Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: M/rrvS5v5O+IJ3t3MiW1rDRoM274pLsPkbXEJcd0TZI=
Subject key identifier: DD:82:F9:54:02:98:5A:77:34:0B:E4:79:62:2D:55:D2:17:B1:5D:03
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 0194BD17BF9DAE9F89F8C360BA27C784615B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 08D2
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: ka3fr9yzscW8g2QVTBmZjp4wbDZXrutBlbC+5p7CsjM=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bf:9d:ae:9f:89:f8:c3:60:ba:27:c7:84:61:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=dd82f95402985a77340be479622d55d217b15d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:5e:39:d5:c2:e4:01:e2:ed:f9:26:30:1c:
4b:ff:e6:9d:24:2d:e4:eb:ee:67:51:29:07:26:31:
29:14:54:78:d9:8d:62:2b:f6:c8:12:7c:b8:4a:cf:
8c:6a:07:d0:54:25:a5:b6:02:d7:d4:87:e9:86:ac:
86:91:7a:61:80:30:19:07:c4:2b:f6:fa:71:05:94:
9a:f9:db:3e:1f:d0:f8:bb:f0:f6:41:49:6a:20:45:
ec:b8:0c:f3:6d:c2:09:bf:5b:45:98:67:91:74:42:
e9:0d:10:f8:16:eb:78:1b:1b:ec:56:f7:07:c8:bc:
af:81:54:85:5f:86:eb:b0:0b:99:3e:f4:55:bb:3b:
7e:10:e5:e0:35:3e:ba:e7:78:69:ca:cd:9d:6a:97:
27:da:6b:d4:46:8c:5a:6e:87:71:2b:d6:8a:e6:17:
2d:47:33:f4:e5:00:b3:52:e6:24:ed:9f:30:cb:0e:
64:ca:61:24:4c:53:d5:83:0e:00:d2:a4:df:40:1a:
42:eb:fe:3c:1e:5e:ef:d1:c1:ef:37:ff:97:fd:48:
59:86:f8:78:2f:ea:ea:d8:f8:4d:10:b7:cd:92:b9:
b8:55:50:2c:24:d4:a3:0b:47:19:bd:32:97:a3:2a:
73:97:de:3b:29:48:0e:a3:c2:a3:a8:af:10:45:fa:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:F9:54:02:98:5A:77:34:0B:E4:79:62:2D:55:D2:17:B1:5D:03
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:29:3e:92:2d:cf:67:e9:3a:b6:bf:5f:48:a3:96:4c:c9:e1:
8c:aa:8a:a2:40:f6:29:27:07:82:88:b3:41:69:f1:2d:23:53:
ff:9e:3d:9e:75:16:42:1e:9e:80:7d:5b:22:4d:e0:14:cb:68:
a9:f5:f7:ff:04:6d:78:d4:55:97:38:91:93:4a:23:e3:fc:9d:
c6:12:ba:9e:b7:23:2d:29:ca:69:fe:f7:4c:27:5c:ce:72:b4:
0f:cc:11:79:44:4f:4f:25:ca:34:60:b4:15:76:b6:12:c9:04:
6e:67:f4:14:7f:e1:b7:a5:2c:a5:0b:97:7f:40:61:fe:43:58:
3d:8b:12:07:b6:34:4f:e9:1a:ef:d4:49:c5:59:d8:d6:9e:85:
a5:0d:44:d1:37:16:c9:4f:dd:52:27:9c:87:d9:5a:e0:2c:51:
38:8b:33:a5:02:1a:96:5f:c1:dc:f6:60:03:60:b3:75:cd:33:
69:7b:73:bf:7a:c7:79:44:b6:33:19:6c:3b:46:f3:cf:73:77:
78:90:d8:3c:38:b5:09:39:4b:7f:38:c4:92:d9:ba:f9:fa:e8:
be:6a:62:ac:dc:02:b8:f0:14:78:67:ee:77:15:4a:56:5c:78:
99:d7:19:5c:8b:96:cd:41:83:27:9c:62:e4:e6:8d:3a:b8:90:
b2:13:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:38 2025 by rpki-client