Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
File: 2f2qHAH51r-3yaAN4AlCpGY2A2U.mft (raw, json)
Hash identifier: tcHx22U04Zwc0mr2rwBHLhDvV9tWC/ecbPpnLilQhGQ=
Subject key identifier: F9:6D:54:85:6B:9A:C5:A5:F3:18:D4:63:A0:F8:71:99:1F:D9:5F:5C
Authority key identifier: D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65
Certificate issuer: /CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
Certificate serial: 0194BBCED5F6F26EDE51B8EC4D24D8349083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
Manifest number: 08B1
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: 2f2qHAH51r-3yaAN4AlCpGY2A2U.crl (hash: 2t9codGwK2yukwxiLHFYrJqm6pxs4sPLRf6BTA2+MAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d5:f6:f2:6e:de:51:b8:ec:4d:24:d8:34:90:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=f96d54856b9ac5a5f318d463a0f871991fd95f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:fa:a6:bf:aa:45:1f:18:33:42:60:bd:fa:
c9:d9:63:be:2c:c0:42:11:6f:01:f2:b4:30:e9:1d:
38:ed:b7:93:9e:f8:1d:b3:bb:ed:8c:e4:4b:c6:29:
ec:d5:a8:4a:5a:7f:7c:ad:95:7e:39:23:9f:da:9f:
3f:32:49:8b:c4:f2:5e:a8:fe:9b:fc:3e:13:c9:33:
aa:8c:e9:53:ce:ab:52:e0:47:27:e5:47:06:d2:e9:
cb:02:bc:b7:65:69:8b:8e:04:0e:a7:f4:8b:25:ea:
5e:ab:96:0b:8f:8f:f0:2a:c4:95:f5:2c:c0:8a:e8:
fc:97:45:0d:7e:ca:40:92:9a:98:e2:dd:11:eb:31:
e6:34:ae:80:4a:bd:30:1e:cd:32:26:3a:15:b4:4b:
c7:72:fe:41:53:6e:c3:6a:a0:56:4c:95:16:24:ca:
f3:4e:b1:08:e8:c2:62:05:36:8c:bd:a2:cb:de:da:
85:4f:53:f0:2f:76:6b:cc:38:04:9c:29:01:a1:84:
44:d5:8d:f0:86:a8:08:fb:83:59:07:f2:4e:b4:55:
6c:81:3a:40:0b:16:34:fe:74:39:ad:dc:4b:81:84:
49:27:33:a3:f8:d8:0d:b9:e6:eb:24:58:d8:d5:ff:
45:f5:76:82:bc:c0:56:42:a7:a0:3c:b2:6a:dd:93:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:54:85:6B:9A:C5:A5:F3:18:D4:63:A0:F8:71:99:1F:D9:5F:5C
X509v3 Authority Key Identifier:
keyid:D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:87:1a:75:0a:7a:a5:39:cd:3d:2d:67:57:d9:cc:d6:17:d1:
35:9e:2e:37:2f:3f:03:0c:45:4d:e7:9e:1b:c7:3f:6b:16:cf:
74:87:21:98:fa:77:93:df:13:45:cf:82:f1:ac:e2:96:8c:91:
a9:87:f3:b1:c4:92:79:39:ad:52:e5:3b:98:49:6d:09:85:96:
d1:f7:6b:6b:e7:95:14:3e:14:9d:cc:08:62:8a:9b:82:14:e5:
92:44:32:4a:67:66:56:ed:28:41:9e:70:25:54:82:6c:77:83:
c2:99:2a:59:34:00:70:a3:39:7a:63:49:ef:d1:6c:28:d5:d5:
44:8a:75:6d:37:b3:b2:70:5d:92:28:82:74:fe:ff:f5:1d:e6:
70:9e:fc:b2:c3:b8:05:4c:19:bf:8a:40:9e:31:07:b8:fa:0f:
c9:6b:3a:9d:4b:87:61:72:7e:a6:43:06:ae:87:5e:96:d0:92:
31:63:d9:d4:e8:b0:75:b3:a6:cf:05:84:b6:67:03:36:21:4a:
42:aa:da:82:54:6b:79:11:c3:7f:b7:c0:aa:78:a4:4a:a6:28:
6a:ed:9a:8c:66:86:40:88:e8:ae:94:71:2f:67:92:f2:80:58:
0f:3d:fb:4f:a7:e8:9e:9e:6c:c7:87:b1:82:c8:de:46:1b:58:
0e:ac:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:31 2025 by rpki-client