Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
File: _2szYaGioA284xkBmCf-u3Fb0EQ.mft (raw, json)
Hash identifier: EBxb+npQkel9RzHinR9ADNVeP3GLyMzoAaDMYTC0FpI=
Subject key identifier: E9:E0:E5:05:54:56:1D:A3:8A:CF:EA:9D:54:52:7C:EA:FC:5D:63:BA
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial: 0194BC73024B18537E624169D7B10BABC7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
Manifest number: 138D
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: WWNEma98vqvt3aWub4KvZrisRPY.roa (hash: 8ej/FxtmoHvT2+4JYPncO9OF+5JwUWMEm2sRynTw/0U=)
2: _2szYaGioA284xkBmCf-u3Fb0EQ.crl (hash: UJvhz35iV1LmC6y6h5hcM6rf2JN7v3Sxg5SPFNCtSN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:4b:18:53:7e:62:41:69:d7:b1:0b:ab:c7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=e9e0e50554561da38acfea9d54527ceafc5d63ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:e2:01:79:3c:a7:46:13:ab:20:a1:8a:d0:
e9:00:50:0d:ce:54:7f:ea:f8:14:1f:5d:73:5e:af:
89:d8:fd:72:01:46:fc:76:f8:e3:b0:92:2e:28:a1:
f2:04:2f:53:f9:74:18:b6:b5:8f:60:90:53:9e:55:
05:ad:35:1d:de:fe:d1:eb:a7:7d:8f:be:06:6a:71:
22:90:a3:c4:73:7e:e5:ea:5c:c6:f3:cc:ba:48:4f:
27:46:0d:b0:da:bc:3a:4b:d1:fc:5c:33:52:d4:3e:
49:b9:3f:f4:8e:f4:3c:19:10:22:ba:a4:c3:f2:65:
e6:f7:0b:24:a7:63:d6:16:38:d1:ec:2c:5c:69:ab:
c7:f4:49:4a:6d:ff:89:8d:59:11:f6:89:6e:8f:6b:
5f:15:e6:cc:b3:31:7c:94:38:43:95:69:9f:5a:33:
52:e0:14:cf:7c:77:d6:91:d6:cf:c5:5c:c2:f5:22:
91:74:08:10:80:33:f0:26:b4:dd:af:f8:c7:0b:d6:
dd:50:df:1a:ec:b6:fe:71:ab:0d:d3:66:c9:89:43:
c6:87:92:df:e2:39:fa:30:41:69:10:79:98:1d:f9:
1d:9f:00:37:70:01:e5:93:6f:e3:09:cf:64:fd:eb:
7a:98:66:be:a3:6d:eb:23:34:a6:ad:43:c6:3b:f5:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:E5:05:54:56:1D:A3:8A:CF:EA:9D:54:52:7C:EA:FC:5D:63:BA
X509v3 Authority Key Identifier:
keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c4:3a:d7:a9:9d:eb:66:fa:23:92:f1:c7:ce:70:ab:9f:73:
3c:48:97:92:d2:19:f2:84:c9:6d:a0:58:10:25:46:58:e0:58:
49:36:ff:bf:60:13:03:0b:3f:36:ca:ac:a9:82:df:c5:a2:b6:
b1:58:3e:52:0e:13:f2:ca:e8:e3:1f:c9:c9:c3:ab:c0:13:86:
b3:3c:99:3f:fa:18:47:61:9d:ea:b3:13:66:19:33:42:6e:66:
58:02:bb:52:24:55:f7:bc:33:61:a9:d2:7e:f7:f4:19:f4:83:
d7:21:35:77:58:ab:2c:f7:03:a4:f5:50:96:35:57:77:5f:55:
73:15:ab:08:15:11:56:20:a1:53:cd:3b:c1:0c:26:08:2e:4c:
9d:4d:84:09:31:f6:a7:6d:eb:ee:0e:13:f3:16:c2:27:61:8d:
38:05:a9:38:52:c5:c1:74:09:8c:38:4b:49:4b:df:9b:b1:d8:
3e:6c:43:27:6a:cb:5e:cc:85:39:ee:78:1a:5b:1b:95:08:57:
83:31:d5:58:b3:26:4b:e4:c6:ba:1d:d1:ce:91:c0:5b:76:99:
b4:12:e7:d2:3c:ea:3f:49:f5:a3:ef:36:63:05:17:6b:0a:f8:
43:55:59:ba:4c:4e:bf:f8:42:94:35:73:f8:b4:66:9d:21:f1:
14:c6:54:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:00 2025 by rpki-client