Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: i30WAFUzd7wgeCt6ELBb1QgaAr7PNU34xctzxit9siY=
Subject key identifier: C2:7D:CD:BB:1E:56:A1:D6:AA:E3:97:67:49:FC:B0:E2:FC:F2:35:9E
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0194BC052BB0B9119E7692031F51FBEB445F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: hr6TuSze2tGJaVlnxeMPdMR3CUocW2aRlG3s3jpaEGE=)
3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2b:b0:b9:11:9e:76:92:03:1f:51:fb:eb:44:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=c27dcdbb1e56a1d6aae3976749fcb0e2fcf2359e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:35:33:ce:21:c6:e6:f5:12:fa:14:9e:0a:
52:30:61:4f:46:2e:3d:3d:1d:38:c0:10:05:ce:34:
5d:bb:12:df:90:8c:04:52:8a:25:56:e7:08:9a:56:
88:f0:41:34:53:99:03:20:7a:06:60:f1:dc:7e:d3:
46:31:fa:e6:f4:4c:3b:c0:80:11:5c:87:c1:76:82:
ea:b2:c5:b0:d6:fe:98:f8:61:41:e8:99:8d:68:bc:
82:de:57:b6:da:81:5b:e4:67:38:01:77:6a:15:d6:
7a:36:c4:d1:58:d4:98:c8:5e:3d:dc:b7:a0:9a:14:
57:e0:13:51:b0:9f:3f:90:94:d2:17:1f:c6:00:b0:
05:86:d0:55:2e:c9:c9:88:93:10:1d:4f:ec:80:a6:
31:4a:52:3c:37:7e:2b:0f:82:d0:30:dc:8f:b8:a1:
71:68:06:62:71:b4:43:3f:72:d0:f5:3f:f0:3f:01:
89:3b:6a:74:4f:1f:76:79:97:32:bb:f8:d7:1a:1a:
0b:ac:7c:2d:97:89:f2:f9:8d:33:6b:6b:92:f0:f3:
84:a2:67:95:fe:68:73:de:9e:f8:a9:e6:bd:f5:42:
fe:3f:f1:a6:e1:c8:21:49:a2:18:f9:46:c5:35:4f:
c5:3b:1b:88:0c:54:22:cf:08:8a:b3:14:ad:2c:73:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:CD:BB:1E:56:A1:D6:AA:E3:97:67:49:FC:B0:E2:FC:F2:35:9E
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:02:89:04:30:1d:99:18:97:72:b8:7a:69:64:0d:e4:b5:26:
36:d8:0e:b6:00:a0:0e:3f:df:55:52:1e:c6:14:2e:c4:6f:65:
35:01:d3:b7:86:b7:cf:69:69:57:b1:5d:43:14:70:84:ec:92:
0c:e8:1b:75:b0:8f:59:a9:5a:c8:4d:65:29:79:9d:e0:53:57:
e9:d8:2d:7b:d5:4c:8c:35:d8:ee:1c:b2:c8:9c:2f:4e:6f:bd:
e3:db:27:3f:fd:96:f4:db:41:c3:5e:dc:a7:35:9a:66:b4:fd:
ae:2c:99:7f:0a:3e:aa:57:a5:93:41:08:f3:ef:c4:e6:d2:e2:
95:6b:a7:57:ad:ef:14:79:5f:88:f1:fb:b6:10:6e:50:f4:ab:
8a:24:11:14:5f:12:db:ec:e4:05:12:7d:55:52:41:24:5b:2c:
ac:7c:a1:8d:31:2a:40:17:4c:01:ba:eb:d8:c8:e2:d0:8a:cd:
82:f8:a3:33:e7:8b:da:17:28:af:13:06:b8:35:91:d4:0e:24:
13:ea:91:9d:6c:5d:ab:83:86:c1:09:46:3d:ca:bd:e2:29:00:
8d:9d:4a:89:f7:ca:4a:fa:80:c6:fe:1b:22:28:03:e3:43:89:
b3:a6:6c:d7:6b:2e:bc:0f:c3:b1:e5:e6:d1:f6:f1:a8:bd:a6:
ef:8b:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:32:12 2025 by rpki-client