Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: sgoWOWzIsaQfauS+SiIMtrngqJEzxr5UzcENhO/fKJc=
Subject key identifier: BB:D6:EC:5A:9A:C2:39:C9:C6:51:2D:7F:F7:5A:7C:26:E7:E4:F7:C5
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 0194BBCE2B0DE82C16BEB8CE2EE6FE508DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 13B7
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: oLdYcwU8rbB7CGW652i+BsaIbgmvCzxzjaFUwOhB6C8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2b:0d:e8:2c:16:be:b8:ce:2e:e6:fe:50:8d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=bbd6ec5a9ac239c9c6512d7ff75a7c26e7e4f7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:3c:38:48:ea:11:52:17:58:f1:55:bd:39:
ef:c7:50:21:ff:04:66:2f:d4:65:56:0b:6c:91:66:
a0:9e:f4:45:78:4d:bc:68:25:b7:6c:43:b1:1b:ce:
9b:da:9e:28:5c:a8:87:3b:c6:0a:6e:b4:2e:b5:c8:
b6:09:89:ee:52:e3:9b:66:a9:b4:1a:39:6e:42:31:
a0:9a:1c:d4:bc:09:12:a6:bd:e3:4c:12:c5:cd:92:
90:f9:86:e5:74:83:57:42:5c:04:cd:73:8e:55:56:
91:ad:c9:25:33:30:a0:a5:48:46:f7:07:4e:21:ba:
ed:a4:9f:c2:7e:c7:d1:fa:de:3e:b7:5e:3a:02:0f:
fe:a4:f2:fa:48:5d:76:e8:d8:09:9f:c9:54:2d:5e:
4d:c9:b5:eb:c4:ce:de:46:69:42:28:b8:28:42:ed:
d0:89:15:5a:ee:7d:b8:ad:4b:62:9c:01:d9:5f:36:
8d:68:98:9c:82:8a:fc:a9:b7:e0:fa:fd:fb:fb:2d:
b2:a8:76:51:94:92:42:c2:d0:84:bd:3d:ad:5b:23:
8d:20:b5:f1:d9:a1:77:e6:04:12:00:0b:2f:96:e3:
41:e8:93:fe:60:13:f0:eb:94:45:d9:1f:72:6d:7e:
6e:98:28:01:91:39:66:93:57:36:87:a6:b7:7e:0b:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D6:EC:5A:9A:C2:39:C9:C6:51:2D:7F:F7:5A:7C:26:E7:E4:F7:C5
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7f:3c:32:92:10:c2:76:91:d4:8b:08:29:f7:8b:1a:7e:6d:
e5:f7:1e:25:b0:fc:f5:e7:83:55:47:47:82:77:21:6a:8a:12:
0e:e2:2d:f0:bc:f9:be:5c:ee:dd:87:35:06:7b:e8:8d:de:ba:
7b:c3:ee:56:f3:95:b2:94:9f:48:31:a6:2a:87:a7:c1:be:00:
c6:b6:60:3a:8b:55:d3:ff:8f:a2:1a:d0:d0:3d:95:a3:49:67:
76:12:8a:52:ab:85:bc:99:0b:65:55:d9:fa:fa:ee:5e:dd:04:
d6:cb:81:db:ed:a4:47:f3:0e:d6:8e:c0:aa:ba:f4:c3:e8:5f:
b8:47:4c:2b:ae:94:c1:9a:56:b8:e8:3c:99:95:55:ef:ad:ce:
65:50:7a:20:15:03:3a:89:53:8c:ab:90:f1:9b:ee:39:d3:f3:
5c:73:19:1b:d6:21:93:b8:4e:f4:31:e4:b2:8c:2c:19:1a:35:
36:e5:bd:04:5c:36:82:d0:62:c6:49:5d:93:7d:0a:b3:bf:38:
a6:b3:d6:c3:92:12:1b:93:aa:c5:6a:2d:9b:b9:15:99:2d:93:
66:f5:2f:7e:43:7b:9d:b6:0c:0c:c2:8c:0c:be:5c:95:cb:de:
b3:2f:ec:9a:5e:8b:af:37:f0:35:31:ec:0c:87:f9:f0:1f:93:
14:27:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:15 2025 by rpki-client