Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: dINpVSQtYkSmcL9zAVVQ2niSI58jTzEtes2JJYSfGQs=
Subject key identifier: 39:0F:60:4B:2F:A1:C2:24:A3:5E:01:9E:5B:7E:C4:15:84:58:A4:83
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 0194BD176A31D7D9342CE77427A4A67048D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (hash: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: CsUjctJR+7ASl3aNk4zY4diK3RPthlK9F6LVm6RMTlA=)
3: bhkCmw6Utz1WDIi1a3ZQnDXW25w.roa (hash: vuvSrc/xAi8bu4mOjDMbPo9yb6kp8ev2fK1dkeS76Yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:31:d7:d9:34:2c:e7:74:27:a4:a6:70:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=390f604b2fa1c224a35e019e5b7ec4158458a483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:4c:42:75:88:a7:58:c6:09:ba:c1:51:fe:
9f:93:a1:fc:a6:33:f6:2c:31:67:c7:82:2b:0a:89:
65:38:bd:32:9c:31:bb:86:c1:14:a5:72:e2:56:d5:
87:2e:d2:df:18:50:ff:83:db:86:04:75:c6:1f:49:
7a:7c:b4:67:6f:a1:ad:a7:be:5e:e1:de:59:4a:5c:
51:97:1a:7e:65:24:4d:0a:16:bf:83:ed:b6:7d:a2:
04:f2:fc:43:c5:22:b1:e3:28:26:9b:8a:21:c0:41:
12:43:e2:88:ae:4d:55:b0:72:fc:74:a2:15:e3:08:
01:46:d0:11:58:53:1f:74:4f:54:1e:92:3b:77:03:
86:6e:28:97:22:8e:63:65:bd:28:30:f1:96:73:46:
30:fd:e8:78:79:b8:94:6b:49:ea:ff:ee:94:26:4d:
cb:4b:f3:4f:52:93:d3:30:d6:0d:e8:35:30:4d:f8:
57:2e:c0:86:a8:cf:62:c8:82:d3:bc:5f:e6:f3:d0:
65:4d:55:6c:2a:9c:d0:90:a5:05:f2:61:41:6b:ad:
7f:5c:60:87:87:50:83:47:af:2a:76:5f:f8:63:c8:
78:e7:80:dd:9c:b8:c0:51:2b:55:9c:f2:64:aa:c4:
49:ad:09:b9:c0:f3:67:95:05:c2:7b:1a:9d:2d:e0:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:60:4B:2F:A1:C2:24:A3:5E:01:9E:5B:7E:C4:15:84:58:A4:83
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:51:3f:5b:4e:d8:2a:73:8a:6a:84:a3:e5:71:be:9b:10:22:
57:ee:55:7b:95:13:be:a8:5f:9e:c6:c9:ca:60:25:09:75:08:
b1:0a:5f:dc:d2:c7:33:5e:3f:70:4d:1f:af:ed:8f:5d:a9:e0:
1f:13:1f:b0:15:a1:dd:8a:08:bb:47:ac:18:63:01:77:95:1b:
ca:93:8d:d1:57:aa:d9:98:0c:8d:9e:83:23:cb:6e:e4:c0:45:
e5:d7:a3:1d:32:ce:4f:79:44:7b:7c:8e:07:d8:47:8d:8f:1f:
e9:9f:12:72:98:05:aa:43:aa:6f:e1:2f:be:ec:51:17:6d:ed:
32:45:74:2e:71:4e:5c:5c:ac:d6:2e:57:71:5e:ed:53:6c:cc:
9b:95:95:1c:31:92:56:73:cf:8e:7d:07:2a:3f:69:aa:43:2d:
07:b8:29:12:00:e8:88:97:ea:5e:12:82:eb:63:2e:1c:26:5c:
a8:4e:97:a8:e2:99:f1:b6:e3:7c:82:e6:b1:d3:b3:e0:48:62:
9c:18:03:1b:17:b2:6a:3a:90:d3:c7:48:19:e8:5a:9a:de:ef:
2a:33:8f:f0:36:99:4c:c9:59:09:bf:4a:79:54:13:24:bb:41:
ad:a2:cf:b8:90:ab:90:34:8a:43:ad:67:d8:62:0c:88:77:7f:
6b:12:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:54 2025 by rpki-client