Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: L77ocxf5YqQ4qhv+lSf/xv+1ZQAeXnWWlGSJHyvwcjY=
Subject key identifier: D6:2C:DB:C1:E2:8B:63:20:BC:6F:78:2C:53:0F:63:A7:14:35:40:E8
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 0194BD18153AF3FE30AF95F481738BF2BB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:59 +0000
Manifest this update: Fri 31 Jan 2025 16:00:59 +0000
Manifest next update: Sat 01 Feb 2025 16:00:59 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: J1OyAxiGWz+Cy+5MYa5M+WY4/7OcUErvnypXWSON0/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:15:3a:f3:fe:30:af:95:f4:81:73:8b:f2:bb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: Jan 31 16:00:59 2025 GMT
Not After : Feb 1 16:00:59 2025 GMT
Subject: CN=d62cdbc1e28b6320bc6f782c530f63a7143540e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:2b:12:27:d0:e3:82:7b:c5:7a:64:87:19:
02:9d:f0:84:31:fd:13:03:1f:9e:e5:52:1b:f4:05:
f5:9d:e2:f9:6f:e1:61:d9:6c:de:9e:94:5d:80:63:
ff:76:89:74:dd:6e:09:12:de:6e:13:29:2f:4d:7b:
9a:f0:14:a6:9a:ae:83:c9:86:97:ed:5f:27:c0:43:
0f:53:a2:e2:f7:35:3e:c5:2f:00:31:a2:24:07:8d:
ec:df:59:6d:f5:62:ff:39:7b:87:62:cc:3a:32:df:
67:cf:4e:69:45:d6:9a:52:da:af:3c:8e:9b:81:1c:
67:f6:9a:51:15:3b:71:d6:ec:0e:05:df:45:17:a6:
1c:2c:a1:4e:55:11:ae:ba:b3:8a:e7:11:58:79:9c:
a1:94:f6:0c:b8:1d:b2:73:a8:a7:4c:4d:97:03:80:
58:44:85:b4:c9:61:ce:6a:3c:f8:32:3e:41:af:94:
6d:ab:8d:fe:74:06:2b:57:35:1c:9b:2f:7b:70:78:
f6:2f:6d:8f:95:7d:13:5a:54:10:69:42:bd:f4:f2:
8f:90:6c:6f:42:f9:38:d3:d6:af:bd:d7:cc:d5:de:
e2:86:b8:de:d4:fb:dc:cb:41:3a:3f:d5:89:d7:22:
b9:81:70:96:70:9c:61:7c:96:56:7e:bd:b3:29:9b:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:DB:C1:E2:8B:63:20:BC:6F:78:2C:53:0F:63:A7:14:35:40:E8
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d7:2c:0e:f5:03:6c:9b:72:12:57:0a:f0:1f:4a:e5:f9:6b:
bd:84:1a:bc:00:df:4e:df:2c:81:c6:ac:1a:e2:da:57:2e:d2:
bf:ef:63:fd:f4:5c:00:98:2c:aa:b1:23:4b:32:9c:4e:f2:d8:
7f:fd:e3:96:a8:43:58:4e:86:28:ef:0f:c0:2b:7d:f6:23:55:
97:7f:80:d7:0d:11:64:6a:e9:c0:3b:1c:90:81:f2:31:cb:8f:
55:f1:55:36:99:4e:97:d0:0b:fb:ca:56:aa:d9:d5:df:8c:41:
82:7a:f6:dd:70:5f:c7:1b:94:31:79:01:5a:e1:5d:2c:12:75:
30:0e:99:b4:81:e9:e1:9d:61:5c:8a:e6:25:c7:28:13:38:a1:
bd:11:59:c5:16:56:56:cc:40:cb:3b:1a:8c:54:60:e8:fa:27:
77:a2:27:9f:d3:a5:14:6a:9b:05:7e:62:20:94:13:09:34:61:
ba:8f:b5:d5:f3:63:18:35:a8:7f:e1:c9:b9:3f:07:4f:a4:87:
e7:0d:bd:d1:28:a4:2a:36:06:b7:d5:c2:ff:18:e5:84:5f:68:
5d:78:87:85:0f:50:f1:67:bd:fd:54:20:93:63:66:b2:2f:fe:
ec:60:d3:d0:cf:0b:e6:47:9b:3b:bd:f2:fa:2d:a8:6a:34:5a:
ce:fb:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:21 2025 by rpki-client