Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File: 2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier: /9nFS8Rroo4G/f5lvr5c6vrw2XsFAdLCWPvRjnn5zhM=
Subject key identifier: 9F:42:3A:FF:8B:A9:E0:63:0B:50:BA:79:81:59:9B:E6:56:4F:EB:06
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer: /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial: 0194BBCDD56B25694236AA14F1BFEA3C1E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: 963VqWD9vvhMwjmblKWwDpNLoifTsqhorBtWS53VgLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d5:6b:25:69:42:36:aa:14:f1:bf:ea:3c:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=9f423aff8ba9e0630b50ba7981599be6564feb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:c7:30:b2:a6:66:65:73:3c:91:c5:76:f8:
6e:6f:93:f6:2b:21:49:85:ca:35:b6:70:16:fe:96:
aa:0d:12:49:6a:24:ea:59:cf:b2:4b:76:54:e5:9b:
11:54:9f:67:56:c4:59:d8:27:af:f4:5a:78:f4:8f:
85:25:bd:23:ec:db:e4:a6:6e:63:69:ea:ad:2b:f3:
e3:59:3b:1e:db:de:8a:6d:41:60:7d:4c:2b:df:6b:
d1:f6:a9:3e:6d:9c:42:de:98:d5:9e:79:9f:42:3c:
a9:aa:0b:a4:ae:64:e1:03:df:2d:c0:9f:18:ab:fd:
f5:8b:fd:11:1b:68:78:79:98:73:22:c7:c6:8e:07:
ca:2e:29:fd:ab:49:38:53:61:0a:e0:ab:54:ad:86:
1b:68:4f:99:22:87:87:15:e7:d0:9b:66:c6:61:41:
87:04:01:ed:dd:7e:be:3b:93:02:f1:ec:f7:f8:0a:
99:91:43:97:ca:19:61:ea:93:47:f8:50:65:0e:04:
74:e7:98:01:0d:bd:b6:3a:d9:ee:22:76:62:1f:ec:
d8:bc:11:f2:ea:46:75:f7:a0:5f:72:66:b1:05:75:
32:a1:92:6d:f9:c3:18:34:7d:55:2d:d5:d5:8f:eb:
27:6b:e1:f9:2c:f9:cc:a9:03:2d:d9:5d:c5:66:63:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:3A:FF:8B:A9:E0:63:0B:50:BA:79:81:59:9B:E6:56:4F:EB:06
X509v3 Authority Key Identifier:
keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0b:c6:ef:a1:a6:52:4b:a4:52:a3:00:1b:8d:60:16:70:e7:
25:ff:c7:63:24:d4:a1:7b:5a:9b:10:40:03:e4:a5:14:b5:72:
a2:6e:dd:a2:d5:a7:39:2d:b7:b6:16:d6:a8:f9:5a:2d:2a:2f:
c4:7d:6a:bd:4d:05:28:eb:e1:65:08:c8:55:45:ae:05:b8:80:
30:26:08:5a:1f:10:75:29:a5:51:81:f1:1f:08:c8:92:61:b5:
54:b2:1a:00:e8:f7:d1:6b:d0:b9:c2:7d:da:0d:6d:46:9d:96:
5e:27:0b:b1:49:bd:26:eb:08:82:09:36:6a:53:d6:cd:48:fa:
06:be:59:25:c3:a6:ed:7f:11:67:70:f7:d0:3c:29:89:d3:5f:
00:1e:c7:42:64:c2:09:67:00:04:3a:b3:7a:88:8e:25:24:1f:
3d:a2:61:8e:21:11:d2:b6:81:3c:5c:bd:ab:af:d7:b8:30:91:
44:33:42:64:14:5d:38:6f:c9:5b:31:78:da:5d:09:11:c9:94:
00:e6:c0:ff:95:58:d7:87:1f:75:ec:25:ca:fa:0d:5a:1b:fb:
c8:19:e7:a1:2a:85:c1:d6:4b:07:7a:f9:3d:14:65:fd:69:68:
54:e8:4a:72:97:a6:91:ea:39:9f:4c:63:77:d9:c6:8d:eb:35:
7d:26:4a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:47 2025 by rpki-client