Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: 1Co5lAljQc1wHmwRshCVToGsqNCJETQ5HiQGnB2Hy1Q=
Subject key identifier: 02:CF:80:7D:16:4A:2E:7E:D1:A4:6B:AB:A1:76:15:8E:F1:28:14:E4
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 0194BD17C09F7F2E5D36DF383F31B0E2D497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 0EF6
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: pCaFmnEXm2ZY6A5zmK/VHkA/pjiInl/44uCCFQeGB4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c0:9f:7f:2e:5d:36:df:38:3f:31:b0:e2:d4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=02cf807d164a2e7ed1a46baba176158ef12814e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:06:54:09:27:3b:33:61:28:41:a1:d8:ce:
c5:0a:85:3e:62:e3:63:33:05:40:b0:80:30:14:af:
80:3c:d4:75:92:f7:ea:08:9d:46:ef:c4:a2:6a:29:
37:66:5c:4f:9e:9a:fa:f6:9c:0c:ae:da:83:67:a8:
38:a4:1f:4e:38:61:6f:c7:9e:37:85:dc:a3:f3:e0:
a8:d2:e6:48:fc:09:10:71:58:5d:4b:ce:1e:0b:e2:
b6:c0:ef:9e:41:d9:1a:9d:12:b9:84:09:40:7e:b6:
5a:7d:32:07:d8:df:3d:9f:81:e6:8f:87:ab:d1:cd:
e5:cc:55:d5:b9:5f:4a:95:67:8d:7c:78:e2:07:1e:
ee:0a:de:42:39:8b:30:1a:25:5b:d7:01:54:71:17:
76:eb:78:b2:ea:e5:82:46:b4:38:83:a4:74:d0:1d:
7b:a0:64:3f:89:af:d6:ac:a3:1e:87:ed:b2:5c:33:
f3:ca:54:1e:00:51:73:bc:cf:13:98:d5:bd:8a:55:
f1:9c:9f:8c:c7:41:c2:e3:ea:1d:50:a3:38:81:fa:
df:fe:fe:9b:b3:03:f6:6b:81:57:47:c7:17:b2:37:
3e:37:66:05:fc:95:64:6b:9f:b1:44:a4:bd:ac:06:
78:1b:89:51:15:86:ca:03:9d:af:84:95:e2:d3:ef:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:80:7D:16:4A:2E:7E:D1:A4:6B:AB:A1:76:15:8E:F1:28:14:E4
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:0b:99:e5:5a:1a:f0:b4:cc:a4:19:26:54:b9:92:54:40:
b9:05:ab:35:13:e7:8e:4a:69:e3:41:9b:a1:b4:c0:08:48:18:
78:72:80:f5:2c:03:3b:71:9b:1a:b1:9d:c8:d6:6e:9e:78:26:
97:f2:83:f6:57:18:25:3c:5d:4f:8f:74:58:17:0b:0b:cc:b6:
f8:d0:62:4b:e6:0e:11:74:d8:a4:b4:a2:e6:d7:96:aa:09:0a:
5e:a2:dd:3d:06:dd:da:84:1a:ec:01:8d:de:4a:36:ed:0e:e4:
fa:fb:c7:3e:15:60:a1:cf:03:f4:a6:81:bb:98:2a:e0:c3:a5:
65:bc:71:20:21:28:68:f3:22:a5:bb:f5:19:cd:25:a9:38:4d:
38:cd:f0:9d:8e:54:4f:b4:29:6b:43:e7:16:88:53:ff:0d:5e:
b1:2e:c1:f4:70:c1:38:8f:7b:06:75:71:53:76:4c:0c:95:ab:
fb:c1:8f:4c:58:6c:9a:dd:67:53:98:d4:21:2f:59:40:c1:6c:
f8:54:fa:5c:9d:29:51:27:a8:57:85:dd:fd:31:98:f2:9f:41:
74:ce:d2:d9:06:ee:8c:7d:79:7a:4b:7c:46:2e:69:e9:f3:1d:
51:7c:3b:4a:17:d5:56:5e:21:0d:76:7b:87:57:29:2d:8f:2b:
a0:0e:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:56:56 2025 by rpki-client