Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
File: 2gKPaUMDSrdg84rkIJFU4iVciek.mft (raw, json)
Hash identifier: k4y8ou6n/wLdXfA3CzoltYCPHmGT7YN6ffXCLdUV8mM=
Subject key identifier: 3B:7E:C7:AA:EA:88:31:94:2F:7A:97:8F:33:76:19:C6:DA:BD:A3:6D
Authority key identifier: DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
Certificate issuer: /CN=da028f6943034ab760f38ae4209154e2255c89e9
Certificate serial: 0194BD178F0A3AB25CD0CFCFD7929B0C75D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
Manifest number: 038B
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 2gKPaUMDSrdg84rkIJFU4iVciek.crl (hash: hbB+S4CiIvfmqPGbqZ3EZzoIj7lO57tqsS0/HPzwCOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:0a:3a:b2:5c:d0:cf:cf:d7:92:9b:0c:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da028f6943034ab760f38ae4209154e2255c89e9
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=3b7ec7aaea8831942f7a978f337619c6dabda36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:58:a2:58:c1:95:46:6c:5f:30:62:1e:26:
9b:a5:0f:8a:f6:02:96:b4:96:2c:1b:60:f5:0c:cb:
ab:47:2b:8f:f7:58:82:ab:f0:01:21:8d:8a:ff:e7:
fa:aa:ef:da:40:77:f5:7a:54:ff:29:36:c2:bd:5f:
30:0d:e1:1b:b1:c3:4c:75:da:26:80:05:d0:e1:bf:
47:e7:94:8e:c5:f3:ed:60:fe:dd:90:6a:af:fd:cb:
bc:00:bd:38:6b:92:18:a2:4a:96:49:7f:54:71:59:
2b:41:97:0b:0a:44:85:24:28:29:ee:73:8c:49:7d:
17:81:3d:1c:78:a2:2f:7e:aa:e0:fe:44:b7:ae:d1:
51:56:bd:bc:77:37:70:8e:15:d5:cb:58:c9:6f:e4:
89:16:b4:9d:3b:93:1d:e9:fe:fa:ee:2e:d2:d6:6e:
68:04:6a:43:77:44:6c:be:d2:98:28:40:17:32:bf:
48:76:eb:b3:02:b4:ee:f5:d1:36:e4:29:b6:10:a8:
45:06:e0:ff:62:14:d2:8d:8b:cb:f5:84:f3:69:66:
ee:04:a3:8a:70:42:97:d3:c4:a5:b5:8d:c4:7a:a7:
0b:55:9a:3a:a4:ef:d1:c6:b9:5c:9a:70:c3:48:95:
ab:1b:1d:e0:94:71:f2:5f:be:c4:50:46:bc:4d:0c:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:C7:AA:EA:88:31:94:2F:7A:97:8F:33:76:19:C6:DA:BD:A3:6D
X509v3 Authority Key Identifier:
keyid:DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:91:05:3b:6f:5e:ce:60:10:3b:9c:9c:a4:9b:ba:e8:bf:d5:
eb:c6:6f:0d:ba:85:1a:62:d6:7f:f8:a5:52:81:ff:28:20:65:
94:bc:11:fe:01:46:9d:45:0c:2e:96:93:71:f6:f7:86:4a:0d:
45:e5:b3:79:85:44:25:79:0a:35:79:08:18:99:b9:84:a6:78:
11:ac:d0:af:ae:a7:45:6a:ff:e0:34:7c:ed:58:b2:bc:36:b8:
4f:98:bc:a7:15:30:4f:ba:7c:48:fc:ae:7a:12:80:b0:a1:12:
2d:e4:94:29:fc:01:c5:2f:1e:4c:03:9d:a7:c2:a8:a3:d1:33:
e7:a3:d5:c5:96:3a:08:ee:98:9c:0b:0f:8a:a5:3d:2c:24:f7:
34:ec:0d:b0:02:32:a3:ea:d2:95:eb:92:6a:44:97:9b:9e:e8:
b3:2d:70:cb:6c:d3:80:5f:37:f9:6c:a6:6c:7f:41:c5:b6:34:
f3:b3:d3:e5:20:fd:42:7d:40:93:86:62:b3:23:19:f5:95:2d:
8c:0d:f4:03:e5:a3:cb:36:50:bf:ce:d7:73:10:51:b1:24:2f:
39:72:f5:99:c6:49:b5:71:1b:a2:8f:07:a5:43:1a:34:e9:9a:
b3:86:95:21:83:25:bf:c3:be:d5:b0:95:d5:74:03:87:c0:6d:
85:eb:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:49 2025 by rpki-client