Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: oMDmLhl1BeEzSgkxXueVtugpP3YldgHnfh92gNHonDM=
Subject key identifier: 00:2E:5D:9F:27:DC:4F:93:A6:D9:F2:71:B6:5B:F8:5B:BE:3F:1F:B8
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 0194BD852C4F3AF73A56C93EE65732BFC1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 101E
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: gDYp2f2YuBwSL0Wpvv8vDWqVHEXST5uCXIF+bFbdlbM=)
2: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (hash: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2c:4f:3a:f7:3a:56:c9:3e:e6:57:32:bf:c1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=002e5d9f27dc4f93a6d9f271b65bf85bbe3f1fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:92:41:b2:e0:ca:e5:ae:3d:1e:5a:01:33:
4f:05:62:55:6e:e0:f6:c7:44:d2:b5:6c:44:71:87:
05:f2:4e:54:10:7b:40:d2:cf:6b:57:e7:f2:7a:d4:
56:d0:7e:2a:40:75:2f:96:0e:a0:e3:04:1b:4c:9c:
6f:64:38:d5:66:59:dc:15:df:6b:f2:55:c5:70:f6:
75:85:f5:3d:10:44:a8:ba:9c:96:23:96:9c:cc:97:
61:40:87:ad:27:79:24:0c:f3:e0:90:8d:ac:11:04:
3d:e4:21:20:09:a7:c6:80:4d:78:80:e7:5f:7f:2b:
be:d4:45:ef:4d:85:01:79:42:f1:e1:ea:6b:66:bd:
43:c8:45:7e:db:5a:e8:b1:e3:6e:f8:2f:47:a6:15:
e5:53:be:16:35:86:d8:60:40:8a:99:65:4e:97:61:
ed:f4:6c:26:36:72:c0:c3:74:80:f3:9b:6b:9e:54:
4e:37:9a:ce:3f:7c:64:c3:66:82:54:d9:13:27:bf:
ce:98:50:74:25:07:fe:52:7b:f5:a5:56:7c:36:a8:
02:4b:33:17:87:a2:46:cd:8d:b0:89:81:ca:d1:a4:
39:42:c8:1f:af:2f:7d:1c:b4:9b:1f:96:dc:01:fc:
1f:59:d5:0c:17:a5:17:9a:3c:8e:9b:d1:d0:72:ea:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:5D:9F:27:DC:4F:93:A6:D9:F2:71:B6:5B:F8:5B:BE:3F:1F:B8
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:81:f5:64:65:2c:67:84:ce:13:38:89:70:31:ab:c5:30:2c:
ec:0a:8b:40:51:30:3b:97:38:cf:cb:63:7f:c4:de:e0:8f:ae:
a2:65:10:6a:45:6a:12:b3:89:04:65:43:1c:12:e2:86:d1:b5:
0d:7b:c9:17:47:cc:bc:b6:e8:89:38:9b:f7:44:c0:ac:cc:73:
8d:23:fc:07:c2:4d:1b:48:ff:17:b2:ed:47:8e:c9:10:7c:a4:
61:ef:12:1b:7e:72:a7:d5:d5:12:57:b3:12:2a:f7:47:b5:29:
72:47:d6:cd:23:42:2a:fa:3f:fa:d2:f7:cc:54:9d:2a:4a:20:
9e:22:57:74:28:56:30:71:71:e3:3b:da:39:0c:90:7a:3a:2f:
2c:49:51:b7:97:3d:fb:e4:0e:ea:7c:5b:66:62:33:93:e3:73:
6f:a6:b3:cf:9c:09:c7:db:51:64:fc:88:ad:e6:e1:c2:96:b3:
f9:41:c9:92:7a:f0:ed:3d:73:ba:3c:b6:e7:23:c4:f0:83:cc:
af:98:7d:9f:19:fb:75:98:65:f2:ca:89:f2:a1:8a:d4:8b:ed:
1f:8b:bf:24:e9:74:1c:08:64:84:65:54:a2:76:18:e4:9c:c8:
cf:2f:d3:80:71:c9:2c:4d:55:ed:81:28:76:26:3b:66:f3:7b:
6a:ff:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:47 2025 by rpki-client