Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
File: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft (raw, json)
Hash identifier: HQZB0TjiD+2j1vULc1ZqTrnllX+VB73yRzGNGY138Co=
Subject key identifier: 5D:C6:19:10:37:1F:2A:3A:B8:FC:D0:78:77:66:35:10:6E:5C:74:E9
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Certificate issuer: /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial: 0194BCE09F80CA28129450E9B422227F5D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
Manifest number: 04C4
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: 2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl (hash: QVQvfwO5CLaHWUdjYG1Ww8IexmESAVh99C+9Ue02TPE=)
2: eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa (hash: NiVcVjOLTxJgHF9YkgZvM/M3+zTG2kPIupDct4SjNb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9f:80:ca:28:12:94:50:e9:b4:22:22:7f:5d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=5dc61910371f2a3ab8fcd078776635106e5c74e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:74:1b:68:a3:62:30:9c:c5:19:96:45:29:
b6:ca:e2:83:87:cf:ab:6f:74:6d:8c:4c:07:b7:6c:
36:bc:16:47:55:c1:77:6f:98:0a:5a:72:d7:0e:e1:
81:c5:78:5f:34:aa:81:93:93:f6:c0:f5:da:35:d0:
28:23:a6:5d:6b:be:48:a7:32:7e:00:ba:c4:d2:23:
a6:d1:9e:01:cb:a6:63:ce:99:73:4e:b3:26:f1:03:
a1:90:58:66:59:1d:1a:fd:50:db:4d:50:99:50:22:
b9:19:73:23:a4:a7:7d:d0:15:0f:cf:ea:cb:b1:9a:
a2:fa:6a:73:71:0f:79:78:a0:8c:cd:31:c3:79:4a:
e0:50:3e:81:99:0a:97:f1:8a:8c:59:f6:b7:53:b0:
1e:96:92:e7:91:5a:d3:a9:ea:ea:00:b9:c0:49:7a:
c7:97:4a:53:7c:c3:9c:3d:2a:c4:07:f6:33:5d:5d:
58:e5:d3:0b:00:35:80:e4:90:2d:21:b7:2f:3f:38:
81:0d:d9:f9:f6:af:ac:26:f4:78:86:63:61:7b:25:
30:7b:b9:5b:28:f2:82:8e:d5:3f:fc:e8:c7:e0:81:
49:ab:fa:50:5a:62:d0:91:7f:cc:e7:94:68:3f:a8:
fd:70:4a:03:89:54:a5:11:00:d5:c1:59:89:25:be:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:19:10:37:1F:2A:3A:B8:FC:D0:78:77:66:35:10:6E:5C:74:E9
X509v3 Authority Key Identifier:
keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:5d:ec:ba:b7:d3:fd:77:ae:84:8f:73:1e:c6:42:86:cb:82:
df:a2:e1:89:39:09:72:13:c4:1a:26:7b:d2:d2:df:b4:a7:d0:
b1:b3:c4:93:ef:95:6e:71:f4:ca:f2:f9:5a:1f:83:a0:c0:bb:
0a:ee:0d:7c:8a:86:44:3e:1e:b5:35:fa:dc:8b:91:e6:4a:37:
c4:93:17:7a:9d:02:17:46:74:c9:06:47:ca:c0:7b:ae:d3:91:
80:43:a1:65:4b:ca:8a:5f:34:4e:8a:3e:e2:6d:9d:c1:f3:70:
04:e0:aa:fa:eb:26:b7:1f:40:e9:5c:5b:0a:5d:7b:0e:71:95:
55:dd:12:5c:c4:90:bd:41:7a:11:a2:04:85:cb:1c:b0:76:b6:
06:45:19:96:67:9d:70:1d:6d:f2:96:33:a0:79:22:3d:e5:c1:
fe:1f:a1:8f:5d:88:9d:b6:7e:a2:4e:0d:a6:b4:9f:e9:22:6b:
b7:39:dd:53:b2:23:03:56:1e:e1:6b:6b:82:56:d1:f6:81:ad:
9b:62:46:89:7a:79:0d:4f:b4:b1:53:0f:a9:db:01:82:33:69:
d5:d6:30:d0:6f:09:13:21:fc:72:44:06:56:6a:1b:e3:bb:32:
31:5e:7d:85:cc:0b:84:84:88:64:7e:64:44:30:e9:fb:a9:c2:
af:41:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:38 2025 by rpki-client