Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier: dKmEDKlsTmwg46iXNlBKLWWu7qn44ZJwG+OQDlGh2+4=
Subject key identifier: 8C:DD:03:FA:7E:FB:A2:15:E6:99:42:7B:B9:29:B4:5B:AF:F9:E3:ED
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer: /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial: 0194BBCE2502940FF8FF44CDCA22BA5BC0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number: 0D40
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: IjBJB/MgicFXwvbLNCLnbiV7ZSS55B39uOGhpWx//IU=)
2: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (hash: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:25:02:94:0f:f8:ff:44:cd:ca:22:ba:5b:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=8cdd03fa7efba215e699427bb929b45baff9e3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:34:92:07:ce:ac:19:3b:17:69:3a:a8:56:
52:3e:4d:00:05:d5:2b:2c:47:6a:f5:d0:7b:95:84:
88:68:fc:eb:6f:e4:fc:f2:21:df:cf:8e:fd:82:4e:
1c:57:f6:19:ff:3d:ea:dc:f8:ca:24:0a:2a:d5:a3:
3c:86:ce:d3:1f:e6:5c:f7:dd:14:b6:97:95:a3:2e:
2c:9e:a2:32:0f:95:a4:99:b8:6d:61:47:e7:2c:a0:
e8:37:4a:3a:b4:82:26:2b:0f:4b:47:25:30:cd:49:
54:0d:ad:18:98:4f:8e:dc:22:ee:26:41:e8:e2:3c:
1c:21:73:c7:d9:2b:c2:c5:df:01:92:b3:05:08:7b:
04:e0:23:ee:f9:01:62:c9:f3:d2:01:5d:a0:89:64:
89:af:80:04:3e:17:71:18:26:8b:5c:0d:d6:fb:7c:
02:c0:70:7b:26:68:c0:78:aa:d4:8e:30:ca:56:b4:
ab:e9:34:a7:27:28:74:f9:d0:3a:08:c6:37:33:4d:
02:5f:1b:5b:1d:35:06:a7:e5:cf:59:43:77:13:fa:
17:0a:4c:71:62:7e:e1:20:d2:78:9a:bb:4f:62:b7:
39:f8:12:38:05:53:ad:71:d2:4f:c3:2e:81:54:c1:
e0:e3:1c:e4:3a:e0:07:d1:ca:cd:65:f2:fb:21:03:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:03:FA:7E:FB:A2:15:E6:99:42:7B:B9:29:B4:5B:AF:F9:E3:ED
X509v3 Authority Key Identifier:
keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:64:47:3f:70:a5:e9:ed:d7:c3:4e:d9:92:f1:b6:3e:6e:3a:
87:73:f9:c1:0b:84:8d:d4:b6:cc:2b:0a:2f:2a:21:5f:e2:f2:
c0:13:22:a0:c8:c0:5e:f4:da:ee:5b:7e:38:26:91:7e:52:18:
62:d1:73:53:df:5d:20:6a:50:e9:02:81:55:b8:8e:b5:60:89:
6c:31:c2:f4:c1:92:bc:22:a1:f4:97:e1:64:70:81:07:3d:06:
a3:dc:48:ea:f1:64:af:3b:8a:e9:41:b3:d4:de:b4:68:c5:65:
87:f3:21:e2:50:b9:5e:44:12:b4:23:63:53:ab:6c:2c:bb:33:
8f:b6:ae:0c:b7:e0:c4:56:f6:49:6b:3d:b1:47:00:0c:a8:68:
67:d7:87:79:7c:d5:05:4e:c5:86:5f:86:14:eb:d1:c4:ea:45:
1e:f9:ce:cd:dd:94:49:9f:cb:9c:60:95:1a:e8:7a:d7:e2:41:
0f:67:60:24:13:92:6e:19:b7:2c:1d:3e:c5:e0:46:4d:72:18:
a2:05:78:9f:e2:92:4a:9f:0e:d1:3b:ea:c7:e1:a7:59:2c:7c:
cc:a3:ae:a5:cf:2b:18:25:56:df:8e:df:af:35:a2:1e:7a:d3:
2b:54:23:08:9c:2f:d6:6d:fe:6a:46:69:2a:3f:53:2a:79:19:
7b:7b:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:39 2025 by rpki-client