Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: CUZ8EvK9x1jq5UpVZumL0FybhxedWZ7E2r5aENbSZ+k=
Subject key identifier: F4:4E:34:23:F1:02:F0:74:8C:36:A1:D3:BA:EB:2D:A6:B0:94:DC:EB
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 0194BD8557FD2E2FC6942D041E70EF356730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0382
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: LkF5T2Rzs1Qfr7QHsj9zDAkf9U2R1YYPcjAxQPm8MhY=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:57:fd:2e:2f:c6:94:2d:04:1e:70:ef:35:67:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=f44e3423f102f0748c36a1d3baeb2da6b094dceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:5a:59:3c:95:92:c1:2d:f2:32:9c:82:e2:
4c:d6:cb:b0:5e:58:e9:3b:5c:da:1c:b9:ff:b7:32:
62:2b:80:68:bd:b2:2b:e2:9d:0a:44:aa:98:ca:52:
d5:d8:9c:62:09:d9:cc:ab:28:80:19:67:ed:d2:f6:
fc:3b:f1:76:f2:62:ee:22:c4:ae:d4:f6:02:2b:28:
d4:13:96:b7:4b:f2:aa:37:15:50:9d:74:68:84:3c:
af:2c:cd:a5:db:9b:2b:24:51:ee:72:a7:db:3e:05:
06:7b:e9:8c:e5:8e:9b:54:09:e0:0d:bc:53:70:68:
76:fd:bf:9e:8d:26:b2:a6:f7:92:32:9b:3a:42:8b:
b6:03:39:b6:42:cb:77:c5:5e:39:19:49:40:37:4e:
17:54:60:f6:17:03:2d:57:40:7b:ca:30:97:ee:d7:
87:3e:d8:06:b3:75:ce:83:92:10:0c:df:c7:ab:29:
71:15:df:ac:35:e3:65:e6:50:b9:41:60:d5:ae:5a:
3c:b0:1a:24:63:0f:8e:87:10:7e:cf:4a:c2:41:e0:
8e:2d:e9:fb:14:50:48:55:58:5f:f6:9c:82:6c:36:
fc:aa:e6:86:8a:39:13:9a:b3:35:bb:1d:d3:31:f0:
3c:cc:23:19:b0:a5:bb:1f:1b:ac:e1:a4:17:61:96:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:34:23:F1:02:F0:74:8C:36:A1:D3:BA:EB:2D:A6:B0:94:DC:EB
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:08:a9:5e:bb:d8:fe:8b:ce:75:9f:bd:5e:39:88:16:84:f8:
d6:cc:ba:f0:ab:99:a1:bf:4a:e7:2e:8c:36:26:3a:d1:74:55:
2b:7a:08:e7:e9:cc:4c:5b:b0:3e:71:04:2e:f5:77:81:46:28:
19:ab:0e:52:3f:6d:63:07:c9:c3:d7:b1:89:a1:cd:42:b7:c5:
fb:9e:bf:14:09:87:a5:7c:95:dd:4c:cd:57:95:64:c2:2c:e7:
4c:7f:0b:f9:38:91:1c:8c:82:58:48:ce:35:8e:3a:71:fb:d9:
ff:24:ec:63:1f:60:b0:30:cc:62:a6:06:eb:04:b2:74:69:73:
74:8a:ca:1a:5d:79:b7:47:1a:2e:cc:41:c6:55:f3:52:57:6f:
bf:86:bd:42:e5:33:51:fa:e0:28:8d:fe:2f:9e:8f:d2:09:6a:
be:5c:55:2a:ab:74:d0:7c:e1:6b:0c:7d:ed:32:a4:72:8c:79:
16:52:a0:d8:d0:c6:56:a2:27:fe:61:d1:56:2f:c6:b5:51:ee:
e5:c1:ec:74:ff:e3:6a:a8:7d:6c:a7:6b:bb:f0:89:cd:d1:73:
b9:9c:7c:b7:09:b0:f3:73:93:af:f3:88:dd:fb:29:ea:a0:21:
aa:d7:c7:86:4c:d9:0f:94:4e:8d:0a:f6:f9:c6:a6:3d:70:23:
10:4e:1b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVf9Li/GlC0EHnDvNWcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5
MWY4ZmEwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
EyhmNDRlMzQyM2YxMDJmMDc0OGMzNmExZDNiYWViMmRhNmIwOTRkY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iRaWTyVksEt8jKcguJM1suwXljp
O1zaHLn/tzJiK4BovbIr4p0KRKqYylLV2JxiCdnMqyiAGWft0vb8O/F28mLuIsSu
1PYCKyjUE5a3S/KqNxVQnXRohDyvLM2l25srJFHucqfbPgUGe+mM5Y6bVAngDbxT
cGh2/b+ejSaypveSMps6Qou2Azm2Qst3xV45GUlAN04XVGD2FwMtV0B7yjCX7teH
PtgGs3XOg5IQDN/HqylxFd+sNeNl5lC5QWDVrlo8sBokYw+OhxB+z0rCQeCOLen7
FFBIVVhf9pyCbDb8quaGijkTmrM1ux3TMfA8zCMZsKW7Hxus4aQXYZYP3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRONCPxAvB0jDah07rrLaawlNzrMB8GA1UdIwQY
MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt
YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz
LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAipXrvY
/ovOdZ+9XjmIFoT41sy68KuZob9K5y6MNiY60XRVK3oI5+nMTFuwPnEELvV3gUYo
GasOUj9tYwfJw9exiaHNQrfF+56/FAmHpXyV3UzNV5VkwiznTH8L+TiRHIyCWEjO
NY46cfvZ/yTsYx9gsDDMYqYG6wSydGlzdIrKGl15t0caLsxBxlXzUldvv4a9QuUz
UfrgKI3+L56P0glqvlxVKqt00Hzhawx97TKkcox5FlKg2NDGVqIn/mHRVi/GtVHu
5cHsdP/jaqh9bKdru/CJzdFzuZx8twmw83OTr/OI3fsp6qAhqtfHhkzZD5ROjQr2
+camPXAjEE4bgw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:17 2025 by rpki-client