Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
File: 2f2qHAH51r-3yaAN4AlCpGY2A2U.mft (raw, json)
Hash identifier: Xv/z/bvof+w5bO0a2auUiZ9bSVrDjOdwYTlFbAbTnmU=
Subject key identifier: 39:55:2B:EE:61:4E:38:D5:DC:DE:33:C7:2C:1C:A7:D5:B6:90:58:D1
Authority key identifier: D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65
Certificate issuer: /CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
Certificate serial: 0194F5BEB400E396254DE24FF5E5BF0B09E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
Manifest number: 08CF
Signing time: Tue 11 Feb 2025 16:01:43 +0000
Manifest this update: Tue 11 Feb 2025 16:01:43 +0000
Manifest next update: Wed 12 Feb 2025 16:01:43 +0000
Files and hashes: 1: 2f2qHAH51r-3yaAN4AlCpGY2A2U.crl (hash: eGqp6+IUJAfS3UHOMYWLWXwgJlmtrS0rQUdp+mSyQkI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:be:b4:00:e3:96:25:4d:e2:4f:f5:e5:bf:0b:09:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
Validity
Not Before: Feb 11 16:01:43 2025 GMT
Not After : Feb 12 16:01:43 2025 GMT
Subject: CN=39552bee614e38d5dcde33c72c1ca7d5b69058d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:2a:ac:98:d3:cc:00:e8:d3:8f:d0:d2:25:
53:42:bb:57:29:19:11:b0:2e:36:8c:06:93:bb:62:
e4:a3:b2:2f:0c:ee:b8:02:28:73:92:5b:4c:52:16:
50:cb:b9:02:58:be:8a:98:e5:d0:60:b0:94:4e:4b:
0e:a3:e6:9c:b4:01:a0:79:6c:99:ab:9e:8b:e8:ab:
91:38:f1:d6:2d:4d:72:0b:34:28:64:a8:c8:35:b4:
16:9d:e4:78:a2:f3:79:b7:29:0a:3d:ad:41:c6:15:
eb:5d:d8:be:a5:7a:72:30:7d:27:3b:cc:53:63:61:
0f:bf:b8:24:22:e8:72:6e:eb:a7:51:ea:c2:30:0c:
c0:f2:7a:fa:47:6a:9c:38:c7:0c:0c:72:24:a0:8f:
55:b1:79:fd:c1:68:d2:29:3e:5d:59:9e:98:76:ad:
d6:73:22:55:01:c4:13:e4:3c:f5:ca:c8:a7:ad:ca:
a6:c1:b0:7e:ad:76:4c:91:05:1a:77:cd:65:9e:95:
b5:13:30:9a:40:db:46:e9:76:14:e9:da:57:18:92:
c8:44:7a:76:db:dd:50:ea:79:61:d6:4a:b1:66:d2:
fc:2f:e2:0a:b5:d5:25:66:cd:1a:58:82:95:f5:fc:
bb:55:a0:35:b1:d6:d6:ff:8a:9f:13:23:af:10:4c:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:55:2B:EE:61:4E:38:D5:DC:DE:33:C7:2C:1C:A7:D5:B6:90:58:D1
X509v3 Authority Key Identifier:
keyid:D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c5:d2:4b:5c:19:bc:7a:6a:58:5f:0d:cf:59:40:3b:30:b7:
35:7b:e4:7f:51:3f:a3:72:34:dc:95:84:73:ff:87:73:a0:99:
ba:28:61:19:1e:e6:f3:70:64:24:35:e4:ec:f4:b5:73:92:70:
2b:bc:d5:44:5c:f6:25:47:3c:16:3a:d9:ed:26:73:07:20:87:
c0:01:7f:69:84:9b:61:1b:7d:3c:4b:0b:2f:e7:c6:b1:38:a3:
60:c9:1e:cf:fb:c4:70:04:52:93:5d:04:27:d2:85:ed:39:da:
ad:b1:00:47:88:19:83:9e:d6:d4:f1:63:54:40:cb:8b:8a:cd:
cd:64:5d:48:2d:ac:42:74:79:d7:af:04:97:f5:40:3d:37:8a:
16:c0:00:4c:40:18:90:59:3c:e3:5b:b0:31:39:c7:e9:cf:e2:
90:24:fd:ff:da:de:46:6e:1d:4c:9f:3f:3b:76:79:10:ad:a1:
18:16:e8:54:dc:bd:16:ff:ab:e8:c3:98:30:6e:f8:f8:63:7e:
de:c8:8a:8b:5e:14:3a:21:03:56:9a:96:48:2a:04:8e:09:9f:
fe:a6:4d:ea:79:be:3c:5a:0f:82:06:1d:9b:9c:ef:40:b3:72:
12:11:fc:c6:7f:ef:f3:2e:9d:96:28:e9:30:3a:e0:84:65:a9:
98:21:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:33:01 2025 by rpki-client