Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: fSJ9gO74Vb7PpSVUlGrF776XSSf4AILfd8nZguJ/bJ8=
Subject key identifier: F4:A1:FF:FA:28:E1:65:01:FF:EE:82:55:EF:EE:81:A2:22:32:BD:93
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 0194BCE0BAD879F37D3AAC7F3DBA0FF8694F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 11EE
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: DWyTzQvjwTvNpqcXl1ZJ7/IVNLlw/IyaAowLrDrg9jA=)
2: FjL5MqcK0dv0phSETNIP5t1SBWg.roa (hash: HghvVzu9hsO9wX3NaFq2EgUKtQhDl/MHwAlkrJlofBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:d8:79:f3:7d:3a:ac:7f:3d:ba:0f:f8:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=f4a1fffa28e16501ffee8255efee81a22232bd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:f0:8f:37:0d:90:c3:58:68:fc:c0:ff:55:
23:4c:2e:e7:1b:b3:ee:13:c9:98:d1:90:35:20:5f:
3c:c4:66:97:d4:a6:d7:56:02:e8:cf:4a:13:2e:1f:
8b:35:8f:bf:ce:5d:02:5d:9d:d5:a7:ac:91:d2:13:
4e:eb:66:1a:0f:97:90:3e:06:86:f1:a1:09:7a:84:
a5:84:45:6b:bc:1b:e7:d8:59:76:a5:f7:35:f2:3d:
bf:73:41:52:92:53:ad:ad:53:ff:cf:70:86:84:17:
a5:01:2c:d9:ed:37:45:07:b3:3f:40:ef:35:86:45:
0b:0c:ce:1d:da:ec:c6:20:93:d9:8f:8d:c2:6b:70:
b5:1b:83:b8:a3:69:67:1a:3f:ec:b7:1f:55:89:81:
34:4d:9b:ac:2f:c9:59:04:02:b5:08:05:17:3e:fa:
93:bd:85:24:db:24:4f:f2:b9:2e:d8:77:79:05:c7:
86:5d:b2:2d:ab:01:fe:f2:fa:7f:33:34:b6:78:92:
68:22:df:08:81:f6:c7:8f:3d:a9:80:f8:1c:e3:cc:
58:a5:6c:5e:78:33:e2:db:9e:a7:bb:1a:d5:4f:7c:
6c:96:7b:6d:dd:16:91:b0:6f:bc:1d:a3:e6:58:15:
0a:85:f0:54:4b:06:ca:03:aa:58:94:27:bd:9a:54:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:FF:FA:28:E1:65:01:FF:EE:82:55:EF:EE:81:A2:22:32:BD:93
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:58:cc:f2:dd:55:d8:7a:50:36:db:ac:68:8e:13:53:5d:26:
f4:38:ea:6c:8b:ac:23:c2:ed:4a:69:5d:52:52:10:99:fa:11:
67:93:a3:34:f0:36:2e:0f:8a:65:54:b5:ff:b3:6e:49:57:f5:
e1:f4:e4:99:35:5f:51:97:b7:c8:c4:91:0e:f4:5c:76:65:2f:
31:6b:46:15:49:c8:26:58:04:f2:9a:1d:0b:10:c2:d9:9b:e4:
cd:40:2f:35:c5:2c:51:43:72:aa:98:5a:5d:b0:e6:36:d0:49:
bf:19:8d:fc:b4:e3:ca:51:74:cd:6a:49:04:c8:be:d2:2e:db:
b2:b7:05:50:c1:61:ff:bc:6c:c1:9a:a7:13:b5:40:7b:76:d0:
53:a5:7e:97:c2:bd:4f:7c:69:63:06:c6:82:f1:36:16:69:60:
fa:5a:b9:48:98:e6:33:1b:c9:0a:e5:ca:75:7c:63:30:0d:d3:
78:21:e0:37:90:c9:b1:8b:57:99:04:0a:7e:2e:c0:11:a5:7d:
b5:37:a3:c0:ab:dd:5d:80:67:c1:5b:7d:df:fc:b7:21:30:77:
33:0e:04:cb:02:30:08:07:11:3d:36:b5:df:47:61:ca:00:df:
e5:85:9f:36:36:3a:ec:95:63:2d:34:96:f9:2f:bc:0a:63:4f:
d3:42:73:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LrYefN9Oqx/PboP+GlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTRlN2E2YmU5N2NlYzZmNWJjMWE2NzhhNzZlYTZkMTYx
OWMzMDYwHhcNMjUwMTMxMTUwMDMxWhcNMjUwMjAxMTUwMDMxWjAzMTEwLwYDVQQD
EyhmNGExZmZmYTI4ZTE2NTAxZmZlZTgyNTVlZmVlODFhMjIyMzJiZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH3wjzcNkMNYaPzA/1UjTC7nG7Pu
E8mY0ZA1IF88xGaX1KbXVgLoz0oTLh+LNY+/zl0CXZ3Vp6yR0hNO62YaD5eQPgaG
8aEJeoSlhEVrvBvn2Fl2pfc18j2/c0FSklOtrVP/z3CGhBelASzZ7TdFB7M/QO81
hkULDM4d2uzGIJPZj43Ca3C1G4O4o2lnGj/stx9ViYE0TZusL8lZBAK1CAUXPvqT
vYUk2yRP8rku2Hd5BceGXbItqwH+8vp/MzS2eJJoIt8IgfbHjz2pgPgc48xYpWxe
eDPi256nuxrVT3xslntt3RaRsG+8HaPmWBUKhfBUSwbKA6pYlCe9mlQ9FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSh//oo4WUB/+6CVe/ugaIiMr2TMB8GA1UdIwQY
MBaAFNsU56a+l87G9bwaZ4p26m0WGcMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAt
MTFmOTFkMDczOWM5LzEvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAtMTFmOTFkMDczOWM5
LzEvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARljM8t1V
2HpQNtusaI4TU10m9DjqbIusI8LtSmldUlIQmfoRZ5OjNPA2Lg+KZVS1/7NuSVf1
4fTkmTVfUZe3yMSRDvRcdmUvMWtGFUnIJlgE8podCxDC2ZvkzUAvNcUsUUNyqpha
XbDmNtBJvxmN/LTjylF0zWpJBMi+0i7bsrcFUMFh/7xswZqnE7VAe3bQU6V+l8K9
T3xpYwbGgvE2Fmlg+lq5SJjmMxvJCuXKdXxjMA3TeCHgN5DJsYtXmQQKfi7AEaV9
tTejwKvdXYBnwVt93/y3ITB3Mw4EywIwCAcRPTa130dhygDf5YWfNjY67JVjLTSW
+S+8CmNP00JzuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:17 2025 by rpki-client