Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: LlMYcdP0f4Km+E3a7L2ghqDo8pU3n4Q0tGj5Smu5Kcg=
Subject key identifier: 5B:0F:EF:9C:3C:38:C4:AD:C2:EA:BB:C5:06:87:FB:42:4C:6E:CA:6D
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 0194BCA9FCAFAE01CE275EAC61FC8C43C654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: MwUwqdwqNeqqSW9JYXV3B0bpkXydwD8zjNnCxeXGQRs=)
2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=)
3: lreCMOjUdm3oifNloxJ4msuXFJI.roa (hash: q93r2pfO0cfnXT+oJEJZWRJxFW5lh24m9a7fpzeRDvw=)
4: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fc:af:ae:01:ce:27:5e:ac:61:fc:8c:43:c6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=5b0fef9c3c38c4adc2eabbc50687fb424c6eca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:41:fa:ae:26:e4:04:f7:9a:06:b6:d9:36:
42:56:08:e0:a1:02:b2:5b:9b:ee:ed:10:5c:ab:2a:
42:a6:df:18:94:a9:00:81:5f:83:b6:00:47:7a:c3:
3a:e3:a7:af:24:e3:75:eb:e9:49:2f:6d:f5:f9:b0:
c3:4c:a2:e3:19:fd:74:b0:93:b3:09:97:a0:d9:6a:
7a:af:58:96:4b:28:ea:57:f7:2f:d3:17:b5:01:82:
35:80:e5:95:6b:61:b9:18:02:25:cf:b1:eb:bd:7a:
c1:c9:81:24:00:13:76:ef:57:f8:12:04:d8:70:4a:
0b:4f:31:c0:a8:80:36:f3:05:97:85:2a:a7:02:37:
74:fb:fd:3d:b0:a6:40:be:c3:7d:f5:8f:01:2c:ae:
7f:eb:89:10:8b:5a:5d:a8:7b:86:2e:7a:1a:2c:df:
c2:48:fc:ce:c4:b9:20:20:06:5f:80:dd:3a:6f:20:
bb:7b:29:fb:ae:f7:4e:b1:1c:c1:98:81:03:54:61:
22:32:4a:c8:47:0c:11:55:bc:d0:ea:15:58:54:d5:
af:ce:29:47:e5:b8:42:15:36:ed:b7:2b:12:b8:a6:
80:2e:16:b5:5c:f8:58:fd:15:57:65:aa:29:7a:84:
cb:13:c6:ff:0a:61:40:89:64:93:8a:89:fd:98:09:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:EF:9C:3C:38:C4:AD:C2:EA:BB:C5:06:87:FB:42:4C:6E:CA:6D
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7e:06:db:06:91:b7:a1:43:cd:7a:b8:85:08:b5:81:98:89:
14:a5:d7:0c:69:19:69:ba:5c:87:29:9a:a5:64:1d:16:43:c5:
10:6a:14:90:d6:39:f7:74:e0:c0:9e:e1:6f:80:25:ac:82:d6:
34:bc:a5:37:ff:4f:b1:76:cf:97:11:e6:a4:e8:9a:8f:ef:b8:
34:82:86:3b:a3:67:bd:b4:fe:bc:22:3f:8d:0f:23:ec:17:86:
aa:96:98:c7:07:1b:6f:20:0f:b3:41:71:4c:6b:64:74:48:cd:
d3:06:d2:50:d1:26:ea:00:4d:89:79:48:ed:34:ce:e8:5d:22:
ed:7e:d1:26:e3:e7:9a:fc:fc:0c:e8:80:26:18:c8:79:5d:04:
69:e1:6f:08:b5:62:bd:30:dd:49:85:70:6a:94:d1:de:43:9e:
36:38:c6:d5:82:85:8f:c0:c5:5a:93:73:90:6c:28:4f:e0:75:
51:e6:68:b6:6f:ac:e7:f8:dc:b6:0a:d0:76:ed:62:34:09:6a:
47:2d:31:c7:e8:8a:e6:bb:f8:25:80:cd:a2:87:ef:75:f5:53:
f9:9e:08:f2:51:e6:aa:31:cc:b7:4c:04:4f:7f:bf:ae:df:6c:
3f:02:07:9e:46:c5:96:3e:5e:8d:61:2a:67:c5:e7:d3:b1:df:
06:6c:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:29 2025 by rpki-client