Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: DsnjA2roG6ZyPojt+YOYoWiog25E2iapCIDyfjewof0=
Subject key identifier: 34:20:84:47:4D:77:B4:C6:92:F3:E0:EB:51:39:97:FE:08:3C:15:48
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 0194BD4E3D3332BBC5B89A871C96FC3A90F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: Lqy4/Q6/bAN+uY0LoohG35hIWMrJBcejr9xVsndCbtI=)
2: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3d:33:32:bb:c5:b8:9a:87:1c:96:fc:3a:90:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=342084474d77b4c692f3e0eb513997fe083c1548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:99:ea:17:48:77:4d:94:be:46:64:e7:b9:
05:bc:f5:35:8e:27:60:37:3c:3c:0e:52:bc:1b:2c:
c0:b8:6a:7b:14:a6:49:4f:ab:ca:f3:7f:8b:77:45:
81:38:82:95:ca:20:98:0d:f1:6b:2c:11:ff:63:aa:
cf:be:64:4f:44:c5:7b:0d:3a:1a:13:f0:b6:ff:4b:
18:63:37:c0:30:63:e3:69:3c:d0:e1:62:83:83:82:
dd:9f:c5:cb:a0:81:b4:a9:ef:3f:c6:ae:3a:0f:0c:
36:3c:77:7b:6f:a8:57:94:be:08:13:86:f9:c5:bc:
4f:f1:c3:ff:48:b0:93:e1:a9:5c:f4:c0:42:7f:85:
01:3b:a9:e1:49:fc:b4:a8:46:7e:c3:bd:be:7a:27:
6f:ec:5b:5a:3c:d4:f2:7d:3b:c1:7d:63:62:e9:c5:
19:78:84:6d:b9:27:3a:af:5f:0a:69:0c:78:49:37:
40:98:a1:3d:22:f4:3e:c4:1a:cb:f9:7a:dc:ec:2a:
9b:69:73:c8:3b:9f:cb:5c:da:eb:3e:5d:d4:5b:d2:
5a:57:b3:41:ad:14:44:58:bd:0f:59:5a:00:4e:55:
32:93:2d:10:fc:c3:e9:e7:38:31:e1:1d:0f:c9:41:
55:2d:c3:6c:e4:b0:b5:29:0d:61:ce:86:d4:e3:30:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:84:47:4D:77:B4:C6:92:F3:E0:EB:51:39:97:FE:08:3C:15:48
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:1b:f5:1f:51:4a:05:d7:9c:91:43:13:fa:4b:81:b8:26:
e3:94:89:f9:b7:49:ef:57:07:09:14:b6:06:4b:2c:cb:14:45:
9f:94:97:11:53:8e:82:78:20:65:8d:eb:79:83:15:06:3b:e2:
45:ec:df:34:53:d2:84:be:13:a7:50:8b:c2:67:d9:96:43:e9:
ac:b8:09:41:42:40:a6:d1:50:70:e6:5f:23:0d:1c:1e:a7:97:
55:04:e3:a0:d8:7c:d7:5b:7d:c9:f1:94:68:f1:a5:a7:8f:57:
e6:97:a2:82:e0:1f:5d:20:1e:f1:5e:7b:cb:0e:fd:6c:92:68:
04:11:25:07:75:9c:d8:3d:c2:d5:5e:d3:d6:4a:4a:ae:8b:7c:
fc:9a:61:83:f4:50:99:0f:32:a8:0d:28:2f:51:4b:7d:b3:f4:
3a:07:e9:9b:45:e6:c9:a9:19:26:eb:cd:66:3e:c5:69:f2:1a:
48:76:38:f5:b4:50:57:4a:e1:1b:1c:3a:2d:af:c2:9a:bb:04:
20:1c:5f:32:33:8b:17:40:6c:a6:25:fa:03:bf:00:44:2b:b8:
93:a8:7e:93:68:36:50:ae:31:09:d4:15:e8:63:4c:dd:e2:a1:
a2:c3:2a:e2:f0:29:54:23:1b:de:73:f6:b9:e8:e6:3a:c5:b2:
08:66:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:49 2025 by rpki-client