Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
File: 2EPxqgSY2E95UyPB_2uuOvQCBtE.mft (raw, json)
Hash identifier: FqZIfG4FY2VGG0+0uwumgInxH3r0TWBRNejxYbxROC0=
Subject key identifier: 64:1B:F4:53:96:FF:73:E3:EA:5D:19:F9:C8:86:72:27:3A:3F:15:F5
Authority key identifier: D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
Certificate issuer: /CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Certificate serial: 0194BC3C7BC918C952CE9FBCAA3CFCF56C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 2EPxqgSY2E95UyPB_2uuOvQCBtE.crl (hash: RkRYou8sVRNKj0Fg6TcCYCQQAujHOP0G/ydEH2z1w5M=)
2: Lr1Je63vs8PyvkKI1_N9un3D4qE.roa (hash: hbRmpQBdQ4b6GdZPWppZ6a4wJHdosMiH1PY+13rdPiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7b:c9:18:c9:52:ce:9f:bc:aa:3c:fc:f5:6c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d843f1aa0498d84f795323c1ff6bae3af40206d1
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=641bf45396ff73e3ea5d19f9c88672273a3f15f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:d1:3b:75:01:be:72:2a:01:d9:41:4b:50:
e9:67:b6:0b:01:51:d8:92:c9:40:66:a6:f1:a0:d5:
1c:d3:e5:ff:c2:bf:cf:70:57:e2:11:23:55:78:c2:
04:33:bf:06:d5:9e:6d:8b:08:95:d2:fb:bf:2e:1f:
ce:04:b0:52:08:72:a2:a7:7b:d7:42:06:15:f8:75:
75:17:67:e4:f3:99:16:74:b8:5c:47:b8:de:ee:31:
24:73:1b:44:b7:aa:8c:08:94:3e:3a:9c:8e:b6:ea:
b4:71:ee:c4:13:aa:07:55:68:ea:37:15:7f:d7:18:
e0:5d:ba:60:47:2b:51:64:c4:9d:ee:f4:04:bb:10:
07:e7:7b:67:ec:75:11:79:8e:79:89:6d:1b:d8:79:
a9:22:6d:1a:31:ac:7e:57:02:ba:a6:8b:44:19:d6:
5c:e0:c1:e2:78:5c:ed:bc:33:29:d2:18:d2:fc:83:
17:c3:c7:9a:03:14:1d:06:94:cc:06:c3:9f:b9:6a:
79:52:3b:f9:d5:b6:d5:c7:f5:3b:55:86:d1:eb:b1:
7c:cb:8a:4c:64:44:f5:be:c5:3e:f2:d9:63:85:57:
a6:25:9e:97:36:ec:79:ee:2a:70:ec:cf:d5:3a:d7:
48:11:20:a0:c0:6a:a8:8d:da:c6:b6:a4:c6:ac:c8:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:F4:53:96:FF:73:E3:EA:5D:19:F9:C8:86:72:27:3A:3F:15:F5
X509v3 Authority Key Identifier:
keyid:D8:43:F1:AA:04:98:D8:4F:79:53:23:C1:FF:6B:AE:3A:F4:02:06:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EPxqgSY2E95UyPB_2uuOvQCBtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/da4dd9-594d-456c-9f71-76a194554b05/1/2EPxqgSY2E95UyPB_2uuOvQCBtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:56:75:fd:6b:ae:e4:b2:5d:a7:af:58:f1:cf:47:7e:79:
07:96:46:47:be:ca:dc:83:e8:d1:f4:ee:7c:f0:5d:dc:0a:34:
a8:91:8a:df:40:b8:7c:76:e9:81:00:22:5a:cb:9c:03:a7:47:
ee:25:56:12:96:69:a8:b9:c6:f9:74:b5:5f:f4:a8:97:eb:f0:
e1:7f:cd:0b:a3:66:ab:29:e5:3c:e2:7c:92:c2:58:65:4f:c4:
bc:a4:3b:a9:44:25:ef:ef:a5:0f:b1:98:89:dd:64:74:a3:27:
ee:ec:c4:46:54:ed:ee:88:91:2d:b4:d7:23:46:f3:49:d8:4a:
79:34:e8:2f:48:83:78:d3:2d:5a:8e:1e:6b:63:13:49:e3:e6:
3e:78:a1:5c:04:8e:26:28:ac:a1:41:cc:e3:72:1d:dc:13:fb:
31:70:ee:72:d8:72:e3:fd:29:a7:c0:bf:57:a6:70:20:0d:22:
96:e5:17:d9:13:85:5f:7b:8b:b1:c3:da:90:c1:51:f7:0a:c0:
1d:b0:54:54:5d:e7:6e:ef:57:98:3b:48:bd:a3:1b:2b:a6:b2:
4a:76:fd:bb:54:60:07:8f:88:55:8d:51:c0:09:69:86:42:18:
76:6e:cc:46:50:86:30:36:e1:ed:5a:a3:23:d6:69:4e:8e:82:
ba:24:ae:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:08 2025 by rpki-client