Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: 2RaG3IM3/SWZ9rsinUGEfUhHuLDMT3I8nvZCJKF1F5k=
Subject key identifier: 66:75:B5:14:27:6E:60:B4:47:6D:98:76:33:1E:BF:0D:D2:80:E8:91
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 0195E15916EAA4802CC13FCF8AF56A72E490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 14BE
Signing time: Sat 29 Mar 2025 10:01:06 +0000
Manifest this update: Sat 29 Mar 2025 10:01:06 +0000
Manifest next update: Sun 30 Mar 2025 10:01:06 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: +t3d5eKG+jG8hEZwArUwHlWM8DZ6ntmsqqeVOiUETUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:16:ea:a4:80:2c:c1:3f:cf:8a:f5:6a:72:e4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Mar 29 10:01:06 2025 GMT
Not After : Mar 30 10:01:06 2025 GMT
Subject: CN=6675b514276e60b4476d9876331ebf0dd280e891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:e3:8c:20:dc:ad:75:2a:08:26:cd:ea:14:
7b:14:27:03:fe:40:64:81:d5:f7:e7:8f:e5:98:78:
ed:81:f8:b4:f7:ee:df:2c:47:94:8b:b1:d6:0c:fd:
81:28:ac:93:2d:c6:80:f9:59:47:39:fe:43:d9:65:
dd:5e:19:1a:f6:d9:87:68:fb:ca:85:0c:4a:25:41:
38:d4:19:02:d6:4f:9b:d8:92:04:79:4d:18:29:56:
ce:c0:b0:9d:dd:91:a3:d3:c3:19:68:6b:2d:18:9a:
ed:13:74:e6:b3:a4:7a:af:46:d5:35:53:03:54:23:
bd:6c:ee:38:a3:bc:60:29:08:85:e9:49:1e:ee:c9:
16:32:e2:91:3c:7d:73:4b:09:e3:69:99:f0:56:8c:
96:58:c4:94:45:68:30:8c:9a:59:d4:ad:70:04:e7:
ef:dc:c0:3b:63:ca:3c:f3:00:cf:a1:5f:29:c1:2e:
90:98:bb:dd:3a:59:09:9c:b3:de:1b:00:23:c5:ce:
0c:85:97:99:c1:79:be:ac:5b:c1:e6:a8:56:78:53:
d4:12:77:e5:83:9f:70:31:43:57:df:3a:6a:4c:aa:
c4:4d:c9:1a:be:ef:ba:da:50:9d:cd:c6:cb:e4:25:
96:58:98:d9:80:4c:34:81:7f:4f:0d:bc:f2:fb:44:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:B5:14:27:6E:60:B4:47:6D:98:76:33:1E:BF:0D:D2:80:E8:91
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6c:17:4f:6b:be:7e:f8:5f:4c:65:5e:d3:3a:0e:19:ed:ad:
14:20:3f:7e:1b:6c:50:16:5a:3b:5b:cb:aa:77:36:2a:b6:f5:
ef:bb:48:54:ca:6f:db:27:f1:2e:69:06:c1:00:03:85:1a:c3:
94:95:a6:e0:a4:fc:a1:df:d8:05:0d:dc:6e:4d:db:d9:77:f7:
09:e8:c4:00:b6:55:9d:1c:20:17:b9:fb:87:5d:31:99:88:bd:
ea:3e:6a:4a:a1:d4:63:b1:b6:73:a9:4f:50:88:7f:3b:c2:42:
72:7b:07:2b:56:1f:e9:e1:19:75:6b:e4:6b:d3:43:e4:65:a1:
8d:6b:ef:0d:72:d3:36:3b:d3:61:c4:fd:16:b0:92:8f:95:d1:
b4:c7:d6:c0:91:8b:d1:de:a4:94:45:a9:ce:2f:7d:d3:0d:ca:
3f:4f:cf:43:23:23:e2:b4:8c:6b:ed:36:4f:b6:30:31:65:9d:
cd:0f:c8:89:51:79:e6:b0:20:a7:f8:9d:87:0e:61:ba:16:6e:
63:fe:78:12:2a:3d:8d:5a:13:42:5a:b6:fb:75:e8:14:ae:0e:
72:68:0e:ff:07:2f:ca:9e:10:62:78:0f:dc:f7:c0:9e:59:a9:
fd:b5:65:e2:8d:df:ba:be:a7:3e:63:43:04:3f:55:f1:ea:ea:
5e:9a:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:36 2025 by rpki-client