Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: 57TPrXvB3Y1eldV3PfSbjivbA2Aa4fh54FvhbeRGreQ=
Subject key identifier: 4A:8F:B3:94:03:F7:AD:22:B0:06:F8:0A:70:E2:5A:21:60:E8:3D:14
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 0194BBCE55E0F55DE8926E5FFBCCF5BDC9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: 1n0vGGU5prxhhhRLTR0xgM6ejEVIiwfYDM5XCMK/tQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:55:e0:f5:5d:e8:92:6e:5f:fb:cc:f5:bd:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=4a8fb39403f7ad22b006f80a70e25a2160e83d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:2f:67:67:10:38:5c:eb:80:3c:83:9e:3f:
8d:3c:d2:dc:f9:07:55:98:7e:60:f0:6c:65:a9:27:
69:cf:f6:0f:25:88:45:17:4e:ba:76:0f:5d:46:68:
98:73:f9:8b:a6:b3:46:ee:cc:c3:ae:e9:76:5e:d5:
70:80:4d:79:c7:9d:8e:43:3c:55:36:7d:c4:93:0d:
f1:05:53:07:2e:fc:83:ce:f0:d8:b9:ae:55:be:ca:
82:cc:e9:63:57:df:68:5a:f4:af:c5:1b:a7:05:bc:
2a:54:b6:2e:37:69:5c:61:cb:83:e9:dd:94:f0:42:
62:f8:ca:6f:78:f9:ee:0a:ce:db:8f:e2:d1:3a:51:
96:f4:5d:14:e3:69:b2:49:2e:87:1d:6a:14:f8:02:
d2:ec:c3:03:1d:e8:3b:be:6a:47:63:31:98:46:1e:
51:3c:d7:98:06:47:0a:57:fb:cf:00:40:ee:4a:0e:
20:13:e5:a4:45:62:ba:f1:7c:fa:0a:9c:58:72:5d:
3c:0d:d0:25:e8:2b:a3:ac:d6:73:7c:2f:ba:1e:81:
9c:fd:a2:52:0d:2b:49:a6:9d:52:3a:eb:62:79:3f:
07:e4:60:20:c9:3d:9a:7f:c7:2b:31:9b:a8:02:3d:
8c:5f:12:d1:e0:b6:bc:d5:54:08:9f:95:7c:01:5c:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:B3:94:03:F7:AD:22:B0:06:F8:0A:70:E2:5A:21:60:E8:3D:14
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:28:a1:d9:38:f9:2d:fd:59:e3:98:e8:cb:06:c4:f2:b7:25:
82:c6:bf:b1:4e:af:38:83:2a:15:0d:05:6c:09:37:ac:c0:f2:
29:bf:57:aa:8b:02:ab:d4:79:95:71:b6:66:8d:04:1b:88:49:
2f:2e:29:3a:15:e9:9c:d2:35:1e:54:5b:22:8b:a7:d6:e5:38:
9b:c0:60:c0:47:94:27:68:64:9b:4b:45:8e:49:97:72:35:b9:
de:09:26:5c:87:4e:4b:8e:ad:f9:be:7a:14:d9:70:10:5d:12:
05:c1:7d:a4:88:b9:1c:41:b3:dc:b0:ec:7b:98:f5:43:fa:fe:
d8:03:d0:35:28:39:a9:b9:69:0d:5d:4a:0c:5f:91:4b:52:66:
f3:4d:93:5c:77:de:91:45:bd:dc:7c:9c:0a:fa:f4:ae:7b:cc:
6d:34:b1:e8:37:f8:64:36:4c:99:51:13:4b:e4:c1:48:73:94:
04:6f:16:8e:6e:f1:19:46:dd:b0:07:c5:c8:d0:08:05:99:60:
41:23:2a:78:3e:b5:81:a1:fc:8e:f4:ae:15:ba:e8:55:05:ae:
2d:85:39:6f:eb:62:31:02:3b:50:6e:bc:3c:b3:95:ca:6e:15:
23:22:15:4a:28:15:eb:af:bf:c5:b8:24:fa:91:a3:7e:55:35:
cf:f6:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:38 2025 by rpki-client