Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
File: 2hvwCCS2KL9iY7t03ndK3fmZD8k.mft (raw, json)
Hash identifier: OwVevkEiNtFZEMupHV5Cs44DeqagwxV8GoJeYCzsnWo=
Subject key identifier: 42:C6:5E:96:8E:E4:95:AF:A6:35:86:60:DD:34:1C:CF:CA:A7:4B:D6
Authority key identifier: DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
Certificate issuer: /CN=da1bf00824b628bf6263bb74de774addf9990fc9
Certificate serial: 0194BD1757EB3FF90DE5339FC650BBC3F70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
Manifest number: 11AE
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: 2hvwCCS2KL9iY7t03ndK3fmZD8k.crl (hash: 4UKO6/PDnpZu477yGRGfZ6/EEcGZ14ezUrrr+Ro7KeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:57:eb:3f:f9:0d:e5:33:9f:c6:50:bb:c3:f7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1bf00824b628bf6263bb74de774addf9990fc9
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=42c65e968ee495afa6358660dd341ccfcaa74bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:bf:4c:bd:4e:71:9b:cd:80:ad:14:14:43:
ab:01:43:29:ef:e7:cd:47:67:f2:b6:ca:2f:c1:31:
92:06:ef:49:f7:d1:d6:a5:8c:3a:0a:51:b2:c8:7b:
2e:3a:30:18:c4:23:59:3f:56:60:e6:87:c7:19:be:
dc:7b:4d:74:42:a7:df:a2:8b:b3:8d:a4:5c:3c:bf:
1a:02:d4:47:10:93:8b:d1:c1:ee:79:a4:82:54:69:
00:c3:71:ea:fe:80:86:45:e8:36:de:5b:b2:ab:3a:
70:70:32:07:92:3a:18:4b:01:b2:7c:3d:48:0a:15:
68:c9:ed:84:48:a7:cb:eb:12:0b:55:29:dd:81:d1:
20:2d:07:22:91:f0:e7:7e:01:eb:45:0e:c1:c1:14:
26:36:a6:fc:d2:67:83:16:a4:d4:b0:2d:59:74:cd:
95:c8:97:b6:55:97:c5:d7:be:d1:48:72:d9:af:48:
d9:50:54:00:30:41:66:a5:fd:eb:9d:18:5f:2a:5a:
ce:d4:a4:c3:d0:2e:cd:7f:92:72:3a:6a:31:a6:b9:
5e:ff:99:12:a7:e5:23:25:a7:5d:52:72:a3:fa:b1:
f7:60:8e:3b:53:71:32:e3:e5:c4:2f:d5:81:87:ef:
49:87:62:54:8d:cd:61:5c:65:c5:07:08:ef:2e:34:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C6:5E:96:8E:E4:95:AF:A6:35:86:60:DD:34:1C:CF:CA:A7:4B:D6
X509v3 Authority Key Identifier:
keyid:DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:07:fd:66:e7:01:cd:07:3e:65:b8:b1:8c:09:34:a6:aa:38:
f8:4d:51:8d:1f:e2:4c:8b:2e:07:41:96:2d:c0:e4:52:61:0c:
f1:67:27:69:bc:5a:65:69:28:a4:f8:1c:98:a1:bb:8d:d7:22:
aa:01:88:41:c6:da:b5:1f:40:60:ce:8a:fe:10:52:56:5d:6b:
5d:b0:a5:36:f2:d3:97:77:82:7a:88:a6:8c:7d:a1:28:b4:76:
53:4b:8c:cf:f7:6c:c5:71:0e:7b:ff:cf:66:bf:88:97:00:54:
67:a9:77:34:23:6e:3e:ac:10:2b:a8:b9:e3:3b:3d:13:cc:ee:
ae:38:0c:70:cf:60:60:1a:36:30:d0:96:30:df:29:78:85:bd:
b7:03:7a:ea:42:84:7c:bb:4c:e8:6c:07:50:03:e7:a1:19:5d:
30:39:9e:15:c0:85:9f:37:08:fa:27:7f:7c:b4:7d:40:c4:6f:
eb:80:f6:dc:0c:9d:3b:c2:c0:ee:7f:92:ea:22:b6:1b:0f:bd:
6a:15:8d:0f:1a:c7:e4:c4:70:7c:98:75:8d:bf:71:0f:e8:2c:
e0:bd:9e:c1:03:c8:5a:2b:69:dc:11:e4:58:c7:e2:db:9a:0b:
43:f7:e9:f6:17:21:c7:72:1e:d7:58:a5:b5:2f:00:dc:19:9d:
fc:ea:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:25 2025 by rpki-client