Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: aMJfrVWzRabENo+XkuS3rhvh78LqFZLquJlUxZ8lzyg=
Subject key identifier: 0F:80:08:05:A5:FC:D0:9B:7E:E1:76:C3:87:77:C8:12:0E:71:7C:7B
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 0194BD17AB76E78DC0603019BC2CFA41CACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: /3AaX3MhAsW36oxyRvLHWxLJS+JFX/KaI9S2Tv6DuIc=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:76:e7:8d:c0:60:30:19:bc:2c:fa:41:ca:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=0f800805a5fcd09b7ee176c38777c8120e717c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:44:ee:e3:98:cf:5f:d4:64:14:2c:27:0d:
64:fb:40:82:a9:ed:ac:d3:ee:dc:b8:7b:5c:fe:68:
e8:1d:78:ff:c7:24:00:8f:b3:a7:42:c9:0c:15:4c:
fd:2a:af:d8:51:d9:6c:a6:45:aa:c6:2c:e6:76:5b:
9c:e7:d9:3b:2e:fb:21:a2:1d:4b:be:98:88:8c:01:
7e:d5:13:14:60:b1:9c:b7:b8:a2:d8:7f:4c:70:09:
f0:0d:fc:79:fe:e3:86:62:f1:3d:42:db:c2:31:0f:
f2:81:de:66:25:a2:e9:cc:df:75:f5:15:a4:9e:5c:
82:b2:cf:f7:a3:2f:e0:6f:28:f5:db:4c:05:e2:11:
7a:8d:f2:59:3c:b9:0f:4e:44:15:e8:8f:7b:53:b4:
da:fe:f0:df:c0:36:19:b0:dd:d7:74:ad:e3:41:3c:
3b:09:a8:3e:c5:73:3d:f8:b0:f1:7d:6a:64:f1:38:
2c:cb:9d:cb:cc:72:6a:4c:9d:f2:43:02:d6:8a:42:
56:c7:b8:00:b0:fc:3a:e7:64:f0:06:53:19:e1:96:
81:72:37:e3:43:3b:3e:96:37:fa:d4:19:30:8e:0e:
42:94:fd:f3:a3:9a:49:f5:2f:e2:71:49:04:5d:a8:
84:9e:48:30:5e:92:7e:df:9f:7c:0b:81:ea:02:38:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:08:05:A5:FC:D0:9B:7E:E1:76:C3:87:77:C8:12:0E:71:7C:7B
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:95:61:25:df:2b:ac:a3:f5:89:c7:38:8c:15:ef:46:41:65:
8e:5d:3b:67:63:43:7c:bd:bd:96:5e:3c:5e:70:fd:16:66:9b:
3f:0a:71:af:30:1b:1a:65:80:dc:1f:03:4d:4b:51:f9:f8:3a:
73:72:c8:0d:92:18:9d:b1:e1:8d:f9:b2:9d:75:25:bb:df:b3:
69:48:48:8b:6c:46:63:9b:df:31:35:9f:23:47:a1:7d:18:f2:
ca:1b:ae:ce:7b:b9:88:03:d1:55:da:49:2c:75:5b:d1:97:40:
04:25:77:2f:28:a3:8f:51:f2:1e:a8:dd:55:3f:cc:2a:fb:aa:
7b:9f:78:aa:b8:28:11:54:28:8d:ba:a9:5b:d7:2f:04:b1:81:
6c:82:69:1b:66:73:3e:bd:e8:cc:94:70:d3:86:95:7e:bb:cc:
a5:b4:94:17:8b:61:4b:d1:1f:71:4c:05:e4:be:63:00:bb:fd:
f4:23:1e:59:96:de:a7:8d:6f:9f:2a:a4:6d:53:c3:25:cb:ff:
fc:0e:fd:3d:ba:98:0d:1b:8b:32:5e:84:40:99:2e:aa:2f:ee:
d5:c6:f4:fb:05:2b:59:2a:17:65:e8:24:72:0a:b1:9b:d9:33:
39:c5:42:1b:b7:fe:b0:a5:11:ea:af:2b:82:72:6f:5a:58:1c:
02:3a:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:53 2025 by rpki-client