Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: bq1QzxtbwoWbiXjUgxC9Q+CMnkN/Hx9JbIvzTFv4Vyc=
Subject key identifier: 9E:B1:ED:D7:BF:BC:69:12:28:3D:A4:B6:07:BE:4E:06:AC:FA:9B:6B
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 0194BD17FCD8D1588E1FCE1AA9CC4B5AE779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 014A
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: K9Xfmcpo/rbkOqaIypJJOpsnz9FvYOkSszKH7j3igtw=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fc:d8:d1:58:8e:1f:ce:1a:a9:cc:4b:5a:e7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=9eb1edd7bfbc6912283da4b607be4e06acfa9b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:a3:2f:b6:4b:99:96:b7:73:8d:78:73:d3:
bc:51:d9:f8:22:9e:7f:51:9d:da:51:dc:e2:9c:c4:
a0:39:c0:02:f9:11:8b:ac:4c:c9:0e:40:88:3f:02:
b0:75:67:21:a1:6c:57:c6:1f:65:b6:6d:fd:1c:b0:
be:d3:94:ff:5c:18:b4:d0:91:77:55:b2:e2:6c:d4:
05:f6:67:cd:ee:bc:33:0c:8c:98:e0:24:2c:28:61:
e9:ff:2c:03:8c:0d:a8:fe:18:f2:17:93:56:68:5f:
f9:92:4e:b7:af:74:5d:14:d1:87:77:6f:6b:12:16:
90:78:c6:9d:70:6e:e5:26:cd:ba:b1:d5:6d:e8:d4:
72:7d:9c:60:c9:a2:83:b3:32:aa:a0:41:d5:a0:d3:
a7:60:83:7b:e4:7d:5b:ea:e7:5c:b0:25:62:e6:a5:
a6:47:6c:bf:e2:84:4f:b7:68:16:4c:d3:01:c4:93:
9d:c2:32:83:f4:1d:5a:a6:c2:10:3c:78:cd:bf:d8:
a2:ce:82:e2:51:7d:18:0a:6f:5c:fc:34:6c:2e:17:
6d:ca:6a:4d:a3:df:9e:32:97:ac:af:1d:10:2f:6e:
0c:b1:eb:e0:2c:2c:d9:5b:51:a8:d2:8f:10:9c:31:
9a:a9:d3:39:ad:ae:fc:8d:10:93:5f:2d:e6:d7:37:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:ED:D7:BF:BC:69:12:28:3D:A4:B6:07:BE:4E:06:AC:FA:9B:6B
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f5:75:aa:50:77:a4:72:88:5d:f7:e8:73:6e:7b:36:db:24:
20:be:f3:6b:3a:1b:7b:03:9d:7f:62:40:da:af:2c:1b:ac:dc:
4c:a1:42:78:69:af:2b:e1:6a:b5:2d:fa:49:fa:11:40:d5:a4:
05:d9:17:1c:f7:71:5b:42:f9:c8:d0:d1:8b:e7:2d:a9:a7:7a:
9a:28:b1:d5:c5:3b:e0:f8:2f:57:f2:4a:71:02:1b:66:7d:f8:
84:17:23:67:a9:16:f3:b6:53:64:1c:49:e2:c2:d0:cd:e0:f8:
fc:63:4c:5c:19:b5:89:b0:0e:ee:5d:16:6b:11:33:6b:4c:ec:
da:8a:5e:c7:23:47:44:ea:74:8e:d2:11:3e:fc:d0:99:06:b4:
ed:5f:03:f1:61:e0:25:25:28:5b:98:e3:f5:73:e2:42:df:ca:
5d:e4:31:6b:8c:0c:9a:9e:c8:18:4f:75:18:3a:37:cb:41:de:
4f:5b:d2:77:c0:fd:16:21:da:ae:ea:06:32:7a:be:11:7c:1c:
18:55:0a:81:f7:0f:1b:3d:13:31:a1:3d:7c:4f:3b:e5:e5:47:
3f:0b:ad:53:82:da:90:7c:60:81:6b:f7:c4:10:c9:8e:0a:2f:
2a:fe:57:44:e4:58:c9:da:04:48:96:51:99:da:1e:93:30:99:
96:fe:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:19 2025 by rpki-client