Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
File: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft (raw, json)
Hash identifier: WezWvbSFn3Xg7IYrC2HvYgIW+4zDVvPKOOpF14HRG9o=
Subject key identifier: 7E:3B:49:B4:D2:78:DC:54:45:60:D7:BE:9B:3F:F4:61:F1:4F:80:DF
Authority key identifier: D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
Certificate issuer: /CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Certificate serial: 0194BCA9A34E71B2AA41F1A2FF381061E95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
Manifest number: 0234
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl (hash: +OD+souhQpZ9/RI6msE29CWZJJZVjSQzLB6gzXUjCk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a3:4e:71:b2:aa:41:f1:a2:ff:38:10:61:e9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=7e3b49b4d278dc544560d7be9b3ff461f14f80df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:2c:c3:be:ee:26:5e:02:9b:6e:83:87:7f:
54:b1:6d:88:d3:81:43:c3:39:87:e2:c4:e6:65:90:
12:11:8a:98:1c:96:78:82:5d:68:3d:3e:6e:d3:62:
30:d9:47:ba:b3:a3:04:69:6c:f3:c9:72:c4:bc:86:
70:94:d8:c0:62:9e:42:cb:a1:0f:62:a2:88:40:d8:
b3:be:d6:c1:48:9c:aa:85:86:b7:5c:1d:a5:38:67:
51:f3:ac:88:ab:04:9a:b9:e1:00:46:49:ce:85:a3:
13:9d:61:ab:8c:8e:56:0b:52:bb:59:1e:b1:97:65:
9a:70:d5:4a:17:be:e0:6f:a5:51:fd:21:25:61:7f:
83:67:f8:16:37:d2:c9:0c:41:74:d2:3e:c9:49:8a:
71:14:f1:4d:a4:b9:2e:44:f2:3b:ab:90:20:94:c8:
42:4f:56:5e:6c:84:13:54:d3:80:22:26:32:02:f7:
7b:60:fd:96:f9:13:54:d2:36:59:90:1b:72:6c:dc:
b7:f2:9c:55:e4:73:78:00:2b:0a:b9:a6:f7:77:32:
78:05:5f:7e:1d:2b:a1:6c:6b:16:b3:06:4c:4e:61:
ee:0e:9b:a5:da:92:b1:29:06:9e:64:e0:98:77:6f:
c5:84:02:36:77:c0:a2:43:04:b0:fb:22:7e:dc:8d:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:49:B4:D2:78:DC:54:45:60:D7:BE:9B:3F:F4:61:F1:4F:80:DF
X509v3 Authority Key Identifier:
keyid:D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8b:c9:9d:0b:f3:b0:44:95:a9:10:65:d8:fd:2a:72:12:11:
73:b4:30:81:36:2e:68:ad:28:73:69:06:ab:17:e4:b0:53:0d:
8e:97:6e:16:8c:59:00:68:3e:4d:d8:d9:88:7e:0b:c5:49:4d:
7b:68:cb:a7:39:aa:8a:dc:00:24:b5:13:2e:b7:ba:6e:08:26:
d7:e2:27:de:e7:f9:e1:0b:ad:29:cb:01:fb:02:95:eb:51:63:
ab:83:8c:f6:a3:86:02:11:46:c9:3c:d2:6c:e5:2b:c4:f6:99:
86:6a:95:b1:ff:2b:1f:2d:c3:78:da:63:96:1e:6c:2b:87:41:
b5:5a:1d:97:6b:4f:de:1f:c5:c3:23:28:1f:4a:3d:41:d7:4a:
50:49:24:b7:c5:fe:1a:c2:4b:cc:17:cd:45:93:63:24:a6:c0:
70:78:1e:b5:a8:46:96:d5:2a:03:fa:80:05:f3:18:a2:85:04:
fe:4d:12:c2:b9:3f:46:e2:12:e5:d5:86:d6:51:c3:96:f0:7b:
58:bc:d1:7b:14:5c:a8:3a:77:41:8e:b1:0b:21:ea:71:3a:99:
a0:25:1f:8f:27:37:66:24:62:2f:ce:15:4d:9d:8d:bf:69:be:
d4:f8:7a:57:22:1e:99:a3:d5:b8:99:f7:58:6b:17:a9:bf:d8:
c0:e7:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:37 2025 by rpki-client