Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: e9nuRuyo1PF1QjG1Xr2Wfp/qmll9WX4rdF8C/TKDS1o=
Subject key identifier: 51:98:12:DA:8A:13:BE:2D:96:72:84:F6:56:8F:EE:6F:0D:24:BF:58
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 0194BCA9F7BFD30B092739763D8900EA6071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: IP1aipmaIN60ZDlxJ+pbJvPlf1iCrJ85dk/3aUec5HY=)
2: 4yhoCs9M-fjQaMlDWlUpC1ERe-g.roa (hash: t+8njXgDpdo9kegDaGKO6tPmuatvzfS0I/p9sqY0v4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:bf:d3:0b:09:27:39:76:3d:89:00:ea:60:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=519812da8a13be2d967284f6568fee6f0d24bf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:02:8e:2b:fb:7e:a5:f4:0f:3d:25:61:b1:
93:b8:2e:b3:38:10:19:c7:c5:e6:70:a7:9c:25:f0:
e6:f8:6f:88:2e:b4:1e:9d:96:4e:ca:30:6b:76:2f:
51:a1:55:14:f7:7a:1f:c0:6d:e4:f3:29:3f:7c:6e:
72:69:55:f1:3b:b7:20:e1:b7:42:26:0e:b2:d2:9e:
d8:26:e2:fe:eb:6d:af:49:7a:c5:86:2d:0f:6f:32:
2a:ac:f5:46:29:a6:f4:86:a1:5f:63:08:be:06:e9:
3f:67:39:c1:bf:57:ff:2b:7f:7c:ee:16:db:08:3d:
1a:6e:f5:7d:1c:9f:82:dc:85:4e:5e:6e:bb:6f:7b:
5d:de:99:e6:a0:77:3d:4a:84:83:b0:82:e5:61:30:
bc:c0:34:6b:85:2f:0c:bf:b6:4d:0b:35:0a:ed:bb:
91:f9:11:f5:bd:14:19:9e:e4:d2:9d:23:37:b7:3f:
e4:8a:17:73:bf:54:fe:7a:c1:6d:70:58:5b:1e:5f:
a0:ea:4d:4a:48:b5:9d:ed:c2:6a:6c:0a:ff:a3:2c:
2e:05:00:bd:e1:5e:80:d2:42:0e:14:d5:83:9b:25:
d2:a6:1b:69:f5:c8:87:43:0c:fa:dc:7e:20:22:0d:
49:0a:d8:14:a1:b0:87:ae:bf:f8:f5:68:f8:11:46:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:12:DA:8A:13:BE:2D:96:72:84:F6:56:8F:EE:6F:0D:24:BF:58
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7e:3a:ad:2f:4c:5e:62:73:a7:77:bf:bd:0f:fc:a2:84:8b:
e2:87:02:f3:46:bb:2a:7f:34:85:ad:8c:2b:44:7a:07:30:ec:
89:d0:bd:29:75:ef:2e:63:47:ad:f5:fd:dc:65:a9:e3:cb:cf:
b2:fc:d1:0e:fb:24:ec:b6:c7:b0:ca:b1:3a:df:be:86:a4:f5:
83:37:e1:b4:d8:53:2b:f7:b6:9d:0b:91:32:0b:1e:f2:7e:5e:
67:53:e6:43:be:ae:2f:3f:0e:f9:66:c9:33:ce:d7:67:64:9c:
83:71:00:b3:47:57:11:d7:a0:b3:e4:58:a7:ea:c2:d8:c5:40:
db:f4:33:ae:b0:3f:7c:d9:e7:05:bc:62:3b:f7:56:54:51:21:
7c:59:8e:d8:30:3a:9d:bd:ff:a7:96:82:a2:90:47:b0:8a:00:
87:a0:90:e1:59:37:b4:a6:60:6c:67:54:76:d2:72:24:db:98:
98:a6:28:82:b7:5f:a8:e4:4b:cc:42:d1:0e:1f:98:b3:b9:10:
8a:cd:62:82:6b:8d:fa:ce:cc:27:35:5d:1e:f6:d1:5e:eb:aa:
dc:3b:91:aa:52:6f:ef:57:a7:34:ce:8c:df:4e:5d:11:f2:f3:
5e:88:7e:77:01:93:4c:f3:d3:16:a6:21:0e:47:20:8e:06:17:
b0:5e:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:00 2025 by rpki-client