Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: nuz6N2sXlT2TnPp9BbucTbLLouE4pGnyQWFiFV3uvtQ=
Subject key identifier: 86:4E:E1:EB:35:68:D9:97:12:23:DA:CD:52:2D:08:C6:45:B9:AE:1F
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 0194BCE0BB55B00E5DA4325E522300EDB838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0859
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: nIRIrjEP9PSQRCHYW8opfpWTJ3ztbrsAByRrIoJcl+Q=)
2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
3: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
4: fWxAWe7FNQHl72525jh3CvQUjPI.roa (hash: wZ498wFmeXSTeDsoNJdQ0818F8qSsmRp/ozGqSUyBQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bb:55:b0:0e:5d:a4:32:5e:52:23:00:ed:b8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=864ee1eb3568d9971223dacd522d08c645b9ae1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:63:89:3c:a5:93:ae:26:bd:f2:35:14:2a:
2f:7b:0c:16:5a:fa:db:bf:a6:ea:8b:2a:70:e9:c4:
24:51:3d:1e:b5:4b:72:51:08:fe:46:71:34:dd:9f:
4b:20:41:dc:c7:e8:26:e5:84:3f:7e:1e:ff:e4:1e:
df:2c:ee:cd:18:57:d8:40:ea:3c:0c:f9:4f:bb:72:
1b:0d:5d:e2:fa:7f:28:f8:92:16:3d:5d:63:18:52:
01:8f:0a:bc:af:27:c4:b7:d1:23:52:67:b2:c2:74:
3f:b7:1e:1e:81:74:28:53:af:cd:3a:aa:2f:0d:f5:
39:52:e4:15:19:45:b9:e2:fa:89:70:03:3f:59:86:
59:1c:c4:07:1d:cb:11:90:0d:6e:83:82:c5:ef:d5:
b0:26:d2:a9:13:93:02:f1:64:63:a1:2a:90:25:ad:
20:09:c5:5a:e7:c3:2b:e2:14:2b:ee:ed:4c:30:94:
00:8a:1e:ac:78:5b:c8:38:ff:f1:11:4d:48:dd:c6:
7f:f0:59:f1:8c:9e:b4:1b:77:19:f3:ce:4e:62:66:
a0:8c:0c:b4:52:cc:07:3a:b8:c1:39:7d:7c:08:8c:
2e:42:60:11:4d:c2:6b:4c:32:c9:b2:63:1a:25:05:
be:91:f5:b3:2f:87:37:85:0e:82:2d:66:f1:3e:3f:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4E:E1:EB:35:68:D9:97:12:23:DA:CD:52:2D:08:C6:45:B9:AE:1F
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dd:d9:0b:3f:93:29:62:ad:7f:cf:23:7b:a5:f4:36:d4:2b:
fc:68:75:fd:f5:59:d5:d0:7a:d0:24:c9:e0:fc:f3:6a:aa:86:
15:9a:47:fb:1d:71:19:66:90:a5:f8:a0:f4:44:4d:ad:e5:40:
3b:90:79:1d:64:6e:5d:4e:b8:05:04:f6:68:b3:63:c8:76:87:
dc:d2:b2:7c:27:a3:54:d8:d0:ae:0d:47:13:07:a0:1a:9f:42:
02:ce:4f:d2:76:a2:0a:b8:97:78:94:58:3f:27:17:0c:66:eb:
c3:3b:1f:8f:7d:30:49:55:b7:c5:0e:89:0b:25:dc:32:14:4c:
cb:61:f7:57:4d:84:5b:44:11:b0:61:81:76:cd:eb:2c:6c:0d:
78:cd:0e:36:05:79:2d:da:ee:9f:da:84:84:07:f7:95:76:4c:
15:2f:60:4d:0a:4a:a8:24:f7:94:b9:fd:5e:d1:f2:6e:3c:bf:
62:3f:d9:34:c3:22:16:dd:6c:4c:e6:b0:33:49:0c:d3:9f:d5:
c8:98:d9:05:a6:00:fe:e6:4c:a8:58:f6:58:ac:c3:45:71:8f:
d6:63:db:84:0f:f2:09:cc:9a:be:08:97:3e:5a:6d:8e:28:fd:
1b:42:23:86:ad:86:02:4b:58:d2:db:51:91:94:1f:72:fd:69:
8f:a1:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:49 2025 by rpki-client