Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: hwDEdixfyBuyZyils7IQXCrPh1v2vOm7Bk+AKre8CMw=
Subject key identifier: 2D:EC:F1:A4:2A:31:8C:97:8B:72:14:1E:CB:43:67:A9:1D:76:64:A7
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 0194BD4E642D4BCFC35B603DF5D775514CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 053A
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: voVvMaeZSuuTpaJDJWNmhcj1UfxTIYTRNiq6+lpWIeY=)
2: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (hash: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:64:2d:4b:cf:c3:5b:60:3d:f5:d7:75:51:4c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=2decf1a42a318c978b72141ecb4367a91d7664a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:90:76:2b:81:59:38:29:9f:4c:52:86:11:
eb:7f:b5:0f:b1:46:4f:d9:82:53:62:50:86:73:02:
6a:18:e2:de:d1:70:e0:05:f4:ef:14:1d:13:dc:27:
98:95:74:82:da:7f:52:2e:da:9f:05:a2:30:80:f3:
15:20:d0:6f:e6:94:a6:7c:7f:87:d0:40:82:e8:5c:
2e:94:6a:38:99:13:5c:ee:ab:42:18:7e:d3:90:de:
b0:4e:5e:5f:88:94:f1:83:c6:a3:da:31:90:8c:8b:
c6:4d:5a:1f:cb:dc:40:77:d3:ce:48:98:f4:ca:9c:
7b:06:f2:49:ae:b7:43:27:d9:f7:5c:ea:58:d9:6f:
39:1e:c4:92:cb:68:bd:b1:cc:23:79:77:24:f7:bf:
ea:f1:68:fb:1f:0e:32:ea:4f:45:c1:40:89:73:55:
5a:5b:33:d7:a9:fc:10:eb:f6:0a:24:f0:9a:f4:90:
ec:fe:73:9c:91:c0:d1:6a:62:ab:99:76:c1:2c:2e:
56:76:c9:c9:b9:6e:1c:7a:b3:ea:03:9e:35:8a:52:
03:c6:f7:c4:f3:6f:1f:9c:a6:07:b6:1f:0a:c1:95:
90:ad:63:cf:f1:c2:2a:db:9d:11:91:9e:06:d6:27:
73:77:9e:d3:43:46:84:af:ee:b5:7b:e0:d8:ef:ad:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EC:F1:A4:2A:31:8C:97:8B:72:14:1E:CB:43:67:A9:1D:76:64:A7
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e8:cd:9c:a5:4e:d1:bd:2d:bc:9a:9a:05:69:06:09:7b:66:
49:d7:ae:4f:ac:6d:04:29:15:11:a7:87:96:34:26:ca:40:6c:
81:ed:bc:79:8f:10:e9:4c:47:e6:dd:e1:18:1e:d0:cd:a5:fe:
bb:ec:7c:d3:ac:1f:25:9b:39:ba:04:ca:7f:24:a8:0e:90:81:
33:c9:0e:31:a4:94:4c:cb:3e:ed:cb:72:b7:d5:25:4c:dc:a0:
de:17:de:e2:bd:3a:db:27:11:01:6f:86:d0:3f:24:c3:9b:7b:
a0:c5:ec:8f:06:ec:d7:19:b0:45:f0:a3:c4:07:50:31:d9:ec:
00:45:e1:06:e0:c0:fe:7b:32:6d:bb:c8:16:77:64:f6:ce:73:
f0:26:4a:ed:90:e2:2d:44:f1:1f:11:10:98:eb:7e:ec:7c:3e:
82:0d:15:8c:14:ea:3b:67:eb:fd:7b:58:a5:5e:ee:29:f2:c0:
b7:25:f8:cf:87:56:4a:72:75:78:e8:3f:d9:b1:b2:19:be:e9:
b3:a3:2c:72:93:8c:a0:1d:a3:7c:fd:23:88:bc:6d:26:2a:a4:
a3:4a:fe:bf:fb:b2:d8:cd:78:69:18:73:ba:f8:a1:2f:24:72:
9b:21:e5:b9:77:64:0f:86:b2:44:c3:dd:8d:98:c2:4e:88:26:
98:18:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:41:59 2025 by rpki-client