Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
File: 2o2nRADHVVq6J8Eon7-5CzO3miI.mft (raw, json)
Hash identifier: 28v4YTS+9W6fxCUJ/AGR6SmtK2XncyWUGkr6WgyXTr4=
Subject key identifier: 5C:28:53:4D:86:D6:59:77:D7:73:33:87:25:71:6B:D9:7B:70:60:54
Authority key identifier: DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
Certificate issuer: /CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Certificate serial: 0194BC3BC054681617EB5F30AC43F83DE2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
Manifest number: 12B7
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: 2o2nRADHVVq6J8Eon7-5CzO3miI.crl (hash: 3ruKeDiYycE9wVLKGJvLhycHg+S9Rng4YrBKhatrJFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c0:54:68:16:17:eb:5f:30:ac:43:f8:3d:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=5c28534d86d65977d773338725716bd97b706054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:a3:4d:32:23:6e:c5:f7:d7:6a:4c:e4:27:
d2:bf:fa:7b:fd:38:70:9b:b5:2a:34:1b:d0:6e:47:
42:82:5d:77:a9:74:a2:f8:f2:ce:6b:92:b6:37:b5:
79:db:a7:23:31:39:23:dd:a9:b8:87:62:8a:94:4d:
00:2c:96:c4:92:fd:63:0a:a8:34:c4:28:0d:81:b9:
67:71:7d:2f:e1:1e:c2:5e:dd:e8:b1:bb:bf:d0:f2:
7e:a0:d6:bf:d9:5e:e3:d7:34:fd:0e:e4:a8:45:03:
c4:ff:ae:64:29:a3:7b:5e:0b:c1:29:08:32:64:1b:
7e:2e:eb:42:d7:fb:c5:d0:2a:0a:04:f5:38:94:d2:
6c:6b:5f:54:ca:f9:b7:24:1d:40:d4:36:5e:d2:60:
70:28:40:27:57:ba:d6:32:49:bc:7c:31:91:ca:e0:
9c:cb:6b:4b:c9:15:df:42:84:1a:31:a5:b9:1e:14:
56:77:e7:4e:4c:91:5e:aa:0c:6b:9c:cc:b6:39:fe:
ec:e5:0e:31:bc:5f:fb:ea:38:b0:e1:01:4b:d8:90:
e9:b2:ce:ef:62:4d:fd:dd:ca:f3:73:75:a2:31:dc:
10:19:3e:ba:31:de:c3:79:50:be:89:dd:08:79:15:
ea:e6:47:4e:86:36:06:6f:fc:b9:37:64:22:2f:0c:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:28:53:4D:86:D6:59:77:D7:73:33:87:25:71:6B:D9:7B:70:60:54
X509v3 Authority Key Identifier:
keyid:DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0c:06:7e:5e:a7:f3:2b:1e:71:5c:83:b2:6a:b0:67:e1:c9:
02:de:8f:d0:76:66:d7:f7:e5:48:7f:2d:aa:0e:01:ea:25:69:
49:49:26:14:37:e6:8b:f2:14:48:d2:a8:70:d2:05:b0:30:c3:
71:c5:b7:66:e7:d7:93:a2:7e:77:c8:f7:04:cd:e5:26:9f:e5:
7a:d4:bc:b1:39:4c:da:3d:a0:54:13:50:67:2d:b4:e3:92:75:
3e:68:9f:43:73:c7:76:f6:c8:1c:ee:47:db:d6:b7:2a:f2:b8:
e3:3f:61:bf:0d:78:8b:60:d5:07:91:f9:76:ca:a7:66:9e:f8:
2f:3f:bf:52:38:22:a8:9d:2f:25:39:dd:6a:8c:c4:23:4e:42:
5b:07:67:ea:b5:b0:4a:9e:b0:fb:06:20:6c:25:3e:b8:a8:6b:
62:a7:76:44:8c:95:03:49:59:b6:4a:67:d2:06:fe:ba:d1:2f:
9e:dd:cc:5a:7e:db:85:2d:f3:c2:3f:fa:74:32:af:a6:7f:43:
23:ca:88:44:2a:9e:e2:fc:a1:8f:2c:a2:be:6d:df:dd:a8:1c:
fd:16:5a:3d:f8:bd:0c:5d:9b:59:79:ca:7f:46:72:56:56:10:
f9:c8:72:35:53:28:1f:c9:29:3c:f2:ee:f9:36:7c:28:3c:2b:
c0:a6:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:18 2025 by rpki-client