Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: fMGN6gBOiG1ocZHFhzBgLgWEs6UkNyHg0299qc8zIdU=
Subject key identifier: 0A:6B:D0:26:6D:43:5F:94:D2:58:E7:A2:D3:8A:22:68:CD:11:93:2B
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 0194BD17B778DFB6495A2027941200924BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 124F
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: CpXZDvqRgTej8w+aXuKSzSXAHPF0hLluBnIa02uz61w=)
2: qvV18edZ4nG1g9Z6XFGjfB91HGk.roa (hash: xA0FHg4k3qhHIOcw440t6o/vgKfLrTtDa1pgd5bBDMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b7:78:df:b6:49:5a:20:27:94:12:00:92:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=0a6bd0266d435f94d258e7a2d38a2268cd11932b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:a0:2f:d0:fb:75:79:19:f8:9a:3e:28:ab:
ea:2c:f1:a8:75:61:3b:1e:a3:6e:b9:43:4e:63:ec:
ec:bc:74:b5:0d:18:40:36:e7:ce:a3:17:12:ff:e7:
bb:61:a8:9a:0b:76:f0:58:71:e0:28:c9:37:5c:c1:
2a:41:71:79:59:6d:84:06:e1:a5:82:7f:75:17:50:
79:21:e2:d3:ad:ff:4e:22:a8:15:d3:34:3b:05:d0:
1d:e7:37:bf:3a:08:77:ab:3a:41:ff:39:53:53:5a:
93:ae:97:25:2f:23:35:a8:90:51:6f:bd:d9:2d:1a:
b2:7e:64:58:89:43:59:c1:6b:2d:c6:18:eb:10:c3:
3b:71:8c:9e:f2:8d:a3:50:28:b5:52:38:7f:dc:e8:
6b:9e:7c:c2:1b:db:55:22:14:27:c5:8f:1b:a2:fa:
d0:ab:8d:9e:bd:5b:83:60:aa:b2:43:4e:12:73:4f:
5d:af:fc:c1:66:e9:2e:ef:c3:36:40:0d:4e:62:e7:
ab:4f:51:ae:43:e1:f0:ff:07:71:4f:3a:33:b9:33:
c9:de:37:a2:81:60:4c:c7:52:bb:4a:23:17:a7:54:
83:c3:75:55:f7:73:c9:05:4d:b1:c4:28:2b:67:ec:
73:96:e1:34:24:35:e0:b7:2f:2f:25:e6:e2:b2:96:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:D0:26:6D:43:5F:94:D2:58:E7:A2:D3:8A:22:68:CD:11:93:2B
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:82:50:89:fe:2c:75:70:e3:18:1a:4c:84:49:01:bd:b0:cb:
cc:b1:e1:44:7c:2f:44:b6:5b:a6:01:15:20:93:86:df:fc:76:
4d:86:dc:18:c5:2c:57:5f:b6:5c:8d:95:55:bc:55:6c:75:6e:
57:0a:2e:43:a6:eb:ca:00:22:23:f8:8b:9b:fc:34:c3:13:c8:
e3:5d:06:cd:4e:ac:b5:31:bc:91:73:24:ac:19:aa:03:6f:84:
98:f4:a0:1a:ce:13:1d:ad:3a:a9:ff:e4:50:b5:1a:ca:d3:47:
4d:86:61:68:7a:78:a3:f0:22:6d:7a:51:e7:1a:71:35:9d:57:
af:13:f8:44:56:e9:02:3c:81:d9:0c:37:36:f1:cb:2f:6e:e0:
96:9c:da:98:81:9c:bc:8c:c7:d4:82:9a:e4:41:26:47:ba:02:
8d:bf:a5:d7:b0:45:4f:e6:9e:4f:be:0e:90:0e:3b:cf:92:33:
ac:3e:50:ca:d8:0e:10:b6:e3:5e:64:24:26:f5:5b:5c:02:2e:
4f:a3:14:80:14:5a:19:97:59:77:f3:7b:a1:45:03:e0:4c:1a:
43:48:1f:2e:10:ec:5a:f4:93:43:c5:e2:ea:cc:db:fc:7b:43:
f0:0d:5c:93:1f:c2:87:84:ae:24:46:e2:9a:02:22:42:dc:db:
a9:fc:5f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7d437ZJWiAnlBIAkkvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmI5NmVhM2FmNTFjNTMyZDdlOGZlOGM5NDM3NmY1MWUx
ZWE0MDIwHhcNMjUwMTMxMTYwMDM1WhcNMjUwMjAxMTYwMDM1WjAzMTEwLwYDVQQD
EygwYTZiZDAyNjZkNDM1Zjk0ZDI1OGU3YTJkMzhhMjI2OGNkMTE5MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBGgL9D7dXkZ+Jo+KKvqLPGodWE7
HqNuuUNOY+zsvHS1DRhANufOoxcS/+e7YaiaC3bwWHHgKMk3XMEqQXF5WW2EBuGl
gn91F1B5IeLTrf9OIqgV0zQ7BdAd5ze/Ogh3qzpB/zlTU1qTrpclLyM1qJBRb73Z
LRqyfmRYiUNZwWstxhjrEMM7cYye8o2jUCi1Ujh/3OhrnnzCG9tVIhQnxY8bovrQ
q42evVuDYKqyQ04Sc09dr/zBZuku78M2QA1OYuerT1GuQ+Hw/wdxTzozuTPJ3jei
gWBMx1K7SiMXp1SDw3VV93PJBU2xxCgrZ+xzluE0JDXgty8vJebispbkeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApr0CZtQ1+U0ljnotOKImjNEZMrMB8GA1UdIwQY
MBaAFNj7luo69RxTLX6P6MlDdvUeHqQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzIt
OGViODVlMzI4M2UyLzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzItOGViODVlMzI4M2Uy
LzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYJQif4s
dXDjGBpMhEkBvbDLzLHhRHwvRLZbpgEVIJOG3/x2TYbcGMUsV1+2XI2VVbxVbHVu
VwouQ6brygAiI/iLm/w0wxPI410GzU6stTG8kXMkrBmqA2+EmPSgGs4THa06qf/k
ULUaytNHTYZhaHp4o/AibXpR5xpxNZ1XrxP4RFbpAjyB2Qw3NvHLL27glpzamIGc
vIzH1IKa5EEmR7oCjb+l17BFT+aeT74OkA47z5IzrD5QytgOELbjXmQkJvVbXAIu
T6MUgBRaGZdZd/N7oUUD4EwaQ0gfLhDsWvSTQ8Xi6szb/HtD8A1ckx/Ch4SuJEbi
mgIiQtzbqfxfPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:14 2025 by rpki-client