Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: rCKkuIKeI96nDnhzoD5DHMknmibvuhxhQp5jHJazRNQ=
Subject key identifier: 1F:DC:B3:3F:67:16:32:4D:40:0A:5E:AD:E2:F6:D0:71:12:DD:80:F0
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 0194BD857DB3EC0DE1C0ADFE08034784CCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0C28
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: L+ffxmZfOmqhfcAdZoahmjTDX6fP5S+ex5nMsymH6wA=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:b3:ec:0d:e1:c0:ad:fe:08:03:47:84:cc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=1fdcb33f6716324d400a5eade2f6d07112dd80f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:aa:ce:15:14:67:1e:d6:c2:37:ff:17:a4:
f9:4b:8e:04:39:f1:8f:5d:01:d5:a7:a0:0e:0b:40:
37:67:8d:0f:61:ba:bb:1e:79:c1:90:73:ee:a6:47:
45:70:c4:05:ca:51:38:00:53:60:b3:9f:8a:ff:8b:
c9:2c:98:3e:ba:2f:6f:0c:6c:56:3c:61:1f:08:cd:
fc:ee:a2:bf:4b:41:de:99:81:cc:32:ab:4a:bc:b7:
48:53:85:5e:c6:73:bb:34:6f:5d:07:9c:75:d1:67:
40:ff:47:60:a9:72:ae:39:fa:cc:7b:26:71:d4:a3:
df:0b:60:37:79:db:35:2f:73:d6:3d:c7:dc:64:6c:
b5:4f:c0:14:2f:ae:62:f9:d6:cb:00:39:ba:ad:a2:
d4:08:0a:51:76:59:60:37:10:af:d9:2a:88:ad:bc:
6e:4b:44:3c:42:c5:ed:80:b8:f8:92:dc:32:08:2b:
34:a8:dd:89:0f:3d:38:ef:54:c3:40:bd:f8:ba:9c:
d1:5c:51:66:97:2e:bd:0e:51:43:aa:00:cb:cd:b4:
c1:de:93:44:5e:3c:ca:ba:b7:44:42:1d:c1:81:36:
65:82:82:c9:00:81:85:9e:b5:a3:ec:51:fd:27:34:
35:d4:dc:3c:5d:3c:61:72:ed:5f:2e:bb:b5:ea:14:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DC:B3:3F:67:16:32:4D:40:0A:5E:AD:E2:F6:D0:71:12:DD:80:F0
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:13:b8:8d:d8:be:b7:a5:af:bd:f9:31:46:bb:2a:ee:ac:df:
ce:56:d5:d1:e5:3d:5a:6b:9b:48:b4:9b:92:c2:4c:95:50:77:
69:6f:46:af:cd:8b:bc:dc:55:a2:8d:fd:0a:12:4a:f0:c1:ea:
1c:ce:07:05:93:55:a3:b7:c8:c3:c8:db:76:36:d5:0a:7f:c7:
e6:3e:bb:4d:70:50:78:e3:3e:8e:95:54:07:2d:5b:fe:17:64:
82:68:aa:0a:f7:eb:11:56:76:ce:1c:ab:37:f2:59:02:94:f8:
d2:70:e2:e5:60:8e:88:de:74:64:a7:3d:1e:c5:ba:6e:18:7e:
21:f8:b1:57:23:c1:67:70:a7:6a:79:2e:24:35:79:61:5f:cd:
78:b7:86:52:e7:c7:e5:f5:f8:6b:0f:85:b6:06:eb:cc:36:5f:
85:04:03:98:9b:81:5d:ba:8c:b4:ee:e3:9f:22:d5:d0:18:be:
1f:13:62:6d:2c:97:7e:f7:00:7b:f4:36:2a:bf:8c:d6:62:1d:
8d:0a:7a:f0:d3:ac:b4:a0:b9:c0:e9:87:05:12:c2:ea:2f:e8:
31:31:a7:0d:9f:c4:0f:ed:9b:05:f8:66:38:2c:0b:aa:40:4a:
47:1d:50:a2:73:05:60:37:34:79:f6:0b:3a:60:fa:76:4a:de:
4f:a3:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:11:47 2025 by rpki-client