Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
File: 2DZCm5upPLpYJ3661wmzfnYDzdk.mft (raw, json)
Hash identifier: vDNeIyjo9L0aZs4TJrMExlWxfRGn/zGFaHaPWiAKcao=
Subject key identifier: 20:57:E7:B2:70:AD:4F:00:7F:5D:7E:CF:52:BD:23:9A:F4:62:F7:4E
Authority key identifier: D8:36:42:9B:9B:A9:3C:BA:58:27:7E:BA:D7:09:B3:7E:76:03:CD:D9
Certificate issuer: /CN=d836429b9ba93cba58277ebad709b37e7603cdd9
Certificate serial: 019522288106A078D5B2A976F24C0137EDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DZCm5upPLpYJ3661wmzfnYDzdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
Manifest number: 0D5A
Signing time: Thu 20 Feb 2025 07:00:34 +0000
Manifest this update: Thu 20 Feb 2025 07:00:34 +0000
Manifest next update: Fri 21 Feb 2025 07:00:34 +0000
Files and hashes: 1: 2DZCm5upPLpYJ3661wmzfnYDzdk.crl (hash: LuveBq9eaIgnCWSiOSwiE3pgF8pFGJngqvs6muctrXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:28:81:06:a0:78:d5:b2:a9:76:f2:4c:01:37:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d836429b9ba93cba58277ebad709b37e7603cdd9
Validity
Not Before: Feb 20 07:00:34 2025 GMT
Not After : Feb 21 07:00:34 2025 GMT
Subject: CN=2057e7b270ad4f007f5d7ecf52bd239af462f74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e4:56:20:a3:da:1c:1a:9c:d9:11:87:36:2f:
1a:ca:57:d0:59:12:77:c6:a1:69:98:15:7c:5a:3f:
fb:ba:46:ff:ee:4a:0b:bb:ec:09:7e:b4:eb:d3:a9:
08:f4:9c:e6:41:7a:08:aa:50:a8:74:5b:7f:94:e7:
04:f4:2a:50:2d:2f:c8:79:0a:62:a0:4f:00:f9:98:
5b:cb:1f:1b:1e:85:6f:27:c3:55:82:e8:8c:b0:b9:
d8:3d:58:53:d6:82:ab:04:b3:7b:d7:b1:63:ac:19:
fa:48:f4:ef:29:83:9c:29:5b:eb:e3:96:b9:3c:b4:
a2:7f:63:de:c0:fd:fc:45:e6:29:cd:a0:9d:93:69:
81:89:76:0c:7f:f1:43:80:0a:01:77:58:72:26:ee:
5c:b9:81:65:04:88:26:0d:cd:33:57:0b:c4:47:d8:
ce:a1:c0:49:68:68:57:35:6d:63:74:29:3f:6d:f6:
ed:76:34:46:db:b4:70:23:dd:bd:47:1d:ec:c0:e6:
19:a9:d7:b1:20:71:93:ad:8f:66:50:d2:1e:b6:3c:
92:14:64:5c:20:97:05:28:30:df:27:d2:cf:b3:79:
5e:d8:c2:fb:81:76:be:65:eb:60:3a:49:39:11:36:
01:ca:4f:31:18:ab:1b:86:3a:43:b9:19:dc:51:bc:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:E7:B2:70:AD:4F:00:7F:5D:7E:CF:52:BD:23:9A:F4:62:F7:4E
X509v3 Authority Key Identifier:
keyid:D8:36:42:9B:9B:A9:3C:BA:58:27:7E:BA:D7:09:B3:7E:76:03:CD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DZCm5upPLpYJ3661wmzfnYDzdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:07:75:88:e4:58:fa:89:01:c0:bd:2e:94:05:42:02:cc:4c:
62:7f:d3:6a:1a:65:88:5d:42:9f:0e:d1:c8:c5:e2:8b:f9:58:
db:32:52:8a:65:7a:57:61:12:86:96:cc:ef:de:1d:cc:29:6c:
a1:78:3e:60:b3:ef:73:b7:8b:61:b5:59:0e:99:22:88:72:e5:
21:4a:df:44:f1:09:8b:ab:ef:ca:2b:95:85:8c:94:ac:ea:69:
8b:ba:54:a0:d8:a3:5e:1b:11:cd:d7:9b:eb:01:eb:d4:80:10:
04:10:c8:62:d6:41:67:52:ea:65:d5:49:bc:50:b8:24:90:ae:
e5:fb:fb:7b:10:6b:c5:d7:6d:6a:03:1c:9b:92:18:e6:c4:92:
c3:38:e6:e3:f5:7c:64:32:dd:e1:5f:56:89:72:db:e3:2e:d1:
c5:c6:63:b3:f2:e9:8b:03:d2:a0:1b:60:6d:ac:ed:ac:4c:51:
fb:a2:38:a2:38:15:83:55:7c:25:04:b6:8b:91:a1:04:89:9d:
70:42:7f:78:09:fd:b3:e3:17:7f:8a:e5:86:c4:aa:ac:5e:b2:
20:4f:b6:7b:40:0d:32:a6:35:e9:f8:57:8e:49:84:c3:14:9a:
bf:6e:93:b2:8c:e5:43:b4:ad:31:f6:b3:b1:9c:d4:3b:f5:f7:
6d:ee:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:32:50 2025 by rpki-client