Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: HpRybQkCtu4opsU6UluIykP4UZ8wheP3F6VQ+btVias=
Subject key identifier: 2F:E1:85:01:2C:38:B6:AF:82:C8:61:94:F3:93:C9:A9:1F:63:D3:21
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 0194BC7292DC0CF1851F0FE903BC22036CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: fca4mC27wWr8X+oIEHMHhbMlp3jxUEA48O32ua39Kh4=)
2: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (hash: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:92:dc:0c:f1:85:1f:0f:e9:03:bc:22:03:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=2fe185012c38b6af82c86194f393c9a91f63d321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:e0:9c:21:59:c3:ff:f8:dd:c1:6d:4b:a5:
e3:55:77:7d:da:cf:56:a1:16:f9:b6:24:40:86:4f:
3d:2b:ab:d2:8b:46:84:cb:19:2d:c6:3d:58:08:43:
80:95:37:5d:7e:82:53:cc:3f:7d:25:2a:98:d1:02:
65:da:5b:25:87:c2:28:f6:b7:b2:b9:d6:47:23:e2:
13:46:b2:cf:39:71:f6:a6:7b:c4:9b:e5:c8:33:c7:
cd:4c:2f:27:34:7c:89:b4:d6:ec:a9:b2:9a:f3:da:
18:05:d0:76:16:1a:68:ce:b6:fd:9b:71:44:4c:ad:
5e:fc:38:b7:8f:7e:31:5c:2f:ab:9c:c9:19:a2:33:
c7:99:ae:49:6b:89:49:af:c6:df:07:05:f7:ed:92:
0d:21:7c:e6:a0:c0:42:9a:8e:24:4f:15:37:62:7f:
06:ae:8a:4c:e9:cd:00:36:b6:a1:90:4f:78:e7:c4:
47:3d:0a:99:77:4e:72:e0:6c:52:2c:92:0f:f6:ba:
84:de:a1:3e:52:d3:06:fe:0d:fa:f5:f8:54:e3:9b:
02:75:4e:9d:67:40:b1:08:a0:f0:31:24:f4:35:ed:
89:08:e1:17:a9:c3:78:75:fe:4c:33:07:71:dc:1e:
79:6e:6c:c4:36:47:f4:3e:b9:8b:f1:43:b0:82:a0:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:85:01:2C:38:B6:AF:82:C8:61:94:F3:93:C9:A9:1F:63:D3:21
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:44:cc:fe:a5:24:d4:75:6c:cd:a6:e6:93:f3:65:da:1b:43:
1d:01:18:28:f7:7c:f7:ba:25:0c:42:a6:fc:a4:ce:48:f0:9f:
a6:5b:ca:cc:78:24:c1:8e:35:a1:67:38:4b:29:1b:80:71:54:
28:90:c3:9c:cd:79:22:c4:d7:2e:62:3c:67:48:59:78:1b:0c:
30:62:c1:a8:37:79:c7:4e:a7:09:f6:23:77:d1:fa:73:58:a0:
26:45:2d:22:41:2f:b2:48:31:c2:0d:57:53:cc:c4:c3:4e:99:
d3:1e:b9:8c:38:ef:04:db:77:db:13:f4:48:35:c7:53:38:4a:
99:f5:bc:0c:8e:88:51:50:03:46:ea:f3:ee:d2:7b:0d:65:ce:
b5:95:29:23:c8:d5:de:d7:77:86:15:95:d7:ac:01:c4:a3:da:
d2:cb:4c:a0:5b:7e:53:19:8e:45:f7:c7:0c:04:36:93:bb:d4:
ea:78:b2:ec:a9:fc:2b:50:4e:8b:c3:51:7d:24:58:d9:da:0f:
c2:5e:3a:93:2a:49:bc:53:cd:64:b6:13:29:34:8c:bf:56:df:
df:e5:e9:bb:1a:aa:23:35:65:7d:10:4e:01:ab:f3:e6:48:d3:
cd:7e:61:db:2d:b4:9f:a8:8e:58:d5:7c:31:70:11:5c:94:26:
61:78:47:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpLcDPGFHw/pA7wiA2ziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDYwNjQxODY0OTBkOGNlYTIzNDdmZjdhM2E4MjQ5MmQx
Zjc5NzcwHhcNMjUwMTMxMTMwMDEyWhcNMjUwMjAxMTMwMDEyWjAzMTEwLwYDVQQD
EygyZmUxODUwMTJjMzhiNmFmODJjODYxOTRmMzkzYzlhOTFmNjNkMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTvgnCFZw//43cFtS6XjVXd92s9W
oRb5tiRAhk89K6vSi0aEyxktxj1YCEOAlTddfoJTzD99JSqY0QJl2lslh8Io9rey
udZHI+ITRrLPOXH2pnvEm+XIM8fNTC8nNHyJtNbsqbKa89oYBdB2Fhpozrb9m3FE
TK1e/Di3j34xXC+rnMkZojPHma5Ja4lJr8bfBwX37ZINIXzmoMBCmo4kTxU3Yn8G
ropM6c0ANrahkE9458RHPQqZd05y4GxSLJIP9rqE3qE+UtMG/g369fhU45sCdU6d
Z0CxCKDwMST0Ne2JCOEXqcN4df5MMwdx3B55bmzENkf0PrmL8UOwgqDGpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/hhQEsOLavgshhlPOTyakfY9MhMB8GA1UdIwQY
MBaAFNjWBkGGSQ2M6iNH/3o6gkktH3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTIt
NTYwODVjOWU1MjJlLzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTItNTYwODVjOWU1MjJl
LzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkTM/qUk
1HVszabmk/Nl2htDHQEYKPd897olDEKm/KTOSPCfplvKzHgkwY41oWc4SykbgHFU
KJDDnM15IsTXLmI8Z0hZeBsMMGLBqDd5x06nCfYjd9H6c1igJkUtIkEvskgxwg1X
U8zEw06Z0x65jDjvBNt32xP0SDXHUzhKmfW8DI6IUVADRurz7tJ7DWXOtZUpI8jV
3td3hhWV16wBxKPa0stMoFt+UxmORffHDAQ2k7vU6niy7Kn8K1BOi8NRfSRY2doP
wl46kypJvFPNZLYTKTSMv1bf3+XpuxqqIzVlfRBOAavz5kjTzX5h2y20n6iOWNV8
MXARXJQmYXhH/w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:24 2025 by rpki-client