Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: alzSSuL+OkppSU110QlJRAjtBx4X1vyabVUtKEhg+/g=
Subject key identifier: 50:75:14:0F:6A:2A:EC:1E:54:69:3A:AF:FA:1D:81:6A:A7:25:82:30
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 0194BC3CB98263E740BEF19C390812B2879D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0694
Signing time: Fri 31 Jan 2025 12:01:23 +0000
Manifest this update: Fri 31 Jan 2025 12:01:23 +0000
Manifest next update: Sat 01 Feb 2025 12:01:23 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: Wenihb/rKE8/Oz7xBZ8Wg9vB4vO7iUShkz3O9+NPBMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b9:82:63:e7:40:be:f1:9c:39:08:12:b2:87:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Jan 31 12:01:23 2025 GMT
Not After : Feb 1 12:01:23 2025 GMT
Subject: CN=5075140f6a2aec1e54693aaffa1d816aa7258230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:27:61:f1:59:62:b6:dd:ee:e8:c4:b1:92:
d4:42:c0:33:57:13:46:4f:43:23:87:10:0d:ae:ec:
96:ba:5b:f6:37:59:cf:fe:34:95:f0:7b:6d:ab:af:
4c:e9:c6:2e:b3:c7:8d:a0:19:9d:c5:ce:7f:98:25:
9e:db:d9:f5:d1:a4:66:b0:04:ce:47:82:a7:a5:62:
b8:51:6c:79:bb:fa:d7:54:67:e1:a3:8e:61:26:12:
25:e9:87:81:92:3a:43:46:2b:ac:aa:b1:3e:ab:e2:
58:be:2e:0d:93:83:0b:8f:0a:0a:c6:e4:48:31:96:
2e:8d:08:de:1c:f6:ff:8a:62:76:e9:7e:cc:05:9e:
16:4c:bb:9a:2b:2a:81:6a:18:9d:07:56:6f:42:a1:
e0:e3:65:18:5c:be:65:21:5e:c3:4c:20:e3:29:eb:
82:c7:c9:78:e4:6b:5f:36:39:42:32:6c:82:53:fb:
70:f7:44:23:dd:62:d1:b2:8a:f4:ee:98:0b:74:e1:
38:cc:46:af:ca:40:ab:45:ed:ce:22:c1:87:4d:2f:
75:fd:83:74:3c:5c:f7:2b:bd:1d:58:b2:4f:2a:0e:
30:3c:95:2c:7a:75:72:ba:a4:70:ba:46:df:9d:cd:
a4:4d:ae:23:d0:fa:37:f5:67:3c:4b:29:35:7c:16:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:14:0F:6A:2A:EC:1E:54:69:3A:AF:FA:1D:81:6A:A7:25:82:30
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c7:96:e6:7f:21:05:77:1b:a7:97:ab:02:bb:ce:84:e5:1d:
3f:bb:3e:30:7f:3a:2b:9e:b8:81:1c:ce:4e:ee:d4:49:37:e6:
3b:93:e5:f9:4f:3a:18:19:c3:6d:51:ef:19:f5:3d:cb:fa:db:
7b:d8:2c:68:01:20:53:e8:c9:ae:3d:47:81:cb:6f:67:d0:54:
26:58:07:ff:1d:e5:58:d5:93:b8:9b:17:c3:a6:f7:9c:fc:1b:
e0:7e:ef:ac:35:09:c3:2f:49:93:95:ab:db:2c:d0:4d:0b:f9:
95:88:e2:a5:38:14:2b:80:b2:1c:b4:96:1b:57:75:f7:30:58:
41:fe:04:a3:1b:38:d9:ff:bc:65:34:7a:dc:bb:18:bf:9c:9f:
a3:38:1a:5c:6d:43:e5:78:3d:55:1c:e4:68:e4:f5:9b:c4:05:
e5:5e:40:e3:8d:70:15:f0:36:20:a3:6a:27:1e:99:1c:73:24:
6f:86:b1:be:af:f1:aa:19:69:6c:18:e4:cb:11:97:bb:a9:2d:
87:c8:dd:8a:c1:45:2a:6c:76:72:cc:9c:a2:0d:c4:2b:fc:f6:
83:a6:dd:24:37:57:89:28:83:9d:ff:45:fc:21:3e:e6:2e:f4:
fe:49:ac:fb:00:1b:c9:76:cb:1e:a9:ba:e9:e1:3a:40:e8:4d:
8d:85:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:46 2025 by rpki-client