Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/2IDADSXlp359M0zt-eDyaixaoyg.mft
File: 2IDADSXlp359M0zt-eDyaixaoyg.mft (raw, json)
Hash identifier: ASaUekxlURgiy2robHMJc41am8oDxc0+8MiS52j8Jdg=
Subject key identifier: 7E:1C:8C:3B:8E:46:63:47:88:16:8C:3C:FD:FB:02:D6:1B:F5:6F:B9
Authority key identifier: D8:80:C0:0D:25:E5:A7:7E:7D:33:4C:ED:F9:E0:F2:6A:2C:5A:A3:28
Certificate issuer: /CN=d880c00d25e5a77e7d334cedf9e0f26a2c5aa328
Certificate serial: 01909B71F2B41104D38383062DBE9BE48460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IDADSXlp359M0zt-eDyaixaoyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/2IDADSXlp359M0zt-eDyaixaoyg.mft
Manifest number: 09A9
Signing time: Wed 10 Jul 2024 07:00:54 +0000
Manifest this update: Wed 10 Jul 2024 07:00:54 +0000
Manifest next update: Thu 11 Jul 2024 07:00:54 +0000
Files and hashes: 1: 2IDADSXlp359M0zt-eDyaixaoyg.crl (hash: S2T3lVT3mWNJn7GMaatWTIgCCdlrRWC1Hfvgd1TtxBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:71:f2:b4:11:04:d3:83:83:06:2d:be:9b:e4:84:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d880c00d25e5a77e7d334cedf9e0f26a2c5aa328
Validity
Not Before: Jul 10 07:00:54 2024 GMT
Not After : Jul 11 07:00:54 2024 GMT
Subject: CN=7e1c8c3b8e46634788168c3cfdfb02d61bf56fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:e7:61:a9:72:71:f7:bf:d3:19:c2:69:51:
a8:81:0a:74:7c:2b:4b:76:ec:92:08:07:f0:52:ae:
6f:01:0c:29:39:0a:8c:6a:b0:95:25:21:30:28:2d:
9e:51:d1:1b:85:d9:9f:be:f2:7f:25:d8:cb:a3:35:
71:2c:c3:05:61:cf:fa:3b:89:07:ba:fc:c5:1e:10:
b2:dd:6a:c9:16:ff:86:77:b4:e7:6a:1f:23:42:96:
48:e1:70:57:dd:1e:7f:ad:c9:85:18:0c:88:5c:8a:
a1:a1:0f:18:a8:14:b0:10:c0:c2:e6:09:b1:7b:94:
43:d1:6b:56:d6:a8:11:02:cc:10:aa:f3:26:72:ab:
8e:71:c2:e3:2c:47:76:bf:dc:b9:02:21:36:49:01:
6a:4a:a0:82:e8:7e:70:1b:50:c4:da:25:f8:db:0b:
a9:56:90:15:46:49:27:80:fe:72:ac:67:65:2f:55:
3c:5c:56:85:85:e8:9d:5e:5e:7e:2a:e8:d5:5d:3b:
b4:a5:cf:3d:69:8c:91:3f:97:46:8f:16:8f:40:e0:
f0:18:a9:23:25:e6:5e:f4:c0:3c:05:54:12:71:04:
38:f4:33:b4:22:c6:b7:a9:80:11:c3:02:5e:63:12:
dd:ac:85:7e:36:94:55:82:d9:ad:79:b0:18:17:13:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1C:8C:3B:8E:46:63:47:88:16:8C:3C:FD:FB:02:D6:1B:F5:6F:B9
X509v3 Authority Key Identifier:
keyid:D8:80:C0:0D:25:E5:A7:7E:7D:33:4C:ED:F9:E0:F2:6A:2C:5A:A3:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IDADSXlp359M0zt-eDyaixaoyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/2IDADSXlp359M0zt-eDyaixaoyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/2IDADSXlp359M0zt-eDyaixaoyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7a:bc:ac:bb:8e:86:c6:9a:da:a2:7a:f6:89:13:f2:26:de:
61:95:d3:c8:4c:79:8e:4d:d0:5b:7e:e2:1e:27:ff:6a:64:06:
1b:bb:d3:c4:ba:ab:40:b7:91:16:c1:74:b9:6a:62:ca:f8:68:
7a:8c:2b:cf:7d:48:d8:82:c5:7d:2e:fa:78:40:ae:9d:72:f8:
18:6e:3a:63:21:c7:e4:a6:e8:42:61:00:84:35:79:71:c3:9f:
bb:2a:d6:c5:0c:7a:11:bb:30:a5:39:83:85:96:c7:79:e2:ed:
45:30:7d:6a:75:89:9d:25:86:e4:6f:0e:d6:ba:04:5e:fe:d2:
43:76:9b:e7:4b:85:b1:39:be:a2:4c:ee:a0:9a:27:71:57:12:
f0:91:04:e1:56:2a:e5:2c:1f:87:90:9b:0b:97:75:de:28:c9:
2f:e3:cc:9c:8a:7b:73:b4:95:e8:76:d1:17:99:8b:37:c8:b2:
dc:c9:ac:cd:db:66:00:ac:08:4f:08:28:a8:84:ee:c4:a8:c2:
f2:4f:0b:c3:3d:7c:88:72:f1:dc:74:a2:56:01:26:51:28:ca:
56:15:1a:8f:35:4f:9d:f0:85:65:2b:9c:c2:d2:c0:6e:a8:79:
ab:7e:ec:05:b3:34:61:e0:c5:18:b8:5e:4e:66:4f:be:54:9e:
a2:5f:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:37 2025 by rpki-client