Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: FiRHtvzefTDEgqYY8k06vxTQoi7fuLJO2sEvuaBjuZY=
Subject key identifier: 9D:1D:BB:33:74:B6:60:6F:C3:37:45:32:FB:05:6F:90:A5:77:3D:0C
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 0194BC3C3FC388122C0AAA2D0B42F01EA2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: YfFs2yuxusjXV+QNBYPXKuG7qmFVyCkOs5akVDhDyCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3f:c3:88:12:2c:0a:aa:2d:0b:42:f0:1e:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=9d1dbb3374b6606fc3374532fb056f90a5773d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:27:5a:ba:46:89:13:08:44:68:8b:a1:85:
27:0f:bb:ea:61:1b:c0:8e:4b:1e:d5:eb:5c:03:46:
c5:6d:6a:4d:83:fa:b8:d6:91:52:92:b4:ee:e7:1a:
cc:06:33:d3:08:e6:8f:9d:21:15:de:7d:6d:41:ba:
76:82:70:41:2c:5e:95:c0:65:d5:a8:bb:28:53:ff:
c7:e2:6c:47:46:2f:ee:88:5f:43:86:9f:33:a1:c6:
e4:bb:90:39:7e:39:c0:d4:80:fd:6c:9a:63:1c:96:
18:9d:42:76:d7:0c:83:01:b9:93:2f:37:37:e1:10:
bb:ec:a1:7c:23:29:fc:1c:94:ec:59:93:89:12:dd:
50:fe:82:b9:ab:72:a8:b3:21:fa:24:db:e2:9a:6e:
77:11:85:10:81:20:d3:9b:a2:b7:1d:2d:b5:ac:0e:
17:d7:a2:a3:cb:70:bc:b6:72:45:3e:83:ad:e8:e6:
ee:39:e6:96:fb:5f:f3:bd:a0:17:00:6c:7f:89:88:
62:ba:0b:b3:0f:67:b9:c8:99:58:63:03:88:f8:32:
6d:4b:bf:a0:76:69:70:8f:14:30:c6:92:72:20:f2:
33:e4:fb:de:a0:3a:76:24:89:ca:ea:e4:20:81:6d:
44:8f:92:52:e6:a4:fb:d8:9b:b5:db:7e:32:e7:db:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1D:BB:33:74:B6:60:6F:C3:37:45:32:FB:05:6F:90:A5:77:3D:0C
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:74:12:78:67:a0:fd:4b:e0:89:c6:3f:f1:a4:14:15:10:0f:
b5:1b:a4:ec:ee:fd:b8:e9:41:7e:45:4a:88:5f:04:89:55:8f:
51:fb:3c:dd:db:67:1f:4d:8c:c7:b4:e3:a7:cd:80:e9:2b:65:
66:2e:e8:36:a7:1d:b1:2f:7e:d9:56:37:67:f6:35:44:12:5b:
2a:48:cb:fe:d3:fb:0d:d3:ff:17:e7:85:3c:14:0d:be:0b:c6:
dc:eb:a1:52:93:a5:d9:bf:8c:20:2a:69:6c:45:5d:63:f7:e3:
4c:f6:dd:bd:0e:21:13:d0:19:8a:0c:5b:cb:02:14:2b:17:1e:
9a:d8:88:39:23:5b:f2:fc:2f:a6:77:94:d4:a7:b6:e7:d4:2f:
03:77:7d:12:cb:87:9a:2b:2d:78:d1:8c:85:36:7e:22:cf:8f:
dd:ba:cb:7d:9b:a2:26:4e:30:a3:b5:96:7e:29:af:01:1b:8d:
48:64:81:ff:25:fe:64:96:df:4c:26:a7:5d:9d:81:7b:9b:c7:
7e:5d:f2:95:64:cd:26:61:ca:0e:9c:45:51:a8:15:81:7b:a4:
5c:c1:84:17:53:74:18:75:0b:c2:28:91:8b:f2:39:4c:06:2c:
9e:46:8e:24:66:58:51:80:1c:f6:24:51:56:66:3e:e9:7f:62:
1a:39:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:04 2025 by rpki-client