb:d0:5b:f6:5f:
72:8b:78:30:85:6c:22:8b:cc:29:95:b2:8a:37:6a:
be:52:00:29:65:0f:8b:2a:a9:24:ff:4c:75:30:0e:
76:8c:64:09:59:23:e3:68:8a:9e:6d:cb:25:ba:df:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:00:E0:05:A2:C0:87:71:57:69:24:13:2C:01:4D:5D:48:A6:9B
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:82:55:20:ea:44:29:3d:e8:43:ec:f2:85:83:97:31:ea:6a:
f8:6a:cd:5e:71:2c:63:af:6e:57:59:9b:ef:6c:f6:54:af:07:
d8:72:c2:3a:13:a0:c7:47:de:0c:22:d9:da:eb:9f:81:14:66:
76:f3:9f:0c:b3:0a:bd:28:60:9b:34:7e:91:71:8c:54:0e:d5:
2d:1c:2e:0b:09:74:01:15:dd:84:40:20:01:ba:94:43:72:05:
8a:e5:db:d8:f4:ec:8c:de:ff:bf:ec:87:45:6c:6c:34:85:2d:
61:c0:dd:a7:6c:0a:42:44:8a:ed:bf:ed:b3:e0:0b:37:be:ce:
17:83:2c:a4:6e:86:9a:b5:d0:4d:4b:7e:bf:93:8e:54:fa:33:
d7:ca:e7:3d:d3:f3:71:ee:cd:7d:e6:ee:44:58:c3:14:22:3e:
05:01:b6:54:f1:60:60:a0:86:90:52:ea:e9:b9:55:6b:69:81:
f2:0a:ac:56:ca:00:c6:74:65:1e:b9:24:cc:5a:15:e7:d7:6c:
ab:71:a3:b4:06:64:83:eb:eb:5a:e8:47:cf:7f:29:16:fb:50:
e9:72:d9:d0:7c:2b:dd:65:60:e7:29:2a:dc:e3:00:40:79:ca:
35:12:71:6a:23:a2:b0:ca:be:ec:ec:71:b6:f3:aa:c2:65:92:
20:bc:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:47 2025 by rpki-client