Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: MjGUptDPcu5GA/Ut3BlTou1fs4JYJcv73wb6YDQRRLI=
Subject key identifier: 57:76:72:4D:04:50:1D:09:6E:B5:09:2E:1D:B8:4D:2A:66:BB:AC:F8
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 0194BCAA1BE4464B6AA9C35830C0FEF28FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0A03
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: 4M/+o7oRuq4R1JkrzzOhL6i/QSTRVjuL5LAOfI5H+w4=)
2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:e4:46:4b:6a:a9:c3:58:30:c0:fe:f2:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=5776724d04501d096eb5092e1db84d2a66bbacf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:1b:df:e5:f0:f2:0c:7c:c4:97:79:aa:81:
0a:9b:12:3b:d0:61:c7:96:9d:33:52:af:c0:2f:00:
c3:2e:c8:2a:d9:0d:95:5a:36:ff:94:37:82:37:16:
9d:97:0a:02:c7:f0:ea:5f:10:f0:41:de:fb:3e:84:
9e:04:5f:5b:a1:10:48:62:e3:67:0d:6b:03:51:06:
8b:47:eb:8a:77:43:7e:c7:89:33:c6:d3:9d:99:df:
ec:04:76:4d:41:79:61:01:86:fc:2c:c1:fc:37:6c:
80:55:83:a2:ca:0d:0b:58:7e:44:93:c7:d3:7e:d6:
73:9b:0d:3a:9c:0b:f2:9a:56:67:e6:d9:7b:23:c7:
e0:30:18:21:55:65:9e:b0:13:c0:43:40:98:0c:dd:
7d:4a:e3:a4:13:04:3b:c7:f4:38:77:f9:a1:30:29:
d8:f6:7b:89:8b:78:11:37:1f:25:14:86:cb:bc:f3:
13:15:a0:79:d5:c6:5e:51:62:2b:c5:1b:af:72:39:
04:fc:2d:ad:f0:82:19:f9:a8:a5:65:a3:bd:84:47:
e2:b1:6b:37:ae:3a:b2:9a:1f:a8:e6:3d:79:87:49:
34:09:f4:a8:4a:f0:76:28:5a:cc:d3:bd:b7:59:87:
2b:ce:ad:86:79:3a:82:42:c3:07:08:fe:0f:aa:c8:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:72:4D:04:50:1D:09:6E:B5:09:2E:1D:B8:4D:2A:66:BB:AC:F8
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0d:66:a9:d5:50:a2:70:ab:d5:83:86:48:47:06:7b:3f:a5:
92:fc:eb:89:1e:0b:9f:ce:f7:7d:c7:1c:4f:1e:a7:b5:ac:0f:
12:3f:50:ea:77:11:d9:b8:bc:4c:1a:0a:38:4a:66:1d:99:8a:
c5:40:7d:92:b0:c7:e3:79:27:d7:66:1e:ec:34:4e:8d:c4:23:
fe:88:00:1b:33:00:90:b0:d0:c1:38:fb:85:d0:69:0b:c5:fe:
14:8e:28:1b:1b:70:67:44:44:26:6b:ab:fb:63:7c:2b:92:95:
24:e0:12:a5:d6:8e:b5:87:bf:e3:f0:67:ea:6f:be:25:04:73:
8b:85:e1:d1:ff:d6:f8:e0:95:74:a4:43:86:1b:ee:0b:4f:0f:
3d:af:b0:c9:bf:8e:5e:a9:0d:6c:7f:a0:86:64:c6:d8:09:3c:
3a:fa:51:ae:3e:7c:40:50:89:23:99:8d:85:61:4f:c4:a5:71:
f0:c6:ab:8b:ec:ce:dd:1e:7d:9c:9d:81:73:31:e4:74:c5:24:
3d:d8:40:79:c2:53:40:00:69:0b:9d:23:2c:00:59:86:b5:0b:
74:5e:81:89:d5:26:1c:55:9f:fb:46:6c:71:27:f6:d1:7c:85:
f5:2e:d7:da:5e:47:e8:f4:95:38:d7:53:50:07:52:92:04:2d:
26:d0:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:18 2025 by rpki-client