Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: flfMFSCpXlOdUOCX1hh7xmmbhAhVoZ2M/xm6phvyJMg=
Subject key identifier: 55:D6:20:E6:16:39:51:73:43:EF:A1:A1:12:0E:F6:2C:70:27:D8:11
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 0194BC3C7D46CE040EE040AD2DCAC0CCE54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: GOWcM3hNAtX0Ggv5YRtmdBw09imlRkuqdoVVVIp3808=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7d:46:ce:04:0e:e0:40:ad:2d:ca:c0:cc:e5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=55d620e61639517343efa1a1120ef62c7027d811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:85:c0:22:04:fe:8a:4f:5a:b4:7d:c0:29:
5e:03:94:9d:8f:50:8f:5b:12:eb:0c:11:13:5a:87:
b4:35:99:8d:18:5f:0e:ed:87:7a:27:22:bf:46:05:
f1:2e:0d:26:e8:17:06:25:46:a5:c8:81:f2:b0:fb:
b2:fb:57:0d:2a:8a:45:0e:e1:da:cc:78:26:64:d6:
ce:c7:22:d9:7e:cb:f0:ad:6b:6e:7d:43:da:78:fd:
1b:af:c8:af:31:f7:86:7a:ee:d2:72:18:31:8c:87:
b2:d5:fb:7a:ee:eb:f7:32:be:58:e4:33:61:4f:ae:
cf:6c:fb:6e:da:32:9b:4e:4f:9c:51:59:66:a6:29:
38:63:f5:e7:40:58:45:1a:c0:2a:87:15:38:6b:d9:
aa:48:d0:cb:e8:14:06:c0:54:b8:0e:f5:7c:27:08:
68:1e:a3:69:c3:16:e7:22:df:db:1d:bf:9d:b4:8d:
f7:58:b2:9b:b9:6d:32:d1:d3:6f:6a:f4:bc:62:17:
ff:6a:fe:a0:a0:b3:f6:83:9a:bf:7e:2e:ee:14:56:
0f:59:db:89:83:55:7b:55:90:20:34:06:0c:a8:72:
3c:aa:2f:c5:b5:f1:d2:5b:d5:7a:1f:5f:17:3e:09:
07:35:92:65:03:7b:b4:fd:e6:a9:90:8d:05:b3:63:
91:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:20:E6:16:39:51:73:43:EF:A1:A1:12:0E:F6:2C:70:27:D8:11
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:76:aa:b6:6d:cf:d6:e3:04:d8:a9:71:02:29:b2:34:ac:c3:
49:65:b6:cb:2e:45:27:8e:cf:6f:aa:d8:d5:e8:45:8c:d1:6d:
c0:04:cd:69:b2:a1:ca:e9:b2:72:71:0b:d9:c1:86:92:7e:07:
19:95:d6:aa:c0:91:ae:73:60:9b:78:f9:c9:54:1f:f1:ce:99:
c8:1e:bf:60:98:8b:1c:31:f3:2b:50:07:ee:a4:9a:6f:15:97:
38:2e:a9:1b:ad:e9:be:7a:47:10:23:61:94:15:96:6e:f6:25:
83:e9:97:ed:c8:33:81:3a:d0:6b:11:ce:b8:31:b3:76:5f:eb:
3b:ea:da:e8:62:4b:23:a1:cd:63:d4:dd:37:c0:e9:37:8f:d7:
62:f4:db:96:2b:8a:fe:c6:56:43:b6:6d:29:94:eb:56:6d:1a:
c6:14:8c:14:4b:cb:da:fb:51:ec:83:54:d9:ae:60:60:0c:79:
86:2c:1a:55:39:45:f9:d3:ce:d2:1c:1e:b1:a5:59:5a:d6:13:
e8:81:61:36:b6:47:fe:3d:f3:a3:b3:1c:89:37:d5:5d:2c:44:
d0:20:80:a2:6d:59:34:94:fb:27:50:b3:54:25:86:e3:aa:15:
a8:5d:39:2b:86:71:03:0f:a3:36:c2:72:69:6d:58:1f:e4:9d:
bc:07:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:34 2025 by rpki-client