Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: vERgDoLHGMlIociFpJQ5VxHOvG+ht+mGTSIRfQ32ZYM=
Subject key identifier: CD:6D:2E:EB:FB:74:1D:8A:B6:9A:F8:A8:25:65:42:E5:01:9D:65:B5
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 0194BC051C0F8D7C3C410F0998A91AE59A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: LDWMjPaD6m9m3dBb4vmWlbk76H5x6SaXPKseW2Ao+8U=)
2: gX7yqrsOZn21TglKYSwC7nvDyYU.roa (hash: OPLFwfaXc7vtj9ls4Hz8OLeHPQAJ08mEvbmGmH8DGlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1c:0f:8d:7c:3c:41:0f:09:98:a9:1a:e5:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=cd6d2eebfb741d8ab69af8a8256542e5019d65b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:5e:d2:f2:fc:14:11:7f:a4:7d:47:75:a2:
fa:0b:07:76:5c:85:4c:f9:3d:03:84:bc:a0:0d:00:
9d:5c:b6:1c:94:f8:11:c1:78:3d:21:9f:63:af:b5:
03:92:07:d9:d2:54:cf:c7:37:ec:cf:ee:ef:65:22:
0f:f1:0a:fd:0a:6b:05:0f:69:e0:e0:c3:61:13:8d:
fa:b5:89:0f:18:19:16:dd:35:18:cd:d2:3c:82:0e:
cf:dd:84:1b:cd:78:ee:39:25:29:60:43:be:e0:f6:
5e:21:17:42:a3:53:c4:d0:84:bd:a1:f8:4d:eb:0f:
38:d4:b9:4d:4e:09:e8:b2:71:70:03:e7:6a:bc:96:
0a:6f:65:40:9b:a0:d2:11:26:50:07:cd:bd:6b:88:
c4:17:c4:ad:fc:38:e6:69:6c:ec:f5:ef:3c:45:93:
cf:59:07:e4:79:49:83:f1:47:58:44:c4:49:e2:75:
c7:e1:70:67:12:c3:72:0e:45:03:27:3c:c8:f6:c0:
be:a0:c3:dd:ae:71:db:a7:c0:27:b7:25:59:36:e0:
cb:5d:6b:b9:c7:46:16:ca:37:8a:f2:c7:7e:c6:11:
a5:ec:ec:65:61:4b:f2:c4:5d:92:46:ec:95:ef:9e:
c4:80:22:bf:f6:86:9e:31:41:68:94:77:df:d3:f3:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6D:2E:EB:FB:74:1D:8A:B6:9A:F8:A8:25:65:42:E5:01:9D:65:B5
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:cf:b4:c7:39:25:14:1c:70:6f:3e:4f:18:48:e9:6c:99:
6c:0b:99:84:ca:79:da:a3:31:fb:26:20:28:4e:8f:90:aa:bb:
b4:42:a2:82:a2:32:bc:1f:b0:94:c0:cf:43:f8:8a:ce:33:26:
82:12:75:9d:44:5d:c8:82:8f:65:9d:fd:3b:a2:a2:3c:aa:cf:
0c:d3:6e:0f:63:44:5e:55:cd:28:15:35:3f:bd:bb:36:97:72:
51:ce:7d:dd:85:6f:9e:7a:36:bb:86:01:7d:61:25:3e:92:0b:
d1:c9:41:1f:61:e2:58:da:60:5f:e2:43:a9:18:54:ad:49:70:
8b:d8:f6:62:46:94:19:fc:d5:8a:fa:66:ac:29:06:40:fd:86:
74:c3:2d:e4:51:ca:bc:f5:34:90:e8:16:ad:79:2b:6e:48:4e:
01:0f:d7:50:1a:e9:04:c9:3e:1b:54:33:d0:27:52:07:65:8a:
c9:e9:8e:69:ab:08:50:9e:43:8a:50:30:07:22:80:dc:31:5e:
c5:e8:67:00:35:34:4d:b6:7e:f1:8d:57:94:2e:65:60:88:d4:
61:bb:ce:b5:ef:d5:ff:6a:23:bf:bc:01:38:d0:4e:96:31:68:
de:34:6f:b8:ec:68:c5:0c:10:1e:8f:47:0f:52:0c:50:e0:e0:
e1:5a:6c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:11 2025 by rpki-client