Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: JrVlMP8Vu2L8IpZSiUYLCbPsTmh6/4MRS+dOtX19eV8=
Subject key identifier: 24:10:93:BD:EC:5C:33:F1:84:89:4D:77:23:C7:E1:66:79:0A:4A:69
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 0194BCA9AE0495EDA5E023B0BC9DD9BBED8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: jjkpTwvB6mxHGBrPi7ie/aWOujB7pW7oF9l+CYJ+R+A=)
2: tX7pIK0_Y0DkC_cQB792D8KfMpI.roa (hash: 6bt98IzDmAFpK9cQatBo1xPLFut1eb0d15KmkgIc6Y0=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ae:04:95:ed:a5:e0:23:b0:bc:9d:d9:bb:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=241093bdec5c33f184894d7723c7e166790a4a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:a1:a1:8a:2c:f0:b0:a2:b5:50:cb:61:b3:
61:f9:e3:58:2a:28:5b:d4:fd:c0:e0:2a:25:f7:22:
19:44:6f:d2:ee:e1:8a:08:d8:32:39:9a:1e:f1:79:
30:db:89:4d:e6:54:f8:c9:b8:45:ee:6a:73:9c:77:
8e:00:d5:e8:26:9a:f7:91:91:df:38:33:e5:8d:78:
78:d4:fe:ce:83:26:f1:4c:93:7c:ad:93:bf:8e:60:
f4:07:c4:55:01:6f:24:01:5e:f0:15:da:ab:dc:42:
8b:38:97:b2:9f:b9:ea:c7:c7:09:c2:7b:fc:fc:e6:
55:1f:e5:0d:ae:65:83:84:5e:18:66:93:08:d6:14:
64:a6:f5:50:9e:2b:17:45:dd:4a:2e:a1:20:5b:71:
a5:20:54:d7:72:d1:9d:af:a4:7d:7e:51:17:ee:53:
2b:90:48:4b:54:49:79:df:84:d4:76:13:29:14:78:
36:f6:01:5c:38:b3:9d:23:b2:fd:8a:f9:14:44:77:
93:d4:52:0a:bf:99:32:08:e5:4e:59:6c:59:a4:15:
40:2a:84:bf:05:43:46:37:1b:12:39:bd:43:11:63:
4b:58:38:4e:03:14:93:57:2b:3e:eb:26:0b:5a:0b:
09:38:b5:6e:e9:d7:ae:66:83:a1:d1:f8:99:32:87:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:93:BD:EC:5C:33:F1:84:89:4D:77:23:C7:E1:66:79:0A:4A:69
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4f:e3:ad:a4:06:34:01:d9:1b:d2:b2:99:dd:0b:63:1f:f8:
f4:8a:b9:42:e9:d7:b8:7d:17:11:92:66:34:50:fb:48:7a:4b:
bc:f8:cc:df:dc:2e:8e:0c:a9:1d:25:5e:e0:d1:3f:93:e9:97:
b1:de:a4:b8:3c:88:53:e0:9e:fb:4f:f6:a1:8e:d8:b6:12:31:
03:a3:75:89:74:5f:49:8f:43:a6:a1:5b:ca:1d:62:e1:71:d6:
e3:8a:60:35:a3:63:e9:a2:1e:4b:c2:57:12:07:70:25:f6:fb:
9d:64:51:86:f8:6b:cd:07:73:79:f1:32:2d:a3:3d:f7:ae:77:
d1:22:08:d2:4b:76:b0:b1:cc:19:4d:a4:a7:8b:5a:fa:5f:53:
2f:20:97:99:6c:db:5c:81:69:dc:72:24:50:ba:3b:34:77:8f:
fc:95:42:c5:24:b8:3f:93:18:e5:66:09:db:49:38:05:6c:3f:
91:a9:19:49:8d:71:21:4d:94:14:e2:40:4d:1b:ee:c6:41:26:
67:3d:2d:f7:24:34:da:e3:24:af:51:e3:d7:1a:09:db:5c:c1:
71:8a:10:e8:f4:21:59:50:84:2b:2e:24:43:cd:ab:fe:aa:66:
3a:0b:eb:ef:2f:84:0d:43:c6:90:9e:9c:bf:2a:8f:8a:e7:ad:
78:0f:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:41:09 2025 by rpki-client