Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: kjjQ9++PuHBUgtWz+PptyRofyulxZ2nGLAqeLs+g4mc=
Subject key identifier: 10:3A:37:D4:38:77:D4:5E:2E:77:3E:53:F5:AC:6E:B0:27:36:B4:2A
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 0194BD177CB8C53DF68B31DDE7B7D5ED3623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: wqTViUTja0LPReABNHxiGU59+OJEd5GzbvyIm/7NztA=)
2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7c:b8:c5:3d:f6:8b:31:dd:e7:b7:d5:ed:36:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=103a37d43877d45e2e773e53f5ac6eb02736b42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:fe:31:48:5a:6f:9a:ba:6f:ed:9a:b3:bf:
01:7b:ed:40:0a:d5:9d:61:f8:b1:1d:c8:8d:91:4e:
82:73:b6:a1:00:95:fc:2c:af:de:ce:ea:12:26:0c:
a5:73:df:da:be:cd:d5:73:cd:74:31:f1:ae:a4:f9:
ac:66:01:a8:c4:36:2c:7a:2e:df:24:52:61:f8:d0:
59:29:c9:1e:81:ba:47:65:43:52:e2:82:88:9b:e5:
2a:7b:f5:cb:f4:ac:43:41:01:8c:0f:59:39:62:4d:
62:85:e4:14:f0:c3:53:85:bf:f4:ff:75:99:47:c7:
df:4c:67:ce:b2:c9:1f:71:59:0b:e9:f7:55:4a:5e:
69:b6:c6:c5:c1:15:04:77:f0:f0:e6:3a:99:bb:82:
c5:86:eb:f4:f9:e1:df:d5:c4:c6:42:1a:53:bc:77:
55:2b:1c:4c:a7:b7:d7:cc:c4:80:3d:55:56:b9:f0:
fa:a2:03:0b:88:eb:00:52:a5:72:78:7a:c0:da:eb:
be:d4:d4:36:f3:81:2e:1e:48:46:16:43:d6:72:e2:
16:2d:71:be:bf:51:be:6b:74:12:b9:28:b2:f9:56:
38:18:6b:e6:61:bd:b3:3e:79:f3:39:62:96:e0:55:
e8:a7:61:0f:c1:3b:49:e6:5e:bb:2f:e5:53:0d:89:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:37:D4:38:77:D4:5E:2E:77:3E:53:F5:AC:6E:B0:27:36:B4:2A
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c3:b1:6e:cb:3d:15:45:af:b7:c1:5a:bf:4d:39:44:c2:b2:
bd:fb:25:57:e5:ef:f8:f9:9b:ca:55:56:64:33:cd:81:3d:6d:
72:06:88:f0:df:90:87:d7:d2:c8:5e:29:f2:4a:4a:4a:e2:e4:
95:7a:aa:ab:9f:6d:2c:88:62:2e:91:fe:ef:8f:9a:fc:ca:b3:
5a:d8:87:16:94:1f:7a:1d:e3:0a:74:bf:0d:ac:28:57:95:f4:
42:69:ee:4a:7c:89:ca:cc:d6:b0:7d:2e:44:f0:81:80:0f:be:
8f:09:76:a8:a4:1c:fd:ce:bb:de:3c:2e:d4:6e:c1:41:8a:cf:
b8:26:7b:aa:65:76:0d:ae:58:ad:3c:54:90:e1:91:94:bb:9e:
39:36:ed:65:23:f6:24:ec:c7:84:f8:4a:33:57:fd:3f:ee:ff:
a2:dd:6e:aa:d6:27:2e:46:a8:ce:db:f9:70:33:02:2c:50:22:
bb:bd:79:07:44:dd:87:c7:9a:bb:f2:1b:05:c1:2d:29:07:1c:
ef:a2:95:37:15:bc:41:81:54:b0:fb:36:67:02:ba:a5:82:b8:
79:64:be:2c:9a:16:cf:a9:44:0e:de:c5:c4:64:ba:6f:2a:ee:
12:d1:1a:ff:27:71:54:44:0b:f0:ed:d4:ec:ed:0d:7b:97:25:
6f:65:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:20 2025 by rpki-client