Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
File: 2jqEPf4emgiI_5tbQWQnRQvWjcE.mft (raw, json)
Hash identifier: 5v5wAauKbHepaRw6qLQ/9RYWhVRVSeZ6WT/qRozlpcM=
Subject key identifier: 7F:B4:6B:4F:6B:1A:78:DA:87:D8:DC:29:D3:8A:B6:D6:AC:8D:F2:5F
Authority key identifier: DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
Certificate issuer: /CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Certificate serial: 01953FFBA9DCC9611129587F5DBF42EC5A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
Manifest number: 0825
Signing time: Wed 26 Feb 2025 02:00:12 +0000
Manifest this update: Wed 26 Feb 2025 02:00:12 +0000
Manifest next update: Thu 27 Feb 2025 02:00:12 +0000
Files and hashes: 1: 2jqEPf4emgiI_5tbQWQnRQvWjcE.crl (hash: 9cupYgcPD8QRY+WuJE4cKb29MRHU6hWvMs+eXh9P0d8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3f:fb:a9:dc:c9:61:11:29:58:7f:5d:bf:42:ec:5a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Validity
Not Before: Feb 26 02:00:12 2025 GMT
Not After : Feb 27 02:00:12 2025 GMT
Subject: CN=7fb46b4f6b1a78da87d8dc29d38ab6d6ac8df25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:32:bb:15:0f:68:77:06:e5:45:77:e0:64:
ab:a6:a3:da:0a:83:f9:c8:0d:0a:ae:ae:0a:9e:81:
c9:1c:a2:72:28:9f:5f:c6:d5:48:76:29:67:90:a4:
74:c2:c0:b5:25:5b:3d:09:56:96:3c:4c:2b:bd:94:
02:39:5b:ed:4b:53:fd:32:e2:b1:59:7b:ae:9f:21:
d9:27:e2:59:65:5a:63:29:bc:83:e7:32:7c:f0:62:
ee:77:6e:ea:d7:fb:83:26:d7:f7:9a:43:3b:f3:50:
71:64:15:9e:95:5c:68:17:bf:97:3a:85:a1:f1:da:
7a:d2:7e:26:69:4a:d2:b8:6e:53:4f:f3:92:9a:c4:
b1:fb:e8:92:91:6a:85:05:d9:f8:a1:c2:84:41:7b:
0a:fc:d6:dc:06:42:f3:24:cb:ec:86:4c:69:5b:d3:
78:c2:cf:dd:87:29:48:22:69:94:8b:a5:22:7c:b7:
b4:7a:d2:58:41:58:0c:ab:21:05:6c:e3:7d:aa:06:
87:bb:28:24:27:25:be:9f:fb:40:d0:f4:49:ef:8f:
ce:24:83:5a:fa:13:7d:c8:0f:c5:36:7e:42:bc:3a:
1a:9f:b7:58:3a:6b:0f:0c:b1:9c:7d:47:6d:85:13:
5f:57:99:b6:e2:47:d6:9e:b4:98:21:7c:53:1a:97:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:6B:4F:6B:1A:78:DA:87:D8:DC:29:D3:8A:B6:D6:AC:8D:F2:5F
X509v3 Authority Key Identifier:
keyid:DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1b:4a:0e:ac:f7:66:68:14:1c:98:94:c5:5c:4b:72:7f:58:
75:e9:12:1f:ac:f9:6e:d7:b3:e4:d1:21:73:c0:6c:98:a0:b3:
60:40:f7:a9:91:55:08:05:45:17:53:83:11:ee:8b:11:31:fb:
