Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: 5kNsEVHn6mZP4awLJQeh4+pWsCcAuVzSDnsxoY68O0w=
Subject key identifier: 3A:AC:E2:FB:6B:22:86:79:F8:9B:29:A6:D6:DF:C3:F5:34:9F:C9:4F
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 0194BD17EE589C98C9F7C1AF193413090B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: Gbr+hPpuYbi8AMukv2UzqdTMJ+YsJxkAHLdPSc58OMw=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ee:58:9c:98:c9:f7:c1:af:19:34:13:09:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=3aace2fb6b228679f89b29a6d6dfc3f5349fc94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:15:c9:25:6f:52:3a:42:42:0d:f2:ef:da:
79:d6:f6:0f:51:ff:d7:e2:c5:ae:74:7d:05:46:ad:
10:ee:af:fc:43:6b:1f:63:62:a0:03:97:ba:1d:a9:
44:98:3a:7b:fe:a5:e6:49:18:ba:2d:10:2b:67:d0:
55:5d:15:02:12:f8:76:25:ff:4a:71:e4:a5:1f:f4:
09:e3:6f:f6:50:4b:ab:55:76:c1:5b:a1:e7:a1:1d:
86:0a:59:af:81:7f:d0:e5:a7:7d:c5:9e:39:65:fe:
e4:0b:c7:de:9b:1c:4a:ae:70:4d:22:a4:62:10:66:
d3:c7:69:51:78:d1:f6:8d:7c:7d:2f:84:7d:94:21:
a5:4d:d8:18:8e:2f:9a:1c:54:ef:62:fe:f9:6b:2d:
7d:1c:41:3e:8b:60:6a:19:af:3d:f7:07:5b:53:b1:
c8:aa:3b:f8:d3:b1:5e:ac:3e:07:67:6c:8b:e4:3f:
1f:4f:e8:f9:77:8f:70:55:6d:07:05:bb:28:fb:be:
3d:d7:25:c0:67:b0:96:fa:88:a1:50:61:f3:19:37:
b9:42:0e:85:91:66:3e:a6:ee:67:cd:93:50:b1:48:
fb:d1:34:e7:62:9a:8b:30:c6:83:51:5e:a6:76:ef:
01:c0:53:8b:1e:98:e5:9c:f1:6b:b7:0e:55:8a:c7:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AC:E2:FB:6B:22:86:79:F8:9B:29:A6:D6:DF:C3:F5:34:9F:C9:4F
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e3:7c:f3:97:e5:df:90:54:53:ad:fb:cf:60:51:2f:b6:09:
60:69:e8:de:17:b4:19:88:11:d1:ef:c8:20:45:6c:2e:4d:53:
18:91:47:68:c4:66:06:f1:36:b4:f0:f2:ed:37:32:33:1c:fe:
d9:76:d6:11:fd:69:02:5f:6c:f7:89:1d:08:ce:81:90:39:ce:
fe:52:bb:f9:5c:99:d9:e5:2d:bf:e9:ae:df:07:6c:c1:36:25:
87:de:45:cd:60:27:70:97:4a:94:06:5d:a2:95:f9:7d:26:46:
f2:97:20:ee:38:f5:44:61:89:c8:2b:c9:ac:b8:f6:3f:03:ae:
18:e0:cd:d7:ae:79:7a:ab:36:a5:9b:35:f6:8e:d3:b1:65:93:
06:40:98:65:ee:c3:5b:1a:ba:5c:41:91:7c:e9:81:92:2b:a6:
ef:71:2d:1e:ec:c8:a5:55:22:01:44:c6:ec:72:df:03:4d:f7:
bf:e0:2a:70:d7:9a:d4:0f:78:19:21:9f:4c:aa:51:c6:3c:92:
d1:28:55:be:f2:41:39:b4:da:62:aa:8f:1f:79:bb:34:b9:2f:
6f:aa:e4:a4:84:cd:11:04:d6:77:dd:43:71:a2:de:41:31:2e:
12:05:e8:55:de:40:4a:91:e5:58:a5:5d:b4:46:a2:10:19:50:
24:de:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:12 2025 by rpki-client