Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: 6XfqYaJVzKRbxP18/TbFBvDWr3zE6eU7wJ3YP+Fpnr4=
Subject key identifier: 94:58:5E:A3:61:43:EF:E0:55:B1:3A:31:F6:BF:6D:A5:8A:FA:CA:82
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 0194BCA98DA03293DB7696D734046208772C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 1314
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: 9dF4kiZRtjT+LrhClPhXT7CbHQZ+bj9/3XgFLcpMMuw=)
2: UHp7t70IbcWp2bwKOGl-4b8ScF4.roa (hash: UvX//cn/2erRwYZHy/h/xPpeIQdcBl4GUvhBbyEANqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8d:a0:32:93:db:76:96:d7:34:04:62:08:77:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=94585ea36143efe055b13a31f6bf6da58afaca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:ca:12:f4:ad:f7:61:ea:74:ee:ae:10:df:
7f:de:7e:46:cd:f4:c2:04:a1:c0:20:99:d5:89:7b:
f5:90:87:bf:58:8d:df:a9:8b:47:93:e5:3c:95:92:
89:89:2f:c8:c3:7c:3b:2c:2d:ce:a3:c3:f1:22:18:
09:12:56:57:02:db:13:77:53:ae:60:90:ad:f8:fa:
15:0e:97:bb:46:f5:06:d5:c2:56:0e:00:44:48:a5:
22:1d:f0:87:9d:e2:e7:3c:ae:f6:6a:4a:79:ea:ac:
d9:c5:dd:d7:19:38:db:85:f5:41:34:f6:84:15:c8:
10:9a:b9:b9:6c:99:6b:71:aa:2a:01:ce:e0:d5:9c:
eb:71:6e:97:0b:7b:6f:d5:3c:5d:3f:7c:18:66:48:
ce:b1:8b:72:eb:4f:d2:e6:eb:27:02:7c:1e:38:5e:
39:53:04:4b:1c:3b:70:aa:ff:51:85:32:fb:f1:85:
43:ce:87:43:0e:f3:40:2c:de:55:31:93:81:d9:d2:
c2:ec:3c:61:9d:9f:3b:73:e0:43:a8:dc:f6:9f:fd:
5d:5e:d2:71:82:63:25:a8:c5:0f:e3:9b:68:7f:be:
c2:68:d0:37:86:f6:3a:7e:15:19:53:82:ad:74:f0:
3b:60:4c:e1:85:b2:f4:16:f9:3f:17:1f:7a:db:0b:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:5E:A3:61:43:EF:E0:55:B1:3A:31:F6:BF:6D:A5:8A:FA:CA:82
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:eb:1b:ed:85:ed:66:5c:e6:1c:93:9b:2c:6e:93:16:50:86:
b5:8e:b5:c7:f6:b6:9d:0c:2f:f5:5a:d1:28:9c:ae:0b:18:4d:
3c:b1:81:74:76:58:a7:71:10:48:c5:24:25:df:9f:38:cb:be:
a4:28:58:f3:2c:ae:34:63:41:27:d1:ce:92:4e:7d:f9:55:3c:
af:c1:bb:eb:ca:a7:fb:a1:78:87:3a:49:8d:4a:dd:bc:11:99:
e4:53:c5:6f:10:49:a8:95:e5:f8:98:56:2a:c9:3f:cd:06:ae:
81:e0:d6:ab:9e:37:76:19:9f:aa:78:b2:33:6e:98:24:ee:8b:
82:7b:25:ab:f3:6c:22:2f:53:e3:f3:42:87:22:1b:00:4c:d8:
cf:91:7a:da:8e:61:db:17:dc:09:de:71:76:ee:c8:e6:e1:99:
7f:24:9e:3e:e4:24:43:8c:03:70:b1:60:f3:cb:cb:a9:a5:7e:
4d:53:b1:d1:0d:55:62:fe:bf:cc:1b:32:0f:7d:1e:38:56:de:
6c:a0:e2:e0:66:e6:52:1a:cd:ba:de:f0:25:c3:5c:e3:a4:6a:
23:68:33:b5:30:3a:93:44:74:86:91:e1:6c:b8:29:0b:fa:4b:
fa:4e:96:d1:a0:a7:72:a5:61:35:a4:50:38:48:84:e2:f3:64:
86:25:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:43 2025 by rpki-client