Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: v1V+06XY66sYosUyJBtu2xJAcagEG69h8XTXrxjz4Sw=
Subject key identifier: 74:31:6F:9E:19:DA:2B:96:19:07:8C:10:61:E7:37:0C:93:70:72:08
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 0194BBCE4370564A87C317BE806D845C7EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 09D9
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: ZsLQFJs8bkpOfvtYUPA2947N843bdVrybHk4T1ybSu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:43:70:56:4a:87:c3:17:be:80:6d:84:5c:7e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=74316f9e19da2b9619078c1061e7370c93707208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:f7:c2:53:d5:3a:a4:0a:e4:38:f4:f7:45:
de:0e:b6:64:51:7e:f0:5a:1d:bf:2a:43:53:1e:d1:
2e:c1:4f:16:70:e7:76:c3:bf:5c:db:72:91:7f:86:
72:0d:da:2f:f1:bf:e7:e9:74:b1:d0:51:69:e2:9e:
0f:97:3a:ec:27:b4:d5:c8:94:35:72:82:68:1b:51:
41:b0:d7:8c:a5:51:d5:9b:74:bb:fc:28:dd:24:d4:
c3:59:30:ae:ed:71:3a:8f:35:37:5b:fe:98:93:12:
1f:d9:82:24:0a:4c:62:52:a8:cb:0e:55:34:d3:d2:
4f:f6:2f:64:79:f9:2b:57:5f:fb:4e:5b:ea:bd:3f:
08:d5:c9:0a:37:e0:67:9c:ff:41:7e:81:cb:ff:64:
45:be:d2:37:cc:76:f7:ec:f4:d7:d1:e8:15:1a:1c:
ea:20:1c:99:dd:b1:7a:76:67:05:4b:6f:7c:09:76:
b4:8e:40:c6:8a:8b:52:0d:7d:c0:95:0b:7a:9b:e3:
a9:77:f0:f5:e8:a0:45:ad:a8:f1:cb:10:d1:2c:e6:
6f:38:3a:20:5c:17:85:50:86:73:9c:80:9c:8c:ad:
fb:32:32:35:4c:6c:50:4e:ac:ee:4e:df:a2:da:9d:
ec:a9:aa:07:16:0e:f9:4e:02:2c:1d:6f:f5:1b:8c:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:6F:9E:19:DA:2B:96:19:07:8C:10:61:E7:37:0C:93:70:72:08
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b9:8a:30:ae:13:52:38:8a:a5:d1:aa:05:cc:2e:51:d6:4c:
29:c2:89:dd:b5:bc:25:64:d6:24:a8:fb:27:05:ef:4e:d7:b6:
f7:7c:04:c8:e2:05:11:e7:ec:21:f5:6e:b7:f5:07:b8:e3:19:
fe:3c:bf:36:ce:95:3f:40:cc:6d:78:6a:32:b9:ef:c5:80:cf:
56:80:0e:5a:b8:de:cc:0c:2f:5b:08:68:ba:60:34:05:28:62:
41:6b:00:ba:35:d6:ec:32:d0:2d:41:e3:e5:0f:0b:13:14:6a:
46:f4:7e:f7:63:b1:85:18:42:c4:6a:20:b1:17:cf:dd:a2:76:
25:8f:d9:f4:92:13:ae:cf:27:7b:93:35:d2:14:57:10:5a:98:
54:d3:c7:7f:27:50:7a:f0:b4:63:21:9f:1d:14:6e:98:03:d2:
e1:c7:5b:21:d1:3b:0f:e3:91:91:7a:80:9c:c3:bc:87:74:7b:
d5:88:01:d5:1a:f3:69:26:79:b5:4d:e6:7b:85:d8:81:00:9f:
db:97:94:a9:ef:10:1c:f1:41:30:6f:32:43:fb:98:61:a5:32:
60:12:6f:3b:74:ae:fa:22:da:53:f3:ae:8e:c5:d9:bb:b8:1f:
85:79:74:31:f1:ed:0a:6f:83:d7:14:f0:29:ce:68:f1:b3:ac:
0d:fd:15:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:13 2025 by rpki-client