Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: zarxQxtgU7xBsAI/d3WJhmFxpVsqWYx+pUCiKQuWoS4=
Subject key identifier: 44:9B:8E:E0:14:65:C4:FC:37:EE:94:0A:A9:84:D8:04:F7:E3:64:DF
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 0194BC7310031C8FABA5EAE5A5BB4BCD72F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: y4+zWJQY6oydqOlNk3ueFXz/fKkhnaMaAGBMBbPKyK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:03:1c:8f:ab:a5:ea:e5:a5:bb:4b:cd:72:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=449b8ee01465c4fc37ee940aa984d804f7e364df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:f0:7e:77:19:0b:6b:34:5a:e3:9c:54:90:
6c:cc:fe:98:6c:51:fe:a3:9a:f9:3b:8b:00:71:ce:
60:1b:a0:25:52:b6:74:ab:f2:df:de:69:12:2c:3c:
1d:ea:32:4e:48:ff:14:01:eb:fb:6f:1d:63:b5:df:
90:95:c2:a6:a4:5e:39:33:d4:b0:90:e5:8d:82:3d:
82:2f:0e:e0:db:27:f1:8d:75:32:48:f0:27:6d:e9:
7c:6c:da:3c:1b:4e:4a:74:69:1b:01:a5:5c:fa:81:
47:79:92:96:da:93:57:fa:58:69:c2:c6:90:13:7a:
41:b2:eb:23:ed:5a:fd:76:36:1d:22:84:21:f2:82:
e7:a7:0b:df:89:ee:8a:9f:41:2c:2f:10:e0:07:60:
65:6f:a1:ff:2f:5f:f3:0e:8b:cd:cb:d6:97:af:3a:
cc:67:a3:58:c7:66:0a:c7:e3:26:10:6e:4c:c1:16:
cc:15:3f:5a:6f:81:3a:25:1a:f9:5b:2b:0e:f6:bc:
7f:1f:7e:fd:5f:c9:7c:96:c6:4d:c8:81:53:ca:6a:
b5:f7:ad:b9:68:e8:d1:7f:20:b9:3e:05:07:bf:93:
cd:7c:12:6a:1c:36:5a:dd:00:0d:49:ee:22:25:60:
a9:2f:30:02:8f:49:6a:2f:b6:67:45:14:8b:8b:62:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:8E:E0:14:65:C4:FC:37:EE:94:0A:A9:84:D8:04:F7:E3:64:DF
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8a:cc:c5:00:53:d6:a3:ad:fa:ce:a7:05:02:0d:39:70:5a:
99:f1:9d:bc:18:b8:22:53:f1:73:63:c3:7c:2f:91:ed:76:48:
a3:85:36:18:5f:7d:b8:19:81:ff:f4:89:0a:80:2c:e8:eb:63:
7a:9f:00:2f:f1:47:cb:ec:00:3d:6b:cd:5b:8a:69:92:0b:11:
db:b4:7d:f0:2c:ea:28:ce:a0:90:a3:81:25:da:1a:9f:0e:e9:
0d:47:29:a2:fd:96:d4:f0:d6:68:a1:ed:bf:3b:ad:d7:d1:64:
2c:e0:d3:83:13:b6:7f:a6:aa:01:92:e1:4a:97:76:4c:d8:1b:
91:4d:4a:7b:b6:33:ac:91:6a:9c:b1:27:61:dd:5e:22:95:e0:
13:47:68:db:72:98:a2:c4:4e:88:26:3c:ae:4a:47:72:d9:37:
c5:0e:83:bb:87:4d:50:a2:b5:01:c0:38:76:0a:66:73:45:12:
93:85:04:c1:6f:08:bd:e0:e9:a2:6b:cf:ce:b9:ff:21:db:68:
9f:88:9f:a2:36:b6:20:a6:c7:f2:15:f7:57:23:2e:47:0e:f6:
cd:71:d5:ac:ff:60:97:38:ab:cb:c9:ba:11:4a:09:61:77:c2:
3f:e3:30:1b:ae:9c:a6:53:2f:8d:f7:ce:88:30:ca:64:59:4b:
74:52:ae:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:11:00 2025 by rpki-client