Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: xzpnMLsyuUT01OtBm3gKolrj641Yr7TxXNCucoZ9mKc=
Subject key identifier: 58:47:D5:C4:48:04:BE:2E:4C:A1:96:71:4F:69:84:4A:04:A8:31:47
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 0194BD17C04910FEE5E8157D615E90E935F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: Ylwi5OvuY4oaukLf8K73xoERUYwlWoLF10/9sbeOAbY=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c0:49:10:fe:e5:e8:15:7d:61:5e:90:e9:35:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=5847d5c44804be2e4ca196714f69844a04a83147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:3b:eb:c2:27:ac:35:a1:de:78:06:80:00:
27:be:7f:72:8f:44:ed:bf:a6:c2:a3:50:d8:0e:4c:
ba:41:76:56:d2:5f:32:d1:86:ed:82:97:f3:b6:b3:
b8:a0:b0:12:5b:66:81:3a:a8:79:b9:90:0e:5f:af:
01:fb:99:af:52:b6:c8:4b:54:66:05:5a:2f:45:34:
c7:66:b1:60:b4:5b:91:c8:d4:f4:d6:6c:bf:2d:37:
54:05:38:77:54:73:45:c2:15:67:ce:cf:52:cb:e1:
5a:4a:df:fd:f0:2b:3a:62:d2:ee:90:b6:56:a4:aa:
73:4f:41:7d:71:86:b7:71:c2:da:4f:09:b8:d9:4b:
1b:dd:2a:b2:bd:e2:2c:21:d7:3c:2b:31:c5:18:7f:
67:bc:f5:e5:bc:29:a7:b0:c0:cd:49:35:eb:a4:7a:
38:1e:17:44:24:2d:3f:48:f3:80:2f:f2:2a:3b:f7:
e3:64:c5:2a:57:3b:51:8f:fa:69:a8:5b:33:3b:63:
fb:d5:9e:f0:f6:bc:11:8e:26:f9:2e:bf:35:46:c9:
5d:1c:38:e0:d3:85:7f:cb:84:95:95:e7:da:b5:e6:
36:b5:bd:56:6a:5e:74:89:49:2b:55:ae:a1:71:2c:
3e:08:db:21:96:5d:77:10:1c:fa:40:91:6c:18:04:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:D5:C4:48:04:BE:2E:4C:A1:96:71:4F:69:84:4A:04:A8:31:47
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ac:86:9d:7a:9d:36:5e:58:1e:7d:1a:c7:c3:d1:16:b4:d3:
07:e3:4e:b8:a8:95:a6:2b:f0:a8:cd:6b:da:87:42:5a:c7:6c:
cc:d8:eb:de:ee:68:3c:48:fc:ce:40:7b:2a:63:9d:08:3c:68:
87:3c:5f:b6:43:19:20:31:28:69:43:17:cf:0e:1e:58:45:fe:
d5:e0:ba:10:ce:ca:8d:b6:da:e0:40:12:6c:e9:63:28:72:3e:
73:e6:10:27:6a:d1:8f:63:8b:d3:31:bb:6e:40:14:60:f1:76:
f3:98:ed:c7:0b:43:a8:b0:2c:98:cb:3a:65:d5:d4:db:7d:1e:
12:39:2f:bb:bf:29:ad:e9:39:c6:c9:d3:d9:35:2c:bb:6d:95:
e7:92:5e:e2:24:31:06:f5:fb:e5:e0:ea:83:e9:1c:ca:81:e2:
a8:a5:c4:59:8d:00:68:19:0f:f5:b0:65:f3:b1:78:37:f8:72:
da:b4:cf:b6:87:14:1e:7e:d0:2b:18:75:da:82:e7:fc:14:b2:
5c:38:0b:f8:a0:4b:76:68:35:6c:75:30:f0:a6:0b:9c:96:52:
34:ff:ba:0d:3a:6a:38:54:9d:c7:2c:ae:b3:71:6f:ff:98:85:
72:d7:9a:e5:39:97:2c:e4:10:ab:ea:c2:84:46:41:42:f0:19:
06:2b:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:47 2025 by rpki-client