Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier: J/oYslY5GfRUhYysS0KkuEAr90CKLrASBMf34TyVZn0=
Subject key identifier: F3:2B:58:90:FA:F0:3C:0D:60:EF:0F:94:F7:D3:69:5B:10:1A:29:E3
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial: 0194BC7290C01A7E469BAE0F883377CD3EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: 3sKGPzuuIrpUj6ixMeR3E9G+68O30Ol2PS+SlNv8AXQ=)
2: bdqrLURz5G694Fm80xmKAo0IogU.roa (hash: hG0r7jG1QmA/uFg4gCQdR2alotLJA0SQybpT8Ey91vY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:90:c0:1a:7e:46:9b:ae:0f:88:33:77:cd:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=f32b5890faf03c0d60ef0f94f7d3695b101a29e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:c3:f9:85:cd:cb:97:bc:bb:5b:98:ad:ba:
05:76:d6:09:b8:8d:81:a5:99:2e:51:a2:ba:1c:a1:
c1:29:d4:fa:fe:9f:77:8f:76:3c:26:30:a8:13:3e:
bb:80:0f:4f:b2:7d:31:1f:4f:4b:a8:fa:28:2e:cf:
d6:70:c9:7f:38:6d:a0:73:aa:76:d3:2c:95:ff:35:
01:64:91:c7:fe:ef:88:6e:6c:29:36:ff:9b:ed:7c:
32:77:f5:d9:40:13:37:00:6b:f3:cf:39:27:f1:f6:
1e:93:5d:35:8b:99:57:ce:7a:f5:95:f1:ae:e1:34:
d5:f6:42:98:65:b1:8e:fe:fd:a4:08:7c:ec:e9:af:
48:e0:c2:72:c8:48:c0:c0:b5:3c:2d:68:26:f0:33:
36:56:c7:c0:42:06:99:4d:09:d9:0b:52:6e:29:7b:
af:de:2b:fb:0b:57:ec:68:d2:cd:b2:4e:20:f0:a0:
eb:e6:1b:19:c5:a8:58:44:1b:6f:03:c9:0b:5f:0b:
66:44:7c:8d:32:0b:61:c9:69:3d:9c:4c:95:c4:e8:
0b:f2:e4:93:ed:65:af:8c:16:e1:bd:06:4e:97:49:
77:f3:7a:7f:3a:7a:d6:58:0b:f5:58:45:1f:a5:2f:
d2:e4:ca:44:9b:fe:34:7d:bd:7d:67:64:59:8d:d1:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2B:58:90:FA:F0:3C:0D:60:EF:0F:94:F7:D3:69:5B:10:1A:29:E3
X509v3 Authority Key Identifier:
keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:28:47:fa:56:51:ac:3c:73:2c:58:ee:06:e0:cc:bc:35:
af:37:60:f2:77:65:be:d2:47:d8:53:2c:6d:e1:5e:16:cd:71:
c0:17:3b:88:1c:0a:71:42:0c:d9:31:c9:a1:52:a6:fb:7d:35:
37:b0:75:8d:26:93:23:d0:77:53:ac:a8:d0:54:bf:06:33:36:
e9:ff:2b:24:68:84:09:1b:6c:f4:b9:5a:cf:d6:f7:23:ac:64:
33:48:3a:be:03:7a:d9:4c:6c:88:9b:76:7f:d7:1d:93:cb:39:
54:4f:a7:d1:11:be:ed:9b:aa:bd:07:eb:a0:12:78:5c:7f:4b:
94:b4:3f:f0:8a:18:03:a3:fd:53:2d:d7:05:65:22:cd:0b:c1:
a4:40:2e:50:d8:41:cf:22:df:ce:3c:46:ad:7f:0f:2e:b8:56:
4a:72:ec:1f:8b:a9:c1:5d:aa:7d:6a:90:e6:6b:9c:28:56:16:
a6:e8:84:82:64:d3:83:c0:ac:21:7a:c5:e6:d0:f0:77:bf:3d:
36:bd:cb:29:ec:54:34:a2:cd:d8:b0:c3:e3:61:ea:0c:4f:85:
a2:1f:98:85:48:59:72:03:56:bd:1e:f6:07:0e:62:2a:d8:25:
07:4f:20:86:72:e2:80:bb:32:ba:0c:7d:1c:88:ae:5c:89:1d:
78:3a:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:33 2025 by rpki-client