Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: Tv4czYZOE2/HVn+5WaTGWjN2V+pt9aTqW5kMniZEK50=
Subject key identifier: 17:93:D4:F8:AB:C3:C7:24:2C:80:DC:6D:92:0B:59:A0:9A:4B:7A:EC
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 0194BC3BC612477045F03297A877D801D224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 0B32
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: 4ZxMO/EFHdkwh+dpQtxLT963VU/VMpsGBdaQ6jv8kJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c6:12:47:70:45:f0:32:97:a8:77:d8:01:d2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=1793d4f8abc3c7242c80dc6d920b59a09a4b7aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:9e:bc:74:aa:92:60:79:d0:10:bd:99:27:
f4:81:c7:a6:13:03:b1:27:65:63:6f:13:b2:8f:63:
b4:ce:15:d5:bf:29:be:d2:a0:96:fb:2a:9c:7d:59:
0f:3f:25:85:49:dd:ce:fa:ce:1f:71:e4:c1:cd:1b:
ab:92:e4:be:de:e2:5b:99:2c:29:79:b4:0b:a4:23:
13:f4:18:8c:a6:c7:97:06:a6:6e:c5:87:88:89:6e:
c8:46:e6:5a:01:54:ba:ba:5b:de:fa:25:19:bd:36:
0a:e4:c1:da:8b:b2:64:63:22:3b:31:87:fc:90:21:
3d:57:12:c0:69:60:15:4e:5f:77:db:00:95:ac:30:
61:b0:d6:8a:c8:66:9f:9f:6d:2c:6d:da:e5:7e:7a:
cf:8d:62:4b:24:f7:bb:84:d2:bb:18:67:b7:ca:92:
5c:39:5b:6c:bc:e0:db:a9:eb:f1:6f:cf:f9:11:58:
bd:8a:b5:2c:2f:46:f9:2d:8c:c5:e1:20:b0:e2:b2:
41:8e:6b:05:71:da:b5:2f:89:11:8a:92:4a:b8:25:
8b:e5:ed:75:8b:c7:e0:f3:6e:98:b6:5f:27:66:e4:
3b:02:80:ab:ba:2b:12:f1:20:4c:9f:a8:46:80:51:
a3:09:a3:ed:27:a3:0f:85:e3:1d:59:9b:b9:bb:74:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:D4:F8:AB:C3:C7:24:2C:80:DC:6D:92:0B:59:A0:9A:4B:7A:EC
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:28:18:f0:ab:60:38:e6:e9:16:2e:3b:42:38:9b:cd:ae:b2:
df:b4:f9:9f:47:66:0d:89:18:14:16:77:68:14:d0:c0:e6:30:
34:20:74:dd:0b:4b:89:2a:a1:99:dc:13:d3:7f:7c:51:62:3c:
fd:df:75:d5:04:2e:e7:42:06:8b:53:71:29:62:12:e7:2e:a3:
9e:fd:f7:63:bc:d6:46:6c:17:c2:a9:75:96:4c:08:bd:fd:16:
f2:9b:3c:34:4e:41:2c:a4:d7:31:1d:18:37:e3:9a:0b:21:27:
13:de:a4:ce:b9:5a:96:53:78:50:fa:10:ad:1a:91:a6:ae:6f:
06:ff:3b:12:5c:50:62:e5:3e:59:27:72:b4:48:ca:01:68:e6:
15:2b:df:16:18:7c:de:4e:cd:7d:cd:9e:90:d1:f2:b2:fc:47:
e7:0b:7a:2d:16:a4:d3:04:ac:c0:90:32:25:b3:ff:21:90:e9:
bc:ec:f3:47:f7:57:4f:fb:79:2c:74:2a:81:1a:15:81:a5:31:
1f:07:22:c3:f5:7b:32:c0:29:6b:70:37:75:e4:d5:3c:bc:92:
0d:39:aa:81:41:80:57:38:c2:17:b5:a8:77:20:77:ab:d1:51:
30:f2:fe:55:f9:fb:aa:c8:84:7b:e4:41:0b:10:de:4a:2a:ea:
e9:1f:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:04 2025 by rpki-client