Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: +nwbt1nXdfSB0mbN5cJRVgIQG7LDq2fUZVoM2kD/qMQ=
Subject key identifier: 5F:E6:FF:48:C8:95:B4:85:62:C5:04:B7:44:6A:B7:19:BF:F6:31:13
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 0194BC3C3A7271640B21E72255F2A87337AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: ONOeh4RsVZ+ojTlpoqMK9cSvvT0fO9hufc88pqalhPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3a:72:71:64:0b:21:e7:22:55:f2:a8:73:37:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=5fe6ff48c895b48562c504b7446ab719bff63113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:b9:10:97:f1:7c:5a:ea:f3:0e:7a:20:01:
aa:6f:c5:e3:16:17:f9:4e:9a:68:5d:3f:37:2f:4a:
d5:d8:43:c5:95:f6:c0:1e:fb:6b:80:bb:74:e1:94:
9d:a4:a1:34:5b:c9:96:38:d2:32:01:c2:5f:1c:51:
d3:84:0d:d7:ae:58:73:c6:79:6f:fc:74:1f:42:b7:
2b:d4:a0:e2:ea:7d:24:d9:fe:18:64:fc:f0:fc:af:
db:c1:6b:7d:40:74:61:55:a6:ab:71:2b:9c:53:1d:
79:6e:a4:32:23:f4:c1:b6:e7:50:54:d8:f7:9b:a4:
4f:9f:03:cb:54:e7:0c:9c:f8:46:eb:74:9f:72:dd:
1a:e3:fb:cf:b0:05:ca:44:0f:9a:02:86:e6:dc:cb:
c7:ed:5b:4b:a4:34:a9:c7:d7:8f:c7:70:48:0b:b6:
f6:c1:cd:9a:95:57:ff:c9:91:db:33:e9:30:62:3c:
bd:98:97:37:f5:cc:e5:f9:0d:9c:6f:af:fb:88:c0:
60:ee:a1:0c:fb:56:ca:c9:60:a1:3f:33:f4:fc:1d:
49:8a:a2:c4:e5:31:10:70:e7:57:85:b6:ba:f6:05:
98:a7:e4:97:04:73:e6:b4:12:d2:fa:64:66:3b:d8:
10:3c:86:78:57:fc:5d:d2:b5:ab:5b:ee:ab:91:47:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E6:FF:48:C8:95:B4:85:62:C5:04:B7:44:6A:B7:19:BF:F6:31:13
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ae:f0:cf:88:bb:04:4e:fa:b3:41:27:37:3b:83:9d:25:a6:
a7:61:07:b0:b3:71:79:36:d1:23:e9:b4:dd:c0:93:40:c9:a3:
93:40:1e:b9:66:5b:43:c2:90:00:e8:0a:b5:fb:1d:fe:c9:f2:
f6:9c:87:40:bf:75:c8:88:a5:1a:67:ad:7f:8b:91:25:bc:1d:
cf:26:ad:c6:04:ef:73:97:d7:f8:7c:14:37:d7:b1:a3:71:e4:
7d:31:52:49:d7:e9:cf:06:2d:6b:de:96:4b:93:cf:c6:44:ea:
28:d9:b2:b0:7c:e5:2d:14:77:0f:b1:c3:55:5d:68:41:ee:ab:
13:e2:d2:5f:44:3b:05:3b:35:41:d4:06:7b:ba:d5:09:79:8a:
4a:5c:3e:66:21:62:f5:0a:7b:d8:2e:cd:bb:84:47:c8:d1:13:
64:ce:cb:81:f1:f0:da:09:ca:97:5d:05:6d:08:ac:b5:ee:09:
65:82:de:1c:d5:8e:51:7d:68:7b:29:0f:07:35:4e:75:b7:c4:
6e:6e:16:d0:1d:74:b0:bc:45:c3:d7:44:d1:a2:c7:15:f1:f8:
c0:8b:aa:06:fa:7f:80:17:f9:69:e8:e8:68:6d:93:f0:ea:10:
64:76:f4:cc:f3:13:2e:f6:00:df:9c:ea:81:36:d8:78:25:39:
b9:be:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:40 2025 by rpki-client