Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: wJUcjyOt0paWEzUZO7xFOgPELcNI+mCJwdGDZvzUheg=
Subject key identifier: 73:73:A4:A9:DD:F0:3B:4E:6C:05:11:63:15:44:AE:19:A0:57:D5:16
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 0194BC3C258D34907CE013E46504D9F72C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: wfUeFbExd4pAPpC8oQXbwejO7tQhrLPn68aMz7DbhUU=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:25:8d:34:90:7c:e0:13:e4:65:04:d9:f7:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=7373a4a9ddf03b4e6c0511631544ae19a057d516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:76:e6:4c:28:f0:d6:fa:56:ae:cf:53:c3:
de:3e:31:84:43:d2:2f:ba:8b:c3:0e:cc:ab:e7:aa:
60:ef:dc:26:66:9e:16:11:86:ec:03:0a:ac:76:fb:
76:08:36:9e:28:fa:7d:ee:1f:e1:20:74:2c:17:2d:
4c:3a:a5:da:1e:49:a2:ad:da:1c:13:19:cc:e1:e6:
f9:6a:41:7d:48:79:96:3e:94:14:b0:ff:39:c7:bb:
18:13:6e:b3:eb:37:fc:9e:82:b1:40:d3:b3:83:97:
e8:7a:1a:64:df:b5:46:80:21:7d:7b:97:6a:d8:bd:
2f:dd:4c:40:62:aa:7b:89:d0:09:f2:b5:54:53:71:
4a:ff:95:70:0e:51:71:03:73:69:5e:1e:a4:13:9c:
b3:2f:0c:6b:d1:35:78:00:65:b0:45:38:f4:e8:27:
ac:6b:b0:9a:3f:7d:92:58:f7:86:08:4d:2e:4d:89:
7c:3e:70:a0:52:35:76:48:e8:ca:30:9d:42:83:74:
09:3c:e4:0b:f9:40:e9:9f:59:61:3a:43:0e:ac:0e:
b6:d8:08:ad:e7:6a:62:cd:d5:e5:11:ef:9c:c4:af:
3e:94:67:63:4e:42:a2:52:b8:71:04:9d:a7:0d:de:
1f:b4:dd:37:fd:a3:12:4e:9e:6b:41:36:9d:f1:26:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:73:A4:A9:DD:F0:3B:4E:6C:05:11:63:15:44:AE:19:A0:57:D5:16
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:27:10:79:3a:10:18:9c:b1:5c:63:be:55:11:53:ef:b8:ef:
c6:0f:4d:bd:7c:f7:08:dd:20:2a:cb:df:bc:c3:93:84:60:25:
55:a3:15:22:77:92:27:11:ea:56:bc:e7:37:97:d7:f8:c7:ae:
93:56:63:d4:ff:d5:ad:72:78:9f:33:5a:b2:c7:c5:eb:9c:6a:
09:3f:5e:b4:30:b1:8c:2f:74:4e:b6:1d:72:a7:ea:28:6e:df:
3f:97:4d:de:0e:f8:e2:36:72:3c:e5:95:36:1d:6f:d1:ec:0e:
fa:14:5c:52:6a:f2:7d:c6:bc:48:b7:85:5a:e2:82:af:ca:0b:
59:4b:a0:09:01:92:a2:f7:87:3b:49:64:c1:90:e0:23:71:4d:
ec:79:34:78:14:76:72:1d:fd:91:ce:59:18:a7:81:c0:14:4a:
bd:d9:a1:46:c2:1a:80:20:60:dd:bf:0c:81:b8:d1:f0:84:db:
dd:6c:f9:bb:02:89:a6:fe:84:7a:36:f0:69:89:40:f7:db:59:
e1:12:84:cd:c8:11:b8:82:82:32:a6:a1:6f:65:fa:3e:2f:a4:
3f:9a:9b:3c:f2:2b:f6:be:6b:cb:38:59:64:5b:5f:7c:fd:db:
01:a3:8c:38:f2:58:fe:4f:5a:e4:04:4b:02:8a:f7:48:65:01:
cc:a0:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:12 2025 by rpki-client