Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
File: 2Hwy4kled0lvwgKzAxZLpAjl0SI.mft (raw, json)
Hash identifier: fwEsY2P9KpVilSr6ze9dJF/rrcoxV6tdk/Q1EjAz118=
Subject key identifier: 8C:41:B2:24:07:A2:21:87:AA:19:51:BA:93:25:B2:E7:B0:73:CA:8B
Authority key identifier: D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22
Certificate issuer: /CN=d87c32e2495e77496fc202b303164ba408e5d122
Certificate serial: 0194BBCE97BF902145A096D25C3A4E140BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
Manifest number: 1325
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: 2Hwy4kled0lvwgKzAxZLpAjl0SI.crl (hash: zAh5C9xuSJ/1J/W5yGrqv1RBMpWPlE99KUVm2kwFDEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:97:bf:90:21:45:a0:96:d2:5c:3a:4e:14:0b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87c32e2495e77496fc202b303164ba408e5d122
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=8c41b22407a22187aa1951ba9325b2e7b073ca8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:c3:b2:25:7a:dd:53:4f:a7:f3:79:7e:82:
4f:70:1e:05:4e:6a:57:a8:d5:f5:29:6a:8f:8f:62:
0b:b9:93:be:09:d8:47:8e:db:e2:4c:57:f2:df:4c:
24:65:78:23:af:1c:fa:12:9c:4f:65:29:1b:d1:20:
81:1f:02:a0:65:a8:34:7b:46:0d:05:8a:b5:d9:88:
57:2f:b7:b6:4c:7e:f3:56:f2:6a:d8:1b:2f:f9:12:
d1:35:a2:3d:18:67:7b:44:42:4a:f6:c6:2d:eb:e3:
9b:4a:ec:f3:e5:f5:be:fa:89:4b:dd:2c:37:4f:57:
e7:d9:dc:af:d1:c9:88:ef:29:6d:c3:93:a0:6f:56:
05:58:cb:01:0e:74:e6:ac:6f:df:09:23:37:44:e5:
f4:b2:45:a3:02:f3:a6:6f:39:c5:af:43:e7:2a:1d:
97:36:bf:6a:9d:d5:70:73:db:56:30:73:9c:57:89:
a4:6b:c1:e8:eb:cb:11:3c:9c:e4:60:77:36:3c:37:
d7:ab:7c:99:a7:75:f3:11:2f:80:9a:01:44:76:68:
f4:4b:63:1e:75:66:11:94:3e:f1:44:24:bc:5f:d6:
c1:a2:8d:b7:e0:b5:17:90:12:79:81:8e:36:d2:85:
4b:2b:77:a4:c4:eb:7a:ed:22:12:23:65:98:9a:f1:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:41:B2:24:07:A2:21:87:AA:19:51:BA:93:25:B2:E7:B0:73:CA:8B
X509v3 Authority Key Identifier:
keyid:D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d8:e4:1f:3a:64:88:02:24:23:30:df:c9:9f:be:60:81:02:
e9:f0:57:a7:03:7f:38:c0:e6:a0:e8:00:8f:2c:48:58:15:c8:
1b:40:2f:30:8d:9c:cd:72:48:c8:59:80:3d:a9:df:74:e5:8d:
0d:92:40:81:24:12:93:6a:9f:a8:f9:6d:06:ef:9c:bf:73:bd:
46:01:ea:a3:2b:9c:40:02:7a:01:f0:62:80:6a:dc:21:72:19:
78:ee:f5:86:a2:44:7a:c8:7d:a2:fc:ac:c6:14:b7:ba:52:f1:
31:fb:02:22:78:b7:fb:4c:39:4d:22:42:4c:94:e9:be:a4:f0:
a8:d7:35:4a:de:73:94:97:23:0a:74:b1:f2:3f:0a:3b:3f:75:
01:96:7d:f6:80:55:6c:95:07:c7:71:f6:61:f6:70:4e:84:71:
0b:a7:3d:6c:79:8d:d3:81:ba:fa:43:5b:d4:b3:b7:dd:65:53:
1e:3f:14:25:22:f4:97:40:14:c5:40:2b:51:d5:ae:48:03:a5:
86:58:a0:61:5e:e1:17:f3:b8:28:71:5b:3a:3d:5d:5d:2d:3f:
dc:4b:b6:3e:28:00:72:e4:21:a3:d9:4e:30:7e:0a:4e:9a:14:
25:62:60:bd:eb:25:61:5d:57:17:38:8a:b7:ac:44:fc:80:f1:
19:5f:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:37 2025 by rpki-client