Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: pczQcSvkLFmuohc0qrBEomCKTamHCLRxGaYSgIwKApk=
Subject key identifier: 2F:0D:E9:AF:D5:39:7E:D1:0B:29:44:69:9A:AC:F8:BE:BE:1D:F8:FF
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 0194BD1770BDA81344C439C2C5C75E5E5AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: Lbtz85inibyVTmF9neqVmgtmNEssOe3PMNWUa39gDZ0=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:bd:a8:13:44:c4:39:c2:c5:c7:5e:5e:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=2f0de9afd5397ed10b2944699aacf8bebe1df8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:97:0a:f0:50:ce:e5:54:55:b1:f7:b0:83:
4d:91:58:54:8a:55:b4:3b:ed:8a:fd:a7:19:f5:3f:
32:fc:c8:bc:c2:9a:7f:1c:12:c0:3d:69:62:55:91:
7b:e3:63:dc:4c:37:a9:aa:15:99:aa:46:bb:7f:81:
c6:0f:23:8d:58:35:f6:0a:b7:b9:bd:2d:c4:d7:2c:
49:47:6c:f3:0e:41:29:c6:43:b5:5e:75:28:41:14:
0b:bc:9b:48:13:bf:d3:c8:71:c9:65:d9:17:7c:5d:
30:6b:db:33:23:69:62:c1:96:17:14:2a:bf:a6:9f:
a9:ed:8c:ea:86:e8:c0:d7:47:d6:b4:f2:61:06:26:
1a:1b:f7:8a:6b:f1:f8:dd:4f:48:f3:4b:25:1a:96:
31:ec:91:4e:34:2f:f9:3e:d2:dd:15:48:dd:35:7c:
dc:08:79:b3:7c:9d:df:ba:fb:31:44:5f:9d:b4:3b:
b2:24:37:e1:53:dc:b4:a8:79:a0:f8:c2:38:11:ec:
43:ce:4d:28:8a:da:96:94:b7:b2:7c:f1:ea:2c:a5:
2d:26:1c:91:10:78:2e:4e:e8:d8:da:07:a2:8f:8d:
c5:2f:98:68:8a:5c:6d:55:44:51:e3:a3:ba:dc:1f:
71:ea:b9:ae:1b:4d:0c:2d:b4:45:43:22:33:91:3b:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0D:E9:AF:D5:39:7E:D1:0B:29:44:69:9A:AC:F8:BE:BE:1D:F8:FF
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ab:49:ad:9e:b2:65:ab:50:d1:bf:41:a2:c7:ba:41:54:8e:
e2:b5:f8:15:fd:c6:b1:ac:4b:bf:1a:c7:1d:fc:c7:7a:0f:45:
04:6f:07:93:0d:2e:b9:c0:b5:a3:66:92:a3:1a:c4:e5:b6:da:
59:2b:30:01:c8:41:63:2e:84:fe:75:3a:12:f6:42:f8:64:d1:
2d:d6:62:fe:50:31:14:2f:0a:98:cc:a6:7f:b6:c8:b6:74:da:
d8:85:de:e6:0b:0d:0c:40:07:a3:b6:bd:fb:7b:15:20:5d:a7:
96:35:9d:d6:d9:26:d5:5c:95:fe:1f:9a:ef:23:99:fe:82:4d:
2a:11:64:a4:22:62:1c:ab:8c:85:4d:68:f3:41:b4:46:e7:1e:
c4:d3:41:d4:95:0c:b1:39:c3:b2:8f:04:21:98:b3:94:45:d5:
14:89:dd:fc:da:8e:79:ce:02:4b:ac:32:a4:29:00:51:ba:5f:
9c:f7:8b:f9:e3:73:0e:91:58:23:03:cf:05:69:18:97:d2:5d:
5e:0c:35:94:8f:c6:9c:4e:ac:cc:bf:0f:ef:2c:27:15:3d:80:
d8:03:a0:82:81:63:1e:f7:5f:ae:4e:53:53:65:e5:5d:b2:19:
92:94:47:25:27:15:c6:4d:b6:0f:25:48:ad:a9:b2:7a:f1:97:
7c:e3:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:03:08 2025 by rpki-client