Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: ARo4ciSCIqzOmec+gzK4dDkuUY77rs8y5sfDb9aHfrc=
Subject key identifier: 02:7A:47:0C:7A:60:2D:CE:A1:09:6F:79:A0:57:2A:B1:EF:0D:15:97
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 0194BCA9BD66B099914BD231997E030F24C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 114C
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: L3cK5THO3cWNgD1EuZZ+Ih8cxpACFSdpLQamanW2wNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bd:66:b0:99:91:4b:d2:31:99:7e:03:0f:24:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=027a470c7a602dcea1096f79a0572ab1ef0d1597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:8c:ea:3c:10:a8:8d:cd:7c:d6:cc:76:e8:
ac:af:11:b2:5d:0e:f1:92:10:c2:05:71:d1:17:3c:
03:6c:a0:03:5e:f1:64:b6:28:a2:c4:c4:ae:a5:a9:
83:8b:2c:e7:5c:ea:56:e9:99:6f:40:9a:77:ab:3d:
c6:95:57:ea:f7:78:4a:bd:87:c3:0e:12:a7:e9:58:
04:54:68:4f:fb:2b:e0:ca:c7:6d:ce:35:42:82:c0:
4d:df:be:67:b6:e1:44:31:70:12:50:73:81:da:88:
a2:fa:64:27:e4:6d:60:b7:ec:ff:02:b8:51:d7:79:
f8:c4:b7:d6:86:6e:b7:e5:a9:34:67:b9:3f:4d:08:
66:0f:51:8c:ab:9b:98:b7:13:36:e3:bb:a8:a7:9b:
8c:d1:87:52:cc:ae:62:08:c1:b6:ab:bb:94:31:83:
66:42:e3:1d:1f:3b:6a:cc:2c:99:14:d4:7c:fa:69:
c0:f7:c8:da:75:28:69:61:ea:58:89:d4:29:78:91:
b6:4c:c8:07:7c:86:a3:28:6e:e2:7b:29:5b:15:8d:
49:6a:6b:5e:63:eb:06:42:4e:7a:6a:00:12:5f:21:
2b:da:7a:a0:42:e7:80:fa:2b:60:93:89:f7:ce:f3:
a2:23:69:f7:3b:9e:15:f4:50:1b:ab:99:32:37:b9:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7A:47:0C:7A:60:2D:CE:A1:09:6F:79:A0:57:2A:B1:EF:0D:15:97
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:60:2d:f4:4d:ba:bb:ae:12:56:23:ae:4a:8d:f4:3a:db:c8:
56:a3:91:02:f9:d2:72:e7:69:c9:91:54:e4:24:0a:03:4f:d6:
df:c1:93:ee:50:1e:87:a0:d9:ed:75:36:00:0f:6c:11:fa:35:
fa:12:36:81:70:12:14:7c:67:5a:cb:38:8d:27:20:8a:ac:16:
92:0f:e5:67:d7:5d:82:0a:1b:39:b8:47:c8:bb:53:70:08:b3:
2c:84:bd:59:33:c9:aa:1f:dd:0b:f4:aa:a9:72:2d:ca:f0:47:
91:df:2c:58:9c:0f:2c:49:16:31:12:5e:65:54:47:f4:9a:a4:
e7:1a:8a:b6:f2:90:f7:72:e5:a5:ba:d6:bc:ee:96:81:3c:2e:
6c:71:9c:60:a6:7e:4f:7b:4c:4e:dc:1f:2b:e6:1f:4b:37:64:
3f:91:79:23:76:37:a8:65:0d:f6:8d:c4:ac:00:0d:ea:83:2c:
47:7f:23:b5:ed:7b:e7:a1:e2:2f:78:43:4a:1a:bd:77:88:b1:
a9:b2:e4:85:bd:24:13:28:09:00:d4:a0:d6:ca:9c:4f:2b:a9:
25:ce:fe:a8:0e:07:9c:1b:0b:99:3a:69:5a:dc:8c:3c:e2:e5:
2e:d9:4a:61:68:46:38:3c:85:58:c5:93:10:41:b1:9e:7a:64:
71:6f:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:13 2025 by rpki-client