Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
File: 2xjQrivPZ9QUonXLOE8tOWCoN70.mft (raw, json)
Hash identifier: w/yCXf33Lo4TvTNYkU0aqnfCvLDdeLjmjfKvrp0fUpI=
Subject key identifier: D3:A8:89:81:6E:93:CC:E0:5F:EA:04:EB:31:69:AD:2C:46:8D:EA:0A
Authority key identifier: DB:18:D0:AE:2B:CF:67:D4:14:A2:75:CB:38:4F:2D:39:60:A8:37:BD
Certificate issuer: /CN=db18d0ae2bcf67d414a275cb384f2d3960a837bd
Certificate serial: 0194BC3C4B51BAB51A773BBA4C6589C300ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
Manifest number: 0BA2
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 2xjQrivPZ9QUonXLOE8tOWCoN70.crl (hash: zqO2iwg1mW9azUpfRVjY4UqgBlFkDOrrRcLdqald4dM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:51:ba:b5:1a:77:3b:ba:4c:65:89:c3:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db18d0ae2bcf67d414a275cb384f2d3960a837bd
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=d3a889816e93cce05fea04eb3169ad2c468dea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:4a:a3:bd:d7:13:f2:97:42:6c:36:11:5f:
31:96:06:39:e4:16:cb:b6:7e:d4:01:35:60:55:18:
b0:63:de:63:91:9d:8a:48:c1:77:aa:cb:27:fd:cf:
4b:f7:e8:22:b6:c5:2e:4b:ad:64:9a:87:3b:c0:9c:
6b:70:eb:12:87:82:e8:fe:7c:6a:c7:bd:80:86:1b:
5f:f7:91:49:ba:97:36:94:03:06:1b:f1:05:f9:ca:
f8:8c:d1:9a:9f:f8:99:1c:a4:f7:32:47:02:cb:d8:
c8:51:c3:99:81:0c:ef:0e:53:a6:9c:0b:bc:ae:b3:
1b:f2:f5:e4:20:a8:37:70:90:96:76:27:aa:36:b6:
44:1c:78:09:94:85:47:73:d9:e6:73:b9:0e:b5:77:
dc:98:a4:29:2a:bb:01:da:16:09:82:e2:34:a7:99:
c9:cc:0a:1d:ed:75:1d:0c:2e:8a:8e:55:39:63:de:
1f:c2:d4:c7:45:e2:9f:6e:95:2c:7e:42:91:31:b5:
32:71:96:e2:e1:3a:66:45:78:fb:ae:0e:3a:6f:f5:
da:fb:eb:ec:d7:5e:06:16:1c:b5:d5:1a:db:ac:3e:
43:86:21:bf:94:82:de:6e:15:50:fc:a2:1f:6c:00:
f7:23:9a:1d:e1:0a:d0:df:88:25:95:ef:a6:4b:b6:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:89:81:6E:93:CC:E0:5F:EA:04:EB:31:69:AD:2C:46:8D:EA:0A
X509v3 Authority Key Identifier:
keyid:DB:18:D0:AE:2B:CF:67:D4:14:A2:75:CB:38:4F:2D:39:60:A8:37:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:55:f2:d9:3f:3d:49:35:42:83:32:3d:88:7e:06:e5:28:51:
f6:80:d0:2b:76:70:8d:9f:da:65:4e:bb:fb:d5:25:d0:96:a9:
ee:52:de:0c:39:fb:8a:ff:ad:85:be:d2:21:67:65:a4:ca:61:
32:b0:5a:76:fb:ca:3f:4c:f2:51:41:47:91:15:bc:d2:40:5f:
18:5d:f9:05:27:c6:d6:37:1c:1f:00:ca:ee:a0:cf:f0:dc:73:
13:96:cf:dd:c7:84:15:93:8b:34:35:5b:bf:e8:d4:d5:05:95:
c3:c2:88:b8:4d:d1:7e:9f:39:a0:cd:2f:ff:30:95:98:66:9f:
b6:c8:40:7f:9b:2e:60:71:4b:87:1d:9f:05:45:86:81:68:23:
42:d1:08:ef:03:ab:1e:5e:09:65:da:ba:24:2c:b9:af:c1:7c:
b9:76:b1:35:00:93:b1:43:60:20:18:54:27:f5:01:6c:36:34:
28:5a:fe:dd:b0:e2:65:1c:dd:9b:43:43:35:7e:c7:d4:44:7a:
9d:33:63:35:90:c4:07:cd:dd:3c:59:ce:2b:83:a6:bb:87:d1:
aa:df:45:4e:c3:d7:54:e5:4b:f0:eb:ec:a0:00:b3:87:d6:5b:
52:5d:ba:ae:eb:d8:a4:29:ef:1d:f7:c6:6a:9a:1f:30:ff:14:
c0:c3:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:24 2025 by rpki-client