Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: ruMijfacGahGcDGlV8TAQOrXc4mbOvIt4Fvi9mGbQlA=
Subject key identifier: 09:5E:9A:ED:EF:B3:AE:9D:9B:54:E7:2C:7B:F2:53:00:2C:FB:E8:2B
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 0194BBCE3C053378E5AABA42CEA364E8BB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 0450
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: AcBIFFpCSwKPN5ZvZrtdlsMlkozLA61W1MZrXnN8PD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:05:33:78:e5:aa:ba:42:ce:a3:64:e8:bb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=095e9aedefb3ae9d9b54e72c7bf253002cfbe82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:d5:a4:73:47:77:2d:94:1c:59:eb:61:36:
c6:a6:6b:4d:78:e2:c4:27:c0:a3:a3:9e:fc:e7:1f:
ba:b3:60:74:c0:e2:f3:c0:8f:e9:7a:d3:15:a2:99:
51:1f:2a:d7:24:4c:49:30:6c:8d:37:30:6d:9b:15:
f1:63:65:59:57:a5:9b:43:7d:4b:0a:93:8a:17:77:
41:da:03:17:32:5a:c9:a0:68:1f:2a:7d:8c:a0:8f:
c6:a7:3c:f8:80:0e:f8:77:32:0b:c0:78:38:d1:47:
86:61:30:bf:05:a4:b9:cf:8d:fd:08:14:c0:10:cb:
a6:de:cf:47:c3:9f:c8:4c:85:2a:2d:31:14:7f:fc:
31:26:d1:fd:ef:c4:98:60:6b:40:9c:72:aa:66:7a:
44:93:18:1f:36:29:2b:d8:c5:a2:73:6e:20:6a:35:
62:b3:20:be:f5:37:2d:82:1b:b0:c8:24:ab:cd:00:
dc:75:a4:cf:ef:61:45:f1:7a:f1:9a:c4:ce:92:dd:
33:3a:ff:f6:ef:c7:6e:16:0b:17:ef:c7:d4:98:5a:
ce:13:0f:e1:d4:71:53:6c:ef:88:a7:1c:7b:99:ad:
e7:d3:c0:a0:70:cc:3b:e1:76:b1:0d:04:38:31:3c:
04:6e:1c:47:9d:cf:3d:29:e9:14:e3:fa:aa:7f:1a:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:9A:ED:EF:B3:AE:9D:9B:54:E7:2C:7B:F2:53:00:2C:FB:E8:2B
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bf:72:5a:85:cc:b1:1a:d6:f6:ed:95:51:58:6e:5c:ea:a1:
b3:ee:b8:60:92:5d:b2:67:a6:47:16:b9:0f:ca:fc:c9:12:19:
27:bb:c0:bf:8f:15:7d:52:e0:58:5e:09:1d:1c:e1:5c:7a:88:
1e:70:54:7a:a6:2e:4b:0b:68:a7:23:76:73:08:70:46:b3:4b:
0d:3b:45:6d:b8:f5:5d:ae:64:fb:f5:55:9c:34:bc:50:65:1c:
27:78:cb:e9:25:6b:14:32:3d:4f:24:d9:5b:b8:24:da:f4:7d:
1e:0a:2a:0c:b9:51:45:1c:a1:8f:b3:81:8b:3e:7c:04:a1:9d:
52:52:bb:89:7d:38:de:96:2d:a2:f4:04:5f:27:35:f7:8d:04:
36:f1:e7:14:26:49:e3:2c:2e:91:39:89:2c:06:62:fc:23:50:
7e:99:89:bf:f3:e1:00:56:02:c9:66:69:8a:0b:ea:6e:f3:a3:
ff:78:1b:b9:8d:1a:b7:c6:ea:c7:be:6d:cc:ca:c5:dc:3f:b6:
50:a7:9e:30:b4:0e:ee:a6:d5:b3:be:9e:1d:fa:b6:23:9b:15:
d0:39:19:38:51:5a:55:4c:63:12:2b:98:b0:06:8c:94:ab:7d:
36:2a:9f:08:f9:6c:ad:32:55:14:f8:c0:0b:f8:fc:c1:fc:33:
3f:3a:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:22 2025 by rpki-client