Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: 6P/vD8iRwBlVtTHi7fvZO91k08AmBio1Qd/zG6+anA0=
Subject key identifier: A2:5B:23:C2:D1:6D:33:E5:DB:2D:E4:FB:EB:A6:9C:A5:E3:0A:B7:DD
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 0194BD17DBD6F37B10D92B1FF0CCBD453B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: fFY27JewTNMdFlrA1qgS7LiZoDB7sBxhp+mBxWuF1dQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:db:d6:f3:7b:10:d9:2b:1f:f0:cc:bd:45:3b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=a25b23c2d16d33e5db2de4fbeba69ca5e30ab7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:21:21:e7:98:6a:dd:08:6f:eb:3a:22:69:
58:ad:20:17:ad:08:ad:17:17:6a:a5:b1:51:32:c2:
fb:3b:38:ae:fc:97:98:98:45:8f:d7:ea:84:04:be:
54:cd:bf:8c:d4:8d:f7:84:9f:34:32:fe:25:cd:c5:
b5:6d:7d:4e:a2:06:58:48:16:35:71:92:ec:f9:f1:
12:d7:b2:d4:68:bc:c6:a1:e8:2e:01:77:cb:fc:6c:
36:69:21:d4:e8:01:95:5b:ff:3e:f1:a2:18:91:6b:
11:e4:9b:06:ed:03:09:a2:f6:1e:8e:2d:4d:e8:98:
05:2b:0b:d3:80:25:f5:c3:6e:87:ae:3f:38:18:33:
9e:d2:cd:4c:a4:23:9b:d7:1e:b9:cc:77:ee:fe:e8:
84:44:94:e1:a3:28:09:75:05:3d:de:f1:a1:dc:f3:
66:8a:b8:a6:6d:a0:2e:f2:a4:ab:d8:a3:d2:f4:05:
80:d4:89:bc:52:35:20:e9:ed:82:17:24:3d:d8:64:
37:77:0a:04:16:e9:8e:bb:93:98:b3:d3:ab:73:70:
ac:1d:f2:e4:b9:53:c2:a1:2d:61:40:fc:00:75:5f:
d6:54:e7:be:16:63:19:b6:8b:49:0f:44:da:90:72:
dd:49:85:c6:e4:96:fd:4e:b8:7d:5c:8e:f5:6d:77:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:23:C2:D1:6D:33:E5:DB:2D:E4:FB:EB:A6:9C:A5:E3:0A:B7:DD
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:0f:43:44:1a:69:90:40:75:69:2e:41:d2:f1:4a:f9:2f:
81:2b:1e:1c:e0:85:9f:1a:8e:9a:da:cd:c3:1f:80:e2:7c:ba:
3d:77:3b:52:3c:39:9e:f6:5d:5d:15:4b:53:99:c5:65:5a:21:
b9:92:32:7b:57:2e:b5:da:fd:52:da:b6:95:a3:63:37:1c:28:
8a:02:f4:b9:56:1b:92:36:58:18:d7:55:27:2f:aa:4b:1f:be:
91:54:21:de:a1:2f:d7:18:41:7e:99:31:a2:88:1a:98:26:b5:
0b:ad:18:a2:8e:6c:ee:d8:b2:27:ad:d5:11:23:51:5b:d6:15:
b9:1b:37:1c:f2:1e:c3:e3:d6:c3:bf:1a:d5:6f:7d:83:db:0f:
2f:bc:ab:6a:c8:b6:b8:99:f1:07:6d:37:0c:e1:2a:89:49:c6:
66:d3:8a:92:80:8e:ec:79:b6:66:fc:c6:a9:2e:4d:02:d0:89:
97:7d:da:d3:74:0f:99:b2:f8:9f:d3:04:78:56:90:9b:df:32:
6e:66:4e:c8:fe:c7:cc:0f:07:0a:a0:03:64:8b:a1:d2:13:61:
39:ee:d9:94:fe:e2:3b:b9:07:69:9e:55:77:4e:cd:a5:a9:f6:
41:50:d3:89:73:37:cb:64:fd:eb:5b:44:0e:67:6d:34:41:f1:
81:70:eb:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9vW83sQ2Ssf8My9RTsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Y2ZhMGU0NDhhYmUzMGQyNmIwNjY1YTljMjk0ZDI5Yzk3
YjdlYmYwHhcNMjUwMTMxMTYwMDQ0WhcNMjUwMjAxMTYwMDQ0WjAzMTEwLwYDVQQD
EyhhMjViMjNjMmQxNmQzM2U1ZGIyZGU0ZmJlYmE2OWNhNWUzMGFiN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojwhIeeYat0Ib+s6ImlYrSAXrQit
FxdqpbFRMsL7Oziu/JeYmEWP1+qEBL5Uzb+M1I33hJ80Mv4lzcW1bX1OogZYSBY1
cZLs+fES17LUaLzGoeguAXfL/Gw2aSHU6AGVW/8+8aIYkWsR5JsG7QMJovYeji1N
6JgFKwvTgCX1w26Hrj84GDOe0s1MpCOb1x65zHfu/uiERJThoygJdQU93vGh3PNm
irimbaAu8qSr2KPS9AWA1Im8UjUg6e2CFyQ92GQ3dwoEFumOu5OYs9Orc3CsHfLk
uVPCoS1hQPwAdV/WVOe+FmMZtotJD0TakHLdSYXG5Jb9Trh9XI71bXfwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJbI8LRbTPl2y3k++umnKXjCrfdMB8GA1UdIwQY
MBaAFNnPoORIq+MNJrBmWpwpTSnJe36/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDIt
NWRmZGQyNTlkZDFiLzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDItNWRmZGQyNTlkZDFi
LzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhsPQ0Qa
aZBAdWkuQdLxSvkvgSseHOCFnxqOmtrNwx+A4ny6PXc7Ujw5nvZdXRVLU5nFZVoh
uZIye1cutdr9Utq2laNjNxwoigL0uVYbkjZYGNdVJy+qSx++kVQh3qEv1xhBfpkx
oogamCa1C60Yoo5s7tiyJ63VESNRW9YVuRs3HPIew+PWw78a1W99g9sPL7yrasi2
uJnxB203DOEqiUnGZtOKkoCO7Hm2ZvzGqS5NAtCJl33a03QPmbL4n9MEeFaQm98y
bmZOyP7HzA8HCqADZIuh0hNhOe7ZlP7iO7kHaZ5Vd07Npan2QVDTiXM3y2T961tE
DmdtNEHxgXDrXQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:55 2025 by rpki-client