Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: Fr4+U5kCwPRsO4Id6d3uvwvHACRQRwY0XfE633NpVy4=
Subject key identifier: 7F:43:66:7C:F4:00:07:5C:92:A2:6E:CF:35:C0:94:40:28:EC:26:F9
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 0194BC7292C1BAE1E08BB3103F0E9FBEE8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: as4nCAAGwjFmpZOlJqpaL3Ep2+3eozWTCzUM8dxj8NQ=)
2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:92:c1:ba:e1:e0:8b:b3:10:3f:0e:9f:be:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=7f43667cf400075c92a26ecf35c0944028ec26f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:9a:be:ff:40:12:02:36:e9:90:4c:0d:e0:
ed:56:47:a8:ef:9e:8d:f3:10:bf:16:68:5e:b8:05:
ff:55:65:20:4c:23:e8:8d:43:3e:de:21:1d:c6:ba:
99:bd:a9:34:d5:e7:ea:04:87:0c:5b:95:13:7e:ee:
5a:2d:9a:61:59:65:32:2e:4d:6d:62:4c:f5:aa:58:
5c:1d:16:2a:1f:17:92:74:47:14:d9:f7:77:a7:d5:
b1:fe:bb:3e:95:42:88:6b:9d:d6:32:51:93:99:c4:
d2:89:8a:47:67:5a:8c:02:75:2e:fe:d5:62:3e:3e:
69:84:34:98:53:fc:06:b0:87:2d:66:f3:69:98:bd:
3b:0b:21:78:b1:a9:3d:b2:e4:31:6c:12:a0:ab:92:
5c:61:4c:45:9b:fb:1f:66:97:eb:e2:ca:9a:af:6d:
e2:35:c2:34:26:62:b7:12:e4:68:69:60:bc:17:91:
60:8d:95:4e:51:97:28:25:c0:54:3a:66:3a:01:11:
87:d0:f6:b1:c9:f7:ab:20:71:ce:6f:76:f3:c6:8c:
38:b1:17:e3:2c:7b:10:97:4b:5c:90:d2:43:5c:a2:
00:48:70:69:d3:83:c2:0b:18:8c:51:09:28:71:55:
27:d0:21:28:32:f7:bd:66:c5:01:99:b9:19:04:8e:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:66:7C:F4:00:07:5C:92:A2:6E:CF:35:C0:94:40:28:EC:26:F9
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:ac:81:1e:a0:0b:64:aa:dc:a9:a4:6e:ec:36:4c:06:88:
6d:fb:f6:77:89:ba:8f:de:f8:d1:c0:fd:b0:3d:65:ab:2c:3c:
89:2f:2d:f9:e6:72:b4:91:4e:b2:d4:07:72:ca:09:76:b4:07:
52:eb:33:6e:49:9f:06:5b:28:53:69:aa:df:88:84:6a:3f:8c:
ae:94:c2:59:df:0c:68:4f:34:fb:73:bf:c1:f4:1a:8f:6a:26:
0e:06:3c:6d:ab:bd:d6:d8:1c:3c:70:47:82:88:c1:c9:8a:4d:
c1:58:ed:9d:53:7a:34:6e:6f:e1:be:73:cd:b8:ac:01:ce:47:
25:b6:58:cc:43:27:59:4a:46:e9:e5:80:af:4d:c4:d5:00:40:
f2:64:12:b1:df:7c:41:29:10:e3:10:c5:ee:70:26:39:21:25:
20:3a:56:8b:37:a9:6a:6a:ee:48:e8:44:77:98:74:a6:4f:f8:
7c:7f:9f:25:80:cf:6e:89:2a:47:bc:55:45:e5:49:77:84:7a:
e9:99:62:c5:09:f6:59:b9:cd:ad:06:39:6f:37:b0:97:a2:99:
b5:9b:dd:fc:cd:53:26:3b:e7:87:b0:8e:0d:7b:ac:68:02:55:
d5:be:4f:81:c7:f0:bd:77:79:83:44:8a:19:8e:e6:f2:be:18:
f8:ff:81:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpLBuuHgi7MQPw6fvujbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4
NWU0NjEwHhcNMjUwMTMxMTMwMDEyWhcNMjUwMjAxMTMwMDEyWjAzMTEwLwYDVQQD
Eyg3ZjQzNjY3Y2Y0MDAwNzVjOTJhMjZlY2YzNWMwOTQ0MDI4ZWMyNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyuavv9AEgI26ZBMDeDtVkeo756N
8xC/FmheuAX/VWUgTCPojUM+3iEdxrqZvak01efqBIcMW5UTfu5aLZphWWUyLk1t
Ykz1qlhcHRYqHxeSdEcU2fd3p9Wx/rs+lUKIa53WMlGTmcTSiYpHZ1qMAnUu/tVi
Pj5phDSYU/wGsIctZvNpmL07CyF4sak9suQxbBKgq5JcYUxFm/sfZpfr4sqar23i
NcI0JmK3EuRoaWC8F5FgjZVOUZcoJcBUOmY6ARGH0PaxyferIHHOb3bzxow4sRfj
LHsQl0tckNJDXKIASHBp04PCCxiMUQkocVUn0CEoMve9ZsUBmbkZBI40fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9DZnz0AAdckqJuzzXAlEAo7Cb5MB8GA1UdIwQY
MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt
NDU5ODY4OWQ1NTFlLzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl
LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSisgR6g
C2Sq3Kmkbuw2TAaIbfv2d4m6j9740cD9sD1lqyw8iS8t+eZytJFOstQHcsoJdrQH
UuszbkmfBlsoU2mq34iEaj+MrpTCWd8MaE80+3O/wfQaj2omDgY8bau91tgcPHBH
gojByYpNwVjtnVN6NG5v4b5zzbisAc5HJbZYzEMnWUpG6eWAr03E1QBA8mQSsd98
QSkQ4xDF7nAmOSElIDpWizepamruSOhEd5h0pk/4fH+fJYDPbokqR7xVReVJd4R6
6ZlixQn2WbnNrQY5bzewl6KZtZvd/M1TJjvnh7CODXusaAJV1b5PgcfwvXd5g0SK
GY7m8r4Y+P+B7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:44 2025 by rpki-client