Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
File: 2jqEPf4emgiI_5tbQWQnRQvWjcE.mft (raw, json)
Hash identifier: xs8jkty1qo1jPLs4RltMzqd2zNdvMWnuPc+2io0vCWk=
Subject key identifier: DB:09:89:8C:7F:95:4E:84:DD:52:24:8F:38:36:24:85:DB:9E:E4:30
Authority key identifier: DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
Certificate issuer: /CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Certificate serial: 01953E0D3FF0473FB9EE9DCA7DDCEE95E508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
Manifest number: 0824
Signing time: Tue 25 Feb 2025 17:00:10 +0000
Manifest this update: Tue 25 Feb 2025 17:00:10 +0000
Manifest next update: Wed 26 Feb 2025 17:00:10 +0000
Files and hashes: 1: 2jqEPf4emgiI_5tbQWQnRQvWjcE.crl (hash: c+NA+nMN3H1tUmhSsMh2LnjJMrzioZ+v5xm98Hp5tdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:0d:3f:f0:47:3f:b9:ee:9d:ca:7d:dc:ee:95:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Validity
Not Before: Feb 25 17:00:10 2025 GMT
Not After : Feb 26 17:00:10 2025 GMT
Subject: CN=db09898c7f954e84dd52248f38362485db9ee430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:1f:a5:c4:2d:e4:78:10:c0:55:5e:38:60:
c9:8b:8d:41:d4:d8:5d:5a:21:99:b4:4e:1e:87:47:
20:cf:a7:1f:ba:cb:76:ab:02:11:46:23:15:ee:05:
ba:95:8a:fc:fd:89:de:00:25:b7:74:60:44:46:33:
8b:9f:ba:35:61:9f:6f:2c:6c:5c:e6:a1:b0:74:09:
2c:76:61:d0:7f:4c:14:26:7e:0e:6e:0d:af:e9:d1:
e0:49:df:57:03:77:18:33:de:a4:33:f1:33:91:67:
a1:41:bf:e5:af:27:0b:fa:5f:01:4a:c6:41:c0:ac:
c9:b9:ea:c7:5c:11:69:6e:d8:eb:63:a0:df:bd:e1:
f1:d6:c3:19:4b:3c:40:fc:f1:19:8c:4c:ef:cb:30:
f4:67:cf:dc:64:c0:2c:ea:7b:ba:19:f7:05:1f:ab:
bf:74:c5:bb:82:1e:c6:b7:14:42:49:07:b2:38:c7:
41:13:8b:f2:03:1c:0f:27:84:34:89:20:0a:89:86:
4c:77:ff:15:39:51:42:f4:71:00:9a:7e:0b:93:38:
32:31:89:7e:0b:96:fd:66:b3:4b:f9:03:76:c9:29:
cc:43:aa:b3:dc:56:3b:5a:70:74:98:a8:a3:2f:cb:
01:2c:9a:00:39:41:f2:ef:a8:d8:c5:4b:69:d6:32:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:09:89:8C:7F:95:4E:84:DD:52:24:8F:38:36:24:85:DB:9E:E4:30
X509v3 Authority Key Identifier:
keyid:DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:11:62:55:4a:a4:68:34:b2:b2:df:9f:3e:50:d5:a5:b5:18:
68:7d:20:85:40:b8:c3:f6:8a:a0:d0:3d:1d:43:b5:2e:d4:8d:
f0:27:4d:3d:35:5a:0e:fc:08:c5:55:dc:55:3a:01:fa:22:87:
8b:8b:a5:a0:c5:26:e3:15:fb:8c:14:c5:ed:6d:fa:bf:0a:dc:
48:f5:6c:db:3a:76:d6:64:da:1a:90:3a:13:a6:ba:2c:28:6e:
e1:49:b9:84:20:3f:fb:5f:50:56:41:0e:8f:11:ba:7f:ca:f5:
f0:d4:cb:15:e9:6b:11:27:ad:18:ba:e0:62:f1:c7:d0:66:cb:
fe:be:e3:fc:ad:a7:ec:a8:2a:2a:a0:51:22:fb:22:9e:14:d8:
3d:b3:ed:f3:68:c8:89:10:6a:58:1e:ea:68:27:5a:6f:36:a1:
30:5d:a1:cd:18:32:19:4f:69:a2:95:4a:ab:48:be:79:27:54:
df:00:1d:a3:7f:34:fa:f5:17:44:1e:44:56:f7:84:ad:bd:b7:
74:73:e1:59:01:29:8b:ca:e3:1a:b1:9c:6a:56:1f:c3:00:7d:
b0:23:10:f7:3a:58:f8:36:42:24:45:88:08:d7:7d:f0:57:d5:
ee:2e:85:75:64:5f:0e:ba:5a:36:a5:4c:9e:1b:60:42:6e:f1:
a3:b6:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:41:12 2025 by rpki-client