Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: SxorlAMMBQnjhl/RdfRTlozAviz5T3CUPfIWfPmpGBM=
Subject key identifier: 56:22:3C:9E:89:4B:97:E1:27:19:0B:8A:25:10:48:7A:A4:88:93:3E
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 0194BC3BB9C3132BD688463941F7E3952A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 1131
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: m00DPhQFfrbs3L+B0VN+I0mbOHou7+7K4YD6Nnt75vU=)
2: y-rAx3x5ggb3kBBIMyQl2KhriYw.roa (hash: j/sr0gEHuELryIqb8wmwmOpvCJwyct02mKuP2NU5Abs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:b9:c3:13:2b:d6:88:46:39:41:f7:e3:95:2a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=56223c9e894b97e127190b8a2510487aa488933e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:40:36:3b:fc:0e:5c:77:28:bf:17:de:31:
0d:fd:5f:0d:f1:59:f5:7a:de:b7:f6:b0:f1:a6:b8:
15:18:5f:d8:93:0f:02:69:21:fb:28:87:a4:40:0b:
86:7a:a2:17:fd:d5:8f:2a:91:4a:e5:4c:15:ae:a4:
c9:d5:a6:a3:a8:dc:4c:6d:a0:b4:ba:6b:31:90:be:
6b:71:53:46:67:1c:5c:32:7c:3e:82:80:75:05:df:
85:59:07:57:49:d0:df:6a:e3:06:e4:ca:0e:61:57:
95:7b:ab:b4:17:71:57:65:d8:19:57:6c:ec:3f:31:
bf:22:18:9c:18:80:8e:ad:96:e0:2f:17:57:81:6f:
5a:46:ec:c6:37:b7:3d:43:ba:0a:4c:09:9c:8b:08:
08:47:8b:2e:94:2f:b7:8b:38:56:80:7a:5b:2f:8e:
25:33:2c:2e:fc:cb:2c:dd:5c:ce:8c:f7:d1:dc:b8:
2c:bd:66:14:6e:c2:75:9a:59:dd:fc:a1:f3:f2:7d:
35:96:66:29:96:19:da:04:b8:3f:34:df:ec:c7:74:
98:a5:6b:e3:73:10:0b:44:e0:6f:aa:ac:df:6c:be:
44:e1:f0:b3:9b:79:2c:86:09:c0:16:73:48:a4:3a:
7d:28:ee:d0:ad:02:58:9f:3f:69:56:37:85:d3:4c:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:3C:9E:89:4B:97:E1:27:19:0B:8A:25:10:48:7A:A4:88:93:3E
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:71:aa:ec:59:e3:51:04:b4:a7:6f:63:e8:27:bd:65:08:2c:
70:1a:9c:38:97:7a:df:fa:83:d9:a2:25:a3:a7:1e:4f:7d:c9:
df:f1:50:93:96:8b:38:b7:d0:3a:7b:21:b2:b6:fc:2f:b9:88:
32:9b:b8:96:06:ec:8c:35:f2:db:c5:74:70:23:d8:e4:a9:98:
85:53:07:d2:66:58:05:66:1e:31:a3:d5:bd:17:1d:f7:78:9d:
7f:39:ea:10:23:5f:d6:63:a0:3b:14:f6:44:ad:0d:c5:92:cc:
36:48:41:5b:9d:29:61:7d:68:22:a9:95:33:93:66:06:0d:8a:
eb:44:16:65:51:ca:66:09:b5:f3:50:01:74:33:46:bb:77:cc:
27:3a:d9:7b:48:f3:d7:42:36:3e:d4:59:94:d1:13:34:e4:11:
19:25:09:21:23:bd:41:e8:c1:1f:8e:46:f8:96:bd:c3:e9:e2:
fc:b9:44:aa:a1:cf:a1:b2:1e:0a:00:ce:e9:7d:e9:51:11:ba:
11:5d:6c:dc:d0:57:18:6c:12:f8:7c:f3:b5:d9:cc:04:1d:16:
0f:f0:47:07:b4:03:39:11:82:82:51:5f:2a:9e:c7:a5:ad:0d:
ae:e2:9a:91:15:7b:ef:5a:26:fd:c0:b6:88:d4:ab:1c:61:ae:
af:bb:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:54 2025 by rpki-client