Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
File: 2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft (raw, json)
Hash identifier: +i8fwCZWhThMH75IyyE4d0w9Vm9NQBYdJkG3kXzZfBE=
Subject key identifier: 5B:65:DC:FD:FC:A0:E0:E3:6E:45:02:79:68:2C:54:E0:C2:BB:5E:B6
Authority key identifier: D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA
Certificate issuer: /CN=d9b22811df86123d71af5b998a210c23eb1d5efa
Certificate serial: 0194BBCE5FE5EEB9CB7845C683334E27782A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
Manifest number: 0D67
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: 2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl (hash: EvvWPaHrAfN3o5XRXWFUk7WHgsFCeOH4iEdYu2g1+7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:e5:ee:b9:cb:78:45:c6:83:33:4e:27:78:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b22811df86123d71af5b998a210c23eb1d5efa
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=5b65dcfdfca0e0e36e450279682c54e0c2bb5eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:ea:63:8e:ef:5e:ad:b9:e3:63:be:9b:19:
94:f5:b6:48:bd:21:d0:f6:fc:e6:71:00:b6:e5:31:
d7:c6:22:d8:6b:5d:a3:2a:10:aa:48:47:d8:0b:d3:
43:1f:91:d8:27:44:0e:bc:18:47:4b:fb:4a:0b:42:
0a:73:24:73:c4:0d:5a:6c:14:b7:fe:a7:68:1b:ef:
7c:f2:14:bc:a7:01:18:8b:7f:b6:e2:3b:dd:15:05:
95:28:d4:c9:6b:27:cf:c8:6b:17:27:69:1d:0e:fc:
5a:3a:c8:50:2c:ee:65:a0:8a:de:2d:26:c5:0d:d0:
79:9a:50:7d:50:49:9a:d6:5e:96:99:b9:35:d7:71:
54:ae:ab:87:77:eb:e0:3a:f0:91:3f:c0:26:9a:2b:
cd:64:0e:82:31:77:b8:58:ee:d6:19:05:b5:52:b5:
ce:b4:7f:9c:20:91:65:3f:55:bb:b5:01:e6:76:71:
6a:e5:8b:30:36:5d:dd:c3:f1:39:9e:eb:29:61:af:
26:46:b7:56:5c:3d:f4:ef:e2:49:06:eb:46:97:82:
5f:dc:77:79:fb:fb:4f:75:f0:fb:af:e0:ee:cf:63:
10:11:ac:fd:64:de:18:15:5a:03:e0:75:60:58:26:
64:89:1d:c9:ca:64:ea:ef:96:91:3a:32:88:9f:10:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:DC:FD:FC:A0:E0:E3:6E:45:02:79:68:2C:54:E0:C2:BB:5E:B6
X509v3 Authority Key Identifier:
keyid:D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:70:f0:1f:e3:7b:66:45:4b:60:6a:8f:0a:0b:52:57:70:f9:
ee:87:5e:3e:08:67:44:7d:30:28:3f:65:4c:c9:c8:8b:c5:da:
f3:64:21:8f:00:3d:c0:dc:d0:73:18:85:79:b2:5e:6b:1c:71:
f9:c0:1d:56:f8:ce:90:ec:57:af:aa:60:73:0e:c4:73:7f:fb:
df:92:e5:6e:e8:97:be:16:1b:c5:d9:97:fc:74:57:15:0e:0f:
5f:d7:f8:bc:c4:48:87:03:69:54:77:95:b9:22:3f:55:77:cf:
81:b7:d2:c5:d5:80:c5:80:97:91:c4:0a:44:c4:ea:89:98:9a:
0e:d9:f6:9c:22:16:61:b0:1b:48:fe:66:91:f4:d5:4d:8d:ac:
0f:80:24:5e:f6:53:dc:12:a1:8a:4a:61:cf:96:89:94:a9:12:
a3:58:da:0d:85:1e:96:78:96:62:d6:45:b6:16:ef:54:a1:33:
0f:f3:cf:30:fe:f7:13:7d:f4:77:0b:43:b1:1b:8c:15:9f:f4:
78:07:eb:1c:1b:43:8c:02:65:ec:71:ec:3e:d6:46:5c:bf:36:
59:4c:62:61:4f:9a:c6:a3:f9:07:55:1c:85:ad:dc:30:f4:df:
4a:66:e1:e5:be:b1:e1:66:62:7a:eb:ad:14:06:f4:77:87:67:
b3:f5:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:37 2025 by rpki-client