Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: kIGrU4QXfHVb3Pl3zVt9bVHeLHqxSg7ILGCNH2zb5GA=
Subject key identifier: 67:91:07:14:B9:CE:3F:BF:5C:1C:DE:14:D6:2A:A3:21:CE:C8:DB:90
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 0194BC3CA92FC7C676567265FE9B86E178E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: hBEZZ6zoa/tiEZhHddS5lOHVZDMs/zFVM3hBSznWNFo=)
2: ev2WSyViLs_4S1tUPVrDBxIhRNA.roa (hash: 76S9MUck64w/+vCaPMsorT6TPB6jZWIo5BognypKoJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a9:2f:c7:c6:76:56:72:65:fe:9b:86:e1:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=67910714b9ce3fbf5c1cde14d62aa321cec8db90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:f1:a5:ae:0a:ab:21:90:fc:f5:cf:d6:e8:
92:35:fe:e3:d4:66:82:19:3e:62:20:05:7e:48:8a:
6f:ea:46:a3:2c:4a:6d:64:68:db:b6:ac:9c:d0:7d:
80:cf:bd:d9:bf:a1:3f:59:3e:9a:80:5c:17:72:77:
fc:1f:9c:f8:5d:b2:bc:3a:43:22:c2:38:e2:9d:5a:
7f:f0:f6:03:53:8f:87:61:49:7f:a0:f5:74:4b:4d:
77:b6:6f:89:a7:82:62:62:f7:14:49:55:dc:bf:ea:
97:4c:85:d2:76:bb:e9:74:a8:18:ac:50:da:7c:3b:
4b:f8:2c:16:43:cf:01:c8:26:0c:fc:9b:67:ea:99:
41:f8:86:26:2c:0d:ea:be:4d:4f:84:79:33:b8:f3:
cb:54:b8:34:f2:b6:93:0b:d1:a3:16:58:10:6f:bc:
de:1b:96:ad:62:a0:46:27:dd:ec:11:5d:d7:6a:ce:
55:79:7c:0a:1d:e9:e7:8a:84:a0:7c:14:5f:91:ce:
20:0b:5d:c9:8d:38:79:01:f6:f1:4c:6f:c8:c6:3d:
3f:7e:55:1e:a8:91:94:89:38:db:31:8b:cf:72:42:
2b:22:84:5e:b0:a3:cf:a3:b8:ca:4d:c8:b8:8b:8e:
97:3b:2d:b0:6b:89:50:18:20:c2:df:a1:f1:fa:00:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:91:07:14:B9:CE:3F:BF:5C:1C:DE:14:D6:2A:A3:21:CE:C8:DB:90
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:76:da:ce:c7:a0:7c:d3:c7:a3:9d:00:ff:53:35:51:f1:3c:
39:75:4a:15:05:9d:5f:fc:37:96:8b:04:02:4f:ee:51:9b:2f:
7b:7e:f7:10:08:38:85:3a:e6:d5:3e:0e:60:ec:4b:96:25:1e:
2b:6a:83:6f:b6:db:a7:d6:34:92:b4:3b:bc:3c:8a:94:34:5a:
5b:0d:f7:1a:aa:3a:5f:92:b7:56:6e:29:29:81:e6:ef:5a:b1:
c6:06:e0:c3:d9:5d:8e:ed:5c:54:ad:6c:5f:2b:35:d6:f6:1d:
59:d8:a3:2d:df:ad:a7:b1:73:a1:42:48:f1:5e:bf:27:39:2c:
1e:a0:ea:c3:7b:3f:31:27:64:b4:cf:3b:b1:7b:77:e0:c5:d7:
db:41:63:78:1f:08:c1:f5:fc:0b:77:cc:3e:30:9c:ef:51:26:
90:63:3e:70:6d:de:e6:4a:a2:29:03:fa:12:0d:77:8b:a0:84:
b6:70:17:d7:70:82:9c:5c:d3:5e:13:1f:ea:e6:9c:e5:36:c6:
1d:da:5d:04:c2:cc:71:12:88:67:e5:00:e1:e8:2a:64:d7:0f:
7f:ec:64:9a:f8:70:b3:36:6e:b8:38:46:9d:db:f8:96:7f:fb:
28:16:30:4c:27:87:bf:5c:4f:ae:d8:66:7b:4f:14:db:93:4c:
17:89:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:47 2025 by rpki-client