8b:8b:7b:f4:12:22:ac:f6:97:59:db:4e:8c:0b:0e:44:9c:45:
88:06:9a:80:2a:7c:50:80:ce:c3:a9:a2:e5:93:15:0f:d9:dc:
73:65:59:cb:4d:f6:09:e5:99:3d:12:ec:d3:d3:77:d4:6f:c9:
54:17:e7:a6:3d:cb:47:90:57:35:30:a8:ad:b6:e2:4e:8a:b0:
b5:8e:a7:60:f2:3d:8c:79:8d:df:82:4d:ef:75:bf:17:d9:dd:
3f:80:ac:46:63:50:a5:17:8a:e9:c2:9f:54:4b:9c:bf:a8:db:
0e:04:07:d6:42:e6:bb:2b:18:1d:98:13:45:e2:41:da:d9:90:
e7:aa:8a:ba:a3:aa:12:fb:53:96:83:f4:39:0a:9b:6e:40:ea:
ab:1e:4e:aa:7e:59:46:f2:ee:c3:77:f1:dc:8c:2f:a0:7c:fc:
d1:45:9b:b0:b1:73:d9:b4:80:05:4a:8f:9d:a1:99:d4:92:23:
1f:76:06:41:71:0f:cf:2e:d0:27:84:be:86:92:e3:c5:bf:eb:
db:c1:35:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZU/+6ncyWERKVh/Xb9C7FpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2E4NDNkZmUxZTlhMDg4OGZmOWI1YjQxNjQyNzQ1MGJk
NjhkYzEwHhcNMjUwMjI2MDIwMDEyWhcNMjUwMjI3MDIwMDEyWjAzMTEwLwYDVQQD
Eyg3ZmI0NmI0ZjZiMWE3OGRhODdkOGRjMjlkMzhhYjZkNmFjOGRmMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmQyuxUPaHcG5UV34GSrpqPaCoP5
yA0Krq4KnoHJHKJyKJ9fxtVIdilnkKR0wsC1JVs9CVaWPEwrvZQCOVvtS1P9MuKx
WXuunyHZJ+JZZVpjKbyD5zJ88GLud27q1/uDJtf3mkM781BxZBWelVxoF7+XOoWh
8dp60n4maUrSuG5TT/OSmsSx++iSkWqFBdn4ocKEQXsK/NbcBkLzJMvshkxpW9N4
ws/dhylIImmUi6UifLe0etJYQVgMqyEFbON9qgaHuygkJyW+n/tA0PRJ74/OJINa
+hN9yA/FNn5CvDoan7dYOmsPDLGcfUdthRNfV5m24kfWnrSYIXxTGpcn2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+0a09rGnjah9jcKdOKttasjfJfMB8GA1UdIwQY
MBaAFNo6hD3+HpoIiP+bW0FkJ0UL1o3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpxRVBmNGVtZ2lJXzV0YlFXUW5SUXZXamNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hYWUyOWUtMWZmNC00NDE1LTk0YTkt
ZjdmMjkzN2RkMzA1LzEvMmpxRVBmNGVtZ2lJXzV0YlFXUW5SUXZXamNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hYWUyOWUtMWZmNC00NDE1LTk0YTktZjdmMjkzN2RkMzA1
LzEvMmpxRVBmNGVtZ2lJXzV0YlFXUW5SUXZXamNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhtKDqz3
ZmgUHJiUxVxLcn9YdekSH6z5btez5NEhc8BsmKCzYED3qZFVCAVFF1ODEe6LETH7
i4t79BIirPaXWdtOjAsORJxFiAaagCp8UIDOw6mi5ZMVD9ncc2VZy032CeWZPRLs
09N31G/JVBfnpj3LR5BXNTCorbbiToqwtY6nYPI9jHmN34JN73W/F9ndP4CsRmNQ
pReK6cKfVEucv6jbDgQH1kLmuysYHZgTReJB2tmQ56qKuqOqEvtTloP0OQqbbkDq
qx5Oqn5ZRvLuw3fx3IwvoHz80UWbsLFz2bSABUqPnaGZ1JIjH3YGQXEPzy7QJ4S+
hpLjxb/r28E1vw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:47:55 2025 by rpki-client