Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
File: 2xqlqI_mUM51-73mL66AzGIz3Ms.mft (raw, json)
Hash identifier: XaB9QgJ3Px8JcqsQEtyFzAlvVP/JlNOX5Wau1PfNaLQ=
Subject key identifier: 42:57:F8:A7:54:7A:6C:D9:E6:6D:51:BE:D3:C9:BF:40:37:BC:2B:3A
Authority key identifier: DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
Certificate issuer: /CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Certificate serial: 0194BBCEDAE90107A10C8E7B7ED0FA61B1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
Manifest number: 0D2F
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 2xqlqI_mUM51-73mL66AzGIz3Ms.crl (hash: S7l1Lab1+ebkvhgKim6Wt6UWOJj6ihL3xbFQuuS+qb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:e9:01:07:a1:0c:8e:7b:7e:d0:fa:61:b1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=4257f8a7547a6cd9e66d51bed3c9bf4037bc2b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:19:87:ca:fe:c3:7c:8c:ae:56:c6:3c:15:
33:f8:3d:70:33:80:50:dd:15:19:33:4d:9b:b6:d1:
c2:68:b9:ef:f3:73:5b:fa:08:79:e1:63:0a:0e:8f:
a2:d0:eb:5d:89:c5:b5:86:ba:fc:9f:38:e5:3f:99:
1f:49:84:35:cc:a6:1d:1e:ec:98:97:59:d2:b8:a8:
21:c9:5f:c1:92:36:66:85:4a:2e:b5:8a:e2:6c:fd:
ad:d8:45:5c:7a:cc:d6:33:d8:55:65:49:f4:d5:16:
a3:f6:cb:d9:0a:ba:48:25:45:01:ae:3b:7a:7f:c6:
85:ab:04:92:d9:7d:25:76:4b:17:35:c0:1c:fd:95:
e8:14:ac:7f:c0:53:db:a2:99:a5:bf:69:cf:bd:19:
75:12:3d:9d:b6:94:b7:e0:e2:8b:32:2b:f9:76:4d:
20:d2:b6:46:1c:d5:1b:7c:f3:5d:c6:a9:d6:33:e8:
d7:cc:18:4c:24:d2:59:97:24:96:6b:37:f0:ec:8c:
f5:e0:f6:92:a6:25:8a:70:b8:04:eb:85:a0:60:5f:
11:e1:42:3a:63:bb:6a:9e:a8:e5:d2:a4:30:d8:d7:
34:4e:52:7d:16:ef:4c:29:53:55:5f:e3:95:5d:39:
10:a3:b1:74:d1:5f:1d:4f:62:27:3f:c1:f7:fa:1c:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:57:F8:A7:54:7A:6C:D9:E6:6D:51:BE:D3:C9:BF:40:37:BC:2B:3A
X509v3 Authority Key Identifier:
keyid:DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:71:76:6a:91:14:91:fe:81:56:8b:7b:61:25:ab:34:ea:2a:
25:49:9e:25:7d:89:64:21:14:d3:65:5f:29:bd:7f:37:06:83:
ec:d3:bd:f5:ab:e4:ce:1c:32:a5:53:e0:6e:e1:0a:eb:fa:99:
27:88:d0:d6:9d:8b:eb:00:aa:ef:0f:da:6c:e6:b4:b9:62:f8:
76:8f:a7:0a:54:01:41:53:50:34:85:21:15:8f:6b:5a:c7:40:
93:79:e6:ce:20:bd:3f:b0:53:0e:45:f5:39:11:b1:01:ee:30:
99:c0:20:c4:63:42:e1:16:3d:cb:94:9a:0e:48:69:9e:74:d4:
cd:3a:5c:2a:cd:40:3e:20:07:ee:6a:26:d7:94:bc:fc:77:36:
5f:91:f7:74:08:69:bf:50:9c:78:47:7e:09:f9:43:37:4e:64:
52:3e:6b:58:b4:43:cd:69:f7:9d:15:22:f8:c6:7e:c6:db:d7:
9f:6d:91:38:a5:1b:d1:01:af:64:af:5e:28:af:d2:79:04:a0:
af:34:82:64:8e:44:5e:e2:3c:ac:20:ce:f6:2d:d3:8d:57:c7:
27:fa:41:bf:56:03:6f:10:7e:58:87:90:30:28:b5:dd:5d:8e:
ca:c4:da:f3:4e:e4:ce:86:23:99:a8:a5:7d:65:2c:78:cf:49:
2f:dc:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:08 2025 by rpki-client