Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
File: 2nGl-6KA1tAY7MOp1-WMPGEeav0.mft (raw, json)
Hash identifier: AOuePwpI4zH5u3FzPOXGYSgU+zEuqPfAfRPUaRT6k7Q=
Subject key identifier: 5A:B3:E2:9F:2A:D4:0A:C4:84:75:FD:90:5E:38:0F:68:D2:70:D8:BB
Authority key identifier: DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
Certificate issuer: /CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Certificate serial: 0194BBCDC08F6E6E9E799A93CBB072561730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: 2nGl-6KA1tAY7MOp1-WMPGEeav0.crl (hash: 2+pWDRnS79L0T9QVR+Axt/rV8PgzE39LebaqEiALAZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:8f:6e:6e:9e:79:9a:93:cb:b0:72:56:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=5ab3e29f2ad40ac48475fd905e380f68d270d8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:60:bb:74:d2:81:0a:ec:52:f4:50:58:34:
cb:4a:f9:da:38:28:80:f1:c7:0b:15:a9:4f:51:e0:
f7:4d:de:90:a8:90:a4:e1:51:b3:62:18:f2:5c:87:
72:c4:7f:d2:a8:ff:f7:0c:1c:95:80:79:6d:3b:a4:
e8:73:22:bd:6d:6c:69:94:55:e4:c1:52:78:f4:1f:
58:21:10:c3:af:4e:4b:73:be:a7:d5:94:1a:07:34:
23:81:3b:df:9d:c5:1f:8c:c9:fd:c7:61:04:c9:7d:
b0:f0:23:f4:95:7c:aa:a0:f0:a1:b3:af:46:12:f4:
f7:53:cb:f3:da:e3:3a:b1:6e:51:5f:a3:f9:d7:c3:
0d:c4:84:5c:e8:da:71:ea:84:46:94:d8:6f:cb:19:
80:f9:a8:a6:f7:66:07:82:48:23:44:33:fd:09:c1:
4a:8c:58:5d:ec:c3:e3:70:30:58:06:5d:26:ee:6a:
8e:8d:cc:df:25:d6:20:f1:7b:49:f7:6f:c4:85:4e:
c2:14:a5:13:d1:c1:0b:94:88:ed:c5:ea:18:d2:96:
33:0d:1f:5c:ce:79:2f:bd:e7:c7:ff:19:22:35:8f:
eb:84:df:5c:b4:5c:dc:d9:db:71:10:5f:89:f1:e8:
5b:f7:59:c6:c1:89:58:6b:0b:98:f0:93:5f:78:e8:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:E2:9F:2A:D4:0A:C4:84:75:FD:90:5E:38:0F:68:D2:70:D8:BB
X509v3 Authority Key Identifier:
keyid:DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:ea:dc:c8:76:c1:e6:a8:85:8a:06:19:8d:1f:00:6a:1e:
f3:a9:89:33:13:d6:c1:03:fc:84:95:50:f9:c0:3d:14:a2:47:
53:36:b4:68:d1:db:34:15:a4:2a:11:ec:48:f5:22:7f:19:65:
f3:0e:81:0e:70:ff:49:08:e1:bd:b8:d9:65:d8:70:89:ac:51:
5c:4c:f8:ed:49:0e:40:47:df:fb:be:ad:ce:70:67:01:2a:f3:
3f:6e:e3:91:6f:16:a8:b0:16:7e:27:55:9c:ef:24:c3:1a:71:
65:ed:a0:a3:ca:fd:72:2e:43:94:28:3d:49:02:84:9e:b6:ae:
c8:3b:56:3b:d2:d9:6e:74:fc:9d:dc:0d:08:a9:f7:bf:00:23:
31:d2:6d:8e:d9:1b:c5:44:a6:6c:19:8a:99:d1:4e:a2:56:e0:
87:ae:d1:05:9a:9e:81:c3:81:c6:97:9b:3b:a4:89:64:78:ac:
bb:0c:15:12:6d:38:93:6a:d2:0d:fb:13:c4:d5:96:2e:61:30:
e9:0b:d8:0b:b9:9a:68:7b:3c:96:68:02:f0:66:e6:ce:1c:e3:
ca:8e:92:6e:e8:7f:7a:7f:b6:36:51:2a:2f:9d:db:3c:5a:f3:
d4:5f:1d:cb:ff:f1:e2:37:fa:2f:40:ef:ca:78:07:ed:72:57:
5e:ff:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:25 2025 by rpki-client