Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier: xBmJc6gLYRZKqox4TAIKisaqgFH/bGAX7wqoDB1LYcM=
Subject key identifier: 2C:10:6A:C7:7D:91:A0:95:0A:30:C1:2A:85:9A:CC:68:C3:C7:54:37
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer: /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial: 0194BBCE4D2AA673178C00CF7F5EDAD6E9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number: 070B
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: vuylFXEzvyyamUheLCIwv5bBrZOy/kyMtg5pgkvpW7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4d:2a:a6:73:17:8c:00:cf:7f:5e:da:d6:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=2c106ac77d91a0950a30c12a859acc68c3c75437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:f3:62:ef:aa:79:3d:52:a4:64:5c:cc:5b:
06:dc:59:8b:0c:85:fb:d9:58:7b:f3:ae:98:7d:ee:
21:c9:8b:61:e0:89:b2:cb:7d:c9:3f:1c:5f:f9:16:
35:a7:cc:af:bd:60:a6:bd:d2:d9:12:04:3a:2a:a2:
21:ca:58:17:0a:99:d6:62:84:3f:7b:41:c0:d9:b5:
f9:51:7c:28:cf:62:40:9e:af:e4:7c:ef:69:aa:b0:
62:37:e4:65:4e:f3:9b:15:cc:ec:d1:7a:5a:66:b5:
57:aa:5e:2f:ad:bd:c8:42:4a:1f:67:1e:ed:75:41:
50:da:f6:50:a0:53:b9:50:5e:0d:0e:63:4b:c1:66:
31:e8:29:83:2c:3e:f0:3d:9b:43:7e:87:11:e9:1a:
37:a4:e8:28:cc:e3:78:fe:74:ab:b9:65:4c:cd:c8:
c2:0d:96:ad:ea:70:cc:5b:d5:4b:31:19:ee:ab:42:
1e:c4:e4:4f:ae:cf:2c:63:23:1b:cb:0a:83:2b:37:
db:11:b5:10:82:6d:fa:a4:1a:39:d8:f1:d3:b1:95:
75:67:36:ac:c1:2c:76:f4:24:11:ca:01:54:78:0f:
0b:e1:8c:d2:c9:16:c2:9b:d3:e7:ae:b0:0f:0c:c9:
8a:a8:df:60:00:07:b8:b6:a1:6c:60:74:a2:35:63:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:6A:C7:7D:91:A0:95:0A:30:C1:2A:85:9A:CC:68:C3:C7:54:37
X509v3 Authority Key Identifier:
keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:9f:98:e9:24:90:07:63:38:02:fb:31:ca:b2:72:54:8c:
d2:d4:22:df:0d:f4:c6:53:d5:b8:47:57:65:81:5d:8a:ff:cb:
c9:ea:e5:70:16:32:3e:66:0d:0b:25:6c:e8:0c:88:78:e1:18:
9c:53:d1:3e:69:d6:c2:01:32:19:5e:bd:d4:ca:1a:f2:da:1c:
78:29:e6:e9:cc:36:a4:eb:3e:8f:fe:e4:ea:d4:4d:a1:ab:5a:
5d:b5:ad:5a:05:3d:41:c3:aa:4d:c1:a8:95:c7:aa:ab:c7:1a:
a2:d9:90:f2:62:98:5c:61:cf:72:f2:0c:26:d7:cd:5c:a7:22:
4c:25:3a:80:a5:15:e7:28:ef:4a:18:26:a8:67:89:57:d9:37:
a8:92:8b:55:97:08:e5:26:4a:93:e1:c0:be:04:55:24:f1:bb:
3a:c6:83:af:cb:c2:3b:59:7b:b5:5f:db:2a:d3:96:57:5d:69:
01:3c:bf:ca:54:82:89:73:ce:91:fd:b3:3a:53:ea:8f:e7:51:
11:75:35:32:31:7c:ad:5e:6a:c6:d3:49:cd:9f:3e:f8:0e:82:
3b:bf:fb:29:27:48:f2:9d:74:b7:91:69:13:af:d6:d3:66:52:
53:a8:cd:6e:c0:fc:c0:f0:57:2a:14:ab:b1:bf:9b:fc:87:cc:
f5:d8:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:37 2025 by rpki-client