Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: FoI4VtC2yhQXKrUMH9sYERCfe0fdq9i8ORohdNmdatM=
Subject key identifier: 68:C8:E6:A8:19:41:A4:49:AE:54:47:2D:37:45:F7:E2:25:22:C7:87
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 0194BCE085EEEC0DC1D8F3DD642098038FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 04DC
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: jF1W2owVssudYxPk7Vy8IUDDG0EHg329NKYU3ywaSfc=)
2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:ee:ec:0d:c1:d8:f3:dd:64:20:98:03:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=68c8e6a81941a449ae54472d3745f7e22522c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:e7:e0:33:57:89:59:cb:7c:76:e4:b7:60:
59:98:c8:3d:2b:5b:24:bb:4e:c8:42:4b:29:ed:1d:
1a:1d:3a:6d:a5:a8:c2:79:fa:07:bd:0f:2d:4b:00:
c1:81:f0:0a:82:47:0a:6e:e0:7d:f9:13:e0:30:e3:
97:94:03:a3:90:6b:a4:4b:4c:e9:be:2d:3c:3f:0c:
3e:86:b8:15:cd:c4:4d:7f:53:0c:9f:6a:55:4b:97:
b5:e5:0e:67:7e:65:ed:bf:0e:68:4a:c0:27:d6:25:
bd:f8:13:f1:9a:b3:16:58:ef:72:60:99:52:92:a6:
0f:82:af:2f:ba:ad:0d:99:d8:73:36:f5:b9:7d:8b:
8d:bc:8d:31:84:e4:c0:27:e6:d4:98:eb:01:ab:b9:
d2:97:95:e8:be:ae:27:41:73:c7:9d:43:90:90:7a:
ab:5d:81:1b:46:c3:9e:62:25:0c:b6:d6:cd:c5:ac:
d1:a2:5b:42:97:35:a2:5d:72:31:fe:8a:25:cb:b8:
e7:07:f2:e9:24:41:73:32:76:f2:0f:43:9a:b9:75:
e6:8b:35:7f:38:c1:9e:a0:32:26:33:86:ec:9f:07:
24:a8:2e:f2:ee:7e:5b:3f:69:6b:64:34:a0:97:aa:
08:93:12:46:98:94:7f:9f:e3:49:5c:5b:28:30:3e:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:E6:A8:19:41:A4:49:AE:54:47:2D:37:45:F7:E2:25:22:C7:87
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:67:10:61:e1:cd:0f:61:02:4c:18:ed:f3:77:0b:85:50:f4:
c8:47:06:ad:83:57:4d:6f:59:59:9c:f9:0c:47:11:d2:b2:34:
61:be:b1:05:40:67:de:d7:51:25:cd:61:9c:a5:05:f3:d4:bd:
27:55:60:8b:21:a1:9c:13:fc:7f:5c:61:c7:d2:af:4b:8c:2b:
1e:a2:7d:b1:59:1c:32:ed:f4:d6:0c:f6:c5:49:64:3f:39:68:
d4:9e:25:21:ae:02:53:1b:e9:e5:06:27:83:6b:51:49:f9:6d:
21:6b:de:bd:ff:87:66:6d:02:3d:44:85:b4:cf:e6:50:cb:5e:
ee:d7:2e:eb:60:d6:6a:63:1e:88:55:7d:63:58:0d:51:08:eb:
5a:91:a6:3a:cd:bd:5b:3d:69:e1:75:ba:be:58:0e:de:da:50:
bf:93:e6:05:a2:8c:8c:e0:fa:16:4e:44:f7:0d:1e:85:94:ed:
9b:ed:24:28:dd:01:9c:60:97:13:80:1f:91:cc:cb:8e:45:98:
dd:43:9a:ea:6d:de:ef:6e:96:a3:bd:3a:e0:a8:0c:f2:02:a9:
ca:ed:93:af:b7:96:5f:de:13:ac:eb:cb:7b:75:fb:47:d1:5d:
96:bb:7c:b9:69:45:0d:d6:2d:fc:8d:72:59:a5:6b:88:ad:d7:
18:aa:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:48 2025 by rpki-client