Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File: 2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier: JoBjSxil1QIAhAO4Ey1UX83kOluIf3/zLDuStElpoEI=
Subject key identifier: C7:2B:CB:74:62:79:63:02:DB:BD:66:59:B6:5F:1E:99:9C:63:FB:8E
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 0194BD1778ABAB3691AF200FE8C234A74B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: 0LdCYiyoo_rQZDLAQK9EXmWdrLs.roa (hash: ii+DUPaWPj2PKPLgx9rgU4vJhM6MjQajOc4FBEHl1O8=)
2: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: /DPIFyzJMzNpVkIoFuccGtaDfyddnH0sN9vbnj3WJDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:78:ab:ab:36:91:af:20:0f:e8:c2:34:a7:4b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=c72bcb7462796302dbbd6659b65f1e999c63fb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:c1:a7:b1:f0:d8:b9:7f:d8:b7:ed:a7:ad:
1f:f5:da:20:be:9f:a0:b2:97:b6:7b:19:10:e9:70:
c2:ca:44:83:73:c2:55:5c:65:f5:de:1e:a4:0c:ac:
13:80:3f:24:ce:5a:9b:34:61:ad:9f:af:e2:2a:42:
0f:63:d7:e3:5d:81:87:be:42:0b:a3:03:14:fb:48:
9b:8b:96:bb:24:b0:df:d8:f1:55:86:27:09:ee:fd:
29:98:8f:81:1a:fa:ce:6c:b6:82:78:59:92:52:aa:
94:da:ff:99:dd:49:63:36:46:c8:f0:7e:c4:1c:0e:
06:6a:45:81:03:77:b4:ac:2a:28:23:76:32:88:df:
b9:4e:ae:8f:3f:0a:b5:cc:7d:02:81:f4:39:85:79:
58:a5:2f:d6:f4:19:b3:dd:31:b2:58:1f:22:74:fc:
8b:2f:9b:0b:7f:71:de:84:90:67:d0:5f:f7:e8:6f:
63:fb:bc:66:fe:a8:4d:b3:58:f7:f5:a8:90:0b:b8:
c6:36:c2:6b:c6:b8:d6:28:67:29:05:60:5e:7c:49:
51:70:a6:51:4c:3c:77:15:79:00:f6:7a:a0:6c:e2:
19:15:64:b1:3e:07:ae:98:57:9d:4e:d2:ea:a6:48:
d8:67:95:6d:0d:d5:e7:f9:f3:c8:c6:4b:11:b1:e3:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2B:CB:74:62:79:63:02:DB:BD:66:59:B6:5F:1E:99:9C:63:FB:8E
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:34:62:71:56:61:3a:aa:3e:a4:2b:d5:cc:3d:6b:b8:06:59:
8a:eb:91:65:c5:a5:e9:b9:83:8a:4a:24:15:88:b1:73:26:57:
f3:89:ed:4f:89:da:07:1d:b0:67:0a:0f:04:e6:68:91:13:e9:
25:e6:9f:05:b0:1d:8c:8c:cd:67:84:c4:85:40:cc:e3:a1:c6:
86:13:cb:d8:dd:b6:56:9b:b0:63:d5:97:1a:a6:62:dd:9e:f6:
2d:0d:98:cb:96:34:b2:10:70:e9:80:14:b4:d5:96:95:a1:6c:
19:e8:1f:e8:ce:28:24:95:fa:42:be:ad:e8:fe:11:5b:27:ac:
a5:38:93:56:f8:f9:6c:5a:82:44:8f:a9:34:44:50:ea:e1:48:
13:4d:ee:8e:24:07:94:c1:80:f5:e9:df:bc:3c:cc:42:ed:15:
45:e1:10:ab:52:16:a9:54:4d:f7:16:54:ae:b4:20:c8:28:6a:
e9:0f:c6:98:fd:8d:a7:f0:b7:c4:8d:e8:ac:50:68:8d:8b:6f:
2c:dd:dc:da:35:7f:2e:7f:78:d8:64:bf:af:4a:fd:a7:34:cb:
c7:81:c7:d9:55:54:78:87:38:96:1f:e3:f3:d3:fc:d9:88:63:
45:7c:3d:73:f5:d0:03:95:8a:83:16:e5:57:e3:49:cd:3c:ca:
d6:a8:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:10 2025 by rpki-client