Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: adh6dHmkS75SnTMdWjOBzxsrfe1EgNXFgtkpWG9xu/I=
Subject key identifier: 29:5C:29:9E:9E:3A:7E:D7:B9:BD:7C:0E:16:7C:95:D1:4A:B1:CC:5A
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 0194BC7299AF159617D4DC1F480375FAC046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 116D
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: /6NluUcZ4YoQ/RxKE4VoCHQTLZrB0w9EIfzls5PUam0=)
2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:99:af:15:96:17:d4:dc:1f:48:03:75:fa:c0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=295c299e9e3a7ed7b9bd7c0e167c95d14ab1cc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:4b:02:05:48:26:30:31:aa:da:ac:74:24:
2f:7f:6d:57:e2:a9:75:56:b0:f9:d5:98:50:db:dd:
53:ef:f6:68:a6:0b:4b:52:d7:63:10:bd:1f:cd:3c:
61:be:b5:4e:a1:68:23:81:e0:eb:26:4b:8e:c9:e5:
83:6d:ea:2a:e9:6b:5e:66:63:f2:4e:af:34:ce:a9:
a1:d8:07:89:23:db:16:98:47:89:8d:f3:f4:85:05:
84:33:1c:1b:18:c2:3d:d9:00:f9:35:db:15:a0:54:
ca:a2:a6:c8:a6:07:c2:20:5c:3d:1d:93:1d:63:11:
53:64:fd:1f:f5:e2:71:43:99:2f:fc:d9:53:5c:66:
3e:72:0f:d8:19:eb:5f:dd:c2:89:d3:4a:7b:01:99:
e9:7e:6e:3f:e3:46:43:ac:c0:2f:5e:b4:6e:91:09:
e5:59:2f:d9:fe:0b:07:5f:2d:b9:7e:78:b0:d4:12:
74:52:03:5b:9e:89:e4:cb:4d:23:ce:b4:9a:08:7e:
a8:27:d6:12:26:b0:ee:62:2d:d5:5d:b5:c0:04:33:
38:22:b9:44:42:61:4a:34:d2:49:18:c9:f8:a4:d4:
0c:93:8c:99:36:75:a7:ec:be:5d:4b:04:7d:de:8c:
3c:c1:95:5c:00:cc:83:25:0b:38:26:e3:c7:b1:4b:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:29:9E:9E:3A:7E:D7:B9:BD:7C:0E:16:7C:95:D1:4A:B1:CC:5A
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c4:ec:22:d4:2d:a0:fd:53:a2:e4:8a:59:a3:df:a5:2a:67:
e0:cb:52:58:64:93:8b:36:36:c4:2c:d3:20:cd:88:23:49:79:
4a:eb:1c:b1:7c:3f:34:bc:55:2b:16:fe:6c:60:36:6e:16:40:
37:ae:88:e9:26:4d:8f:b4:97:32:db:e1:31:4a:ed:67:e1:b9:
da:47:cd:da:77:64:59:7a:8a:d8:0b:ca:c6:b6:4d:99:ea:51:
06:80:ab:86:16:03:1a:5d:4c:22:6f:cf:f0:4c:85:27:83:07:
43:b7:77:5a:f9:0d:19:14:1d:6e:cc:59:1f:ae:d2:fe:02:4d:
b4:2c:17:c6:d2:b9:c7:51:94:dc:cd:55:89:d8:01:fb:3e:f7:
a7:11:fc:c8:3b:60:be:a4:7f:0a:a0:4f:59:45:22:1b:8f:6c:
78:fc:b1:6c:1a:67:50:f7:8a:46:f0:5c:f6:4c:c0:94:a3:31:
04:3e:a3:c7:23:5f:c9:1f:32:5a:a2:1b:54:5d:98:32:2b:78:
db:82:ef:db:85:26:7f:87:78:99:0e:72:1b:44:3c:56:21:fa:
40:69:e0:5a:82:cf:33:8a:cc:cc:7e:88:cb:22:fa:45:6a:5d:
dd:68:f5:2d:09:4c:41:e5:4e:03:2b:71:40:7a:b4:8f:96:3a:
0d:56:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:16 2025 by rpki-client