
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: R+9MDWMn/0jVM4EyL4qpcXslg7EnxA2fqgIIZhWiRCI=
Subject key identifier: 37:07:81:87:6F:92:17:E2:31:1F:BF:D4:C9:89:0B:D8:42:95:F8:32
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 0194BD4E9734D7AE2C5FDDC6F7107D7661D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0169
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: LfHMp89Sr8MSHxm64iJn/0lfCIHhgbV3vw05QCJACuQ=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:97:34:d7:ae:2c:5f:dd:c6:f7:10:7d:76:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=370781876f9217e2311fbfd4c9890bd84295f832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:b8:12:c5:86:d0:83:2d:df:69:02:c7:41:
00:8e:b1:f0:b8:2a:84:fe:ef:08:b9:c4:42:f3:3f:
9a:07:45:3b:41:b1:74:0a:13:16:0f:33:40:33:8d:
b2:8d:a0:d3:8c:a8:72:c5:d8:96:06:3f:2a:90:0f:
b2:e2:fa:e9:87:09:c5:fa:46:d2:34:9a:fe:6b:56:
bc:3c:de:56:35:17:fe:c1:33:3a:49:35:42:bb:f1:
1f:68:0f:11:72:de:d3:90:fc:58:f1:cd:3c:9c:7c:
34:8e:51:50:7b:12:91:80:72:a7:a7:66:83:cb:9b:
52:d8:86:fe:5b:64:9f:18:97:f5:44:9a:42:de:a1:
18:11:99:6b:e1:3d:a3:b3:33:1a:cd:8e:bd:ac:2c:
d2:88:77:c9:2a:49:7a:a0:34:75:0d:31:1d:a6:31:
05:3c:4c:f3:2d:0c:55:23:3c:4f:d4:44:17:7b:28:
09:7b:d8:22:ee:da:5f:c1:49:40:0c:ee:41:f3:35:
f0:4e:4d:49:04:e4:2d:89:2b:e9:d5:f0:49:18:71:
50:3e:e7:c8:2f:a1:d2:58:6e:e2:9b:b9:05:04:9a:
7f:e2:fd:f1:2c:03:b4:c1:bb:df:3e:12:b7:c8:9e:
45:b5:a3:07:ae:0d:3a:f4:24:dc:33:53:95:2f:2e:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:81:87:6F:92:17:E2:31:1F:BF:D4:C9:89:0B:D8:42:95:F8:32
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:3a:60:60:04:76:2f:10:e2:a7:83:d8:fc:6e:f9:b6:25:
43:ad:1f:9f:04:c6:84:c3:ce:d3:01:79:5b:71:23:21:5b:fe:
d1:8b:95:4b:98:93:6f:64:db:15:ee:64:3c:90:76:fe:a7:70:
f0:67:38:26:1b:9c:1f:d1:d4:8e:cc:2b:87:23:e6:cb:0e:e9:
3b:8f:0d:16:4d:3b:42:25:86:79:dd:93:83:1d:a7:bb:03:63:
9a:9a:af:49:76:31:50:c7:8b:1c:bb:f6:55:fb:db:6b:95:8e:
be:25:1c:0f:97:02:4e:68:2c:5d:01:21:d0:a1:9e:9f:56:b0:
02:b7:88:47:9a:47:31:66:eb:03:7e:05:e8:22:a0:b4:c6:a1:
52:15:ed:00:ff:6e:db:e3:44:c1:15:e8:ea:6f:37:b3:d5:a7:
d1:6b:9c:73:fc:80:1e:07:93:5a:47:a6:72:0e:e4:a4:10:db:
2c:e0:fa:c5:b7:ce:21:a0:5b:6b:c4:16:bc:68:b2:19:1d:a7:
f8:fd:19:b9:4b:f5:a3:7e:1a:d7:2b:c7:ad:9f:bb:52:2d:fa:
fe:ae:18:08:02:38:d8:88:6f:2e:19:49:ed:ca:b2:cf:8a:3e:
07:6b:75:e4:1e:88:93:a9:4d:bc:d5:19:30:d0:ca:52:2b:28:
d2:4a:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:17 2025 by rpki-client