Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: 3AvCxKV4INL+9RyK3h5fi+PNrej3T+NuSeS19W8zTRw=
Subject key identifier: 53:58:25:EF:FB:6D:11:59:70:C9:33:86:FD:AB:02:48:77:4B:23:94
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 0194BC050702C1EDC165C11D7283E3C9D4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: UIttSjFONhc8SjrLnbgIdtFRCUxnaWUZsWrwPDSl7K0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:07:02:c1:ed:c1:65:c1:1d:72:83:e3:c9:d4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=535825effb6d115970c93386fdab0248774b2394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:1b:05:e2:5f:fd:8f:86:77:04:61:4f:06:
92:00:44:7c:60:c6:de:cd:3d:5d:bf:4f:86:93:f3:
3c:92:15:1a:4a:2c:de:d6:ca:eb:70:fa:43:de:fe:
06:ad:4a:6e:1c:9d:13:bc:21:f6:e0:9f:21:66:6d:
46:b3:51:e9:d5:1d:e7:b3:c3:03:75:bb:df:d2:fe:
aa:40:a7:a7:22:32:0f:ca:19:e8:09:df:3e:bf:f4:
4e:70:4b:a7:28:b8:04:00:aa:78:e6:b2:46:6c:5d:
d3:2a:47:16:a0:24:ae:b8:4a:a8:bc:8f:8e:f7:66:
05:a5:c6:6f:1a:e6:af:a0:c0:4a:f8:99:06:b3:ef:
0c:6d:43:76:a0:a8:d2:35:8b:db:f9:6d:76:4d:b2:
ed:6e:6e:43:76:46:15:14:d6:f2:b7:e5:11:4b:9a:
b7:e3:bc:2e:06:37:74:10:c2:05:13:40:f2:84:0a:
de:74:3b:7f:60:ca:ed:30:1a:a9:12:f8:55:8b:88:
3a:c3:7a:8b:82:21:b1:d6:95:19:d2:8f:af:63:7b:
60:77:ea:27:a2:9b:a8:78:25:49:fe:20:09:bf:ff:
4e:3b:37:b2:6f:f2:dd:20:4c:9c:c7:85:0c:0c:01:
0e:ae:12:38:fa:69:19:05:b0:cd:e5:71:e0:5d:d7:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:25:EF:FB:6D:11:59:70:C9:33:86:FD:AB:02:48:77:4B:23:94
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:18:4f:c8:6e:5e:0c:14:f0:4e:8f:80:d9:34:55:f8:ed:c1:
21:f0:ad:d8:0b:1f:16:4d:ca:54:2a:63:34:49:31:c1:76:f4:
27:63:95:bd:65:04:92:a1:c8:bf:36:9c:c6:81:cc:7d:74:8b:
11:93:46:88:61:25:e4:d6:e9:c0:83:63:30:4b:81:80:ce:92:
b0:12:16:9f:2d:a2:a7:98:2d:a9:a5:7c:a9:75:20:fa:15:a5:
56:1d:08:e9:48:70:6b:7e:3b:fc:86:1c:29:e5:5c:6a:9e:b7:
ae:4b:82:bc:ff:1d:06:e0:6c:b7:69:d5:af:e9:ca:48:ac:21:
8e:33:a7:db:9a:a4:cb:ed:3b:fb:26:c8:7a:d8:7e:f3:14:31:
ed:92:77:9d:90:5f:c3:9c:ed:ef:31:57:91:8f:fa:71:e4:79:
0d:a1:93:a0:ab:ec:3d:a4:c2:bb:af:81:74:3d:e8:c3:30:31:
75:6b:32:cd:5b:1d:13:d3:05:ba:15:a8:f0:9e:f4:9e:a9:ab:
e9:6c:5f:32:b4:a9:33:4f:98:34:77:40:11:4f:54:e9:22:60:
45:3c:15:ce:d9:49:8a:36:7c:83:96:43:b4:ed:d1:4d:5d:b8:
20:0d:63:b7:27:84:28:bd:54:a8:99:db:93:f3:5f:2e:84:1e:
67:4d:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:35 2025 by rpki-client