Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
File: 2KPKzfjzNRS-Or3FLFDshkZ16VU.mft (raw, json)
Hash identifier: 2qXByrMQ8hAm0gPyGW4PufqJ6PPSVLJT6Q8TDRgorww=
Subject key identifier: 5E:CA:93:DE:91:56:DC:31:3A:3F:45:78:09:C2:63:28:75:34:53:83
Authority key identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
Certificate issuer: /CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Certificate serial: 0194BD857CFFF5CA743DF869390381E8F214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
Manifest number: 0983
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 2KPKzfjzNRS-Or3FLFDshkZ16VU.crl (hash: KNgdvBjLN8IS8vZ561rPYvIdmD8CXd2r3GshAHMpyb4=)
2: YfAgsC_cdxTTdTc3lRuKLUA9Ek4.roa (hash: 6JxCw6QKy553BkYrq5SFqTFyUQePShSh+1QhYyHxmes=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:ff:f5:ca:74:3d:f8:69:39:03:81:e8:f2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=5eca93de9156dc313a3f457809c2632875345383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:61:44:87:a1:9e:4e:0c:40:5e:09:0a:7b:
07:51:f4:c7:f3:74:86:64:89:4f:81:f9:e7:a3:82:
dd:93:98:16:58:d1:f2:2c:f0:53:18:c8:35:c5:cb:
bc:96:e2:1a:93:d2:0d:41:00:12:99:6d:1d:1b:9d:
a6:69:06:f6:9a:d4:6f:5e:f5:3c:82:5b:f6:7f:78:
94:51:bd:96:82:ab:31:4b:de:8f:f8:2c:e5:62:88:
87:58:14:f7:94:5a:6f:97:61:51:23:d1:74:76:ff:
c6:10:3c:b4:31:8c:ba:cd:5e:e1:3d:f0:21:8c:ca:
ee:2c:35:99:8f:73:b0:c0:4b:e5:65:2c:64:c1:47:
18:a8:5a:b7:34:7d:f3:03:e5:31:03:99:90:e6:a0:
9b:73:3c:e7:5f:5a:55:4a:86:0d:b6:1a:88:4b:ea:
f1:c4:cd:e7:f8:50:f0:43:bc:93:bb:57:ed:75:43:
34:2d:22:cc:f6:35:58:03:ce:d4:ef:fc:96:0a:b6:
7d:79:ae:07:2c:43:7c:27:dd:d8:af:9a:67:b2:d0:
d3:7a:8b:6c:73:01:ae:ea:bf:53:b9:d0:f7:aa:f6:
06:9b:a4:9a:9e:c4:39:a2:04:24:2c:11:8b:f5:21:
53:a9:32:b4:06:bc:11:cd:cf:f9:a6:fb:cd:9e:d4:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:93:DE:91:56:DC:31:3A:3F:45:78:09:C2:63:28:75:34:53:83
X509v3 Authority Key Identifier:
keyid:D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:71:cb:45:41:93:25:58:8b:9f:09:5a:7a:b3:55:9d:ca:0a:
c3:1c:87:2e:8c:f3:d4:e2:7b:6f:1a:22:1a:bb:e4:e0:0a:96:
73:5b:9b:d6:ab:2c:54:9a:6d:4a:55:01:7d:d1:ca:8a:8b:71:
ab:0f:77:f9:0b:c4:80:f4:8c:3e:15:d2:bc:74:79:e4:71:8d:
a0:7a:18:2c:9e:2a:60:db:4b:5c:59:30:4f:e8:0f:22:f3:2c:
73:42:05:07:41:78:54:a2:56:cb:ae:99:95:aa:ec:b5:b3:70:
54:67:8b:cd:74:a6:1d:36:11:2d:db:fd:d9:35:61:d8:87:6b:
6b:3e:3e:43:7c:8b:73:10:6b:36:eb:ec:88:03:de:0a:aa:c6:
17:3f:b8:0a:23:12:7e:28:7c:54:d9:00:7e:64:e9:33:7b:f7:
8b:9f:9f:07:80:6f:b6:b5:b7:3c:a3:45:5d:03:22:ee:eb:cd:
c7:2f:28:93:7a:f9:3b:be:75:d5:22:8f:4c:bc:50:a9:d6:cd:
2f:d5:5c:76:9a:e7:69:45:30:4a:61:5d:68:5e:e6:2e:9a:9d:
2c:b8:1a:91:84:fb:ef:2a:43:c2:df:75:a7:a1:ab:e3:df:0c:
29:91:0c:f7:af:31:8b:1e:78:b6:16:81:e6:4e:81:06:d2:68:
6f:a3:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:58 2025 by rpki-client