Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: MARCwsz3w/DEgf56jAPw8OuvntfEG7NECkQEL9AsnT0=
Subject key identifier: CD:EE:F4:98:D0:AC:30:B6:78:8F:18:1E:4E:12:F7:BE:B1:FC:51:CB
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 0194BD85B091740A5A58D7677E4936103481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: TmlY4no+LNllcviNlocy7QeucYIxxI2UfWOw4zqaKK8=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:91:74:0a:5a:58:d7:67:7e:49:36:10:34:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=cdeef498d0ac30b6788f181e4e12f7beb1fc51cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:6c:ff:ce:85:0d:51:a7:50:0f:3a:bf:a6:
98:40:f0:a4:cb:fb:58:c8:b7:6d:7f:26:49:7f:26:
33:c8:a9:9a:d0:ec:ed:00:96:55:9e:d7:de:88:cd:
a4:cf:15:ec:94:d8:91:35:bb:f1:5c:31:23:44:5b:
02:41:92:74:ea:e2:b5:57:cc:dd:76:3b:d5:97:86:
12:f0:94:23:05:19:b8:46:bc:f4:a5:45:30:02:c6:
41:13:4a:7a:0d:9f:ec:f3:0b:44:a7:30:55:a4:98:
34:69:45:f7:a8:e0:37:45:70:e2:72:b7:6c:2e:94:
e9:ee:47:ca:9a:92:19:dd:f5:0c:18:cd:fe:c9:d1:
e7:d2:cf:62:69:10:93:35:2a:00:c0:57:ab:37:11:
0c:92:99:ad:23:4c:c4:ae:dd:2f:03:f4:8a:da:c1:
ee:6e:7e:5c:66:ff:22:2e:e2:4d:c9:43:98:47:06:
15:cc:8c:90:77:e1:1d:f5:20:3a:d4:07:bf:ea:53:
6b:4e:0d:ab:95:3c:ad:b8:a3:4f:62:35:92:5d:a8:
3d:9b:99:be:13:72:91:44:d7:4c:05:8f:a9:73:ef:
47:f3:9e:e6:11:27:2c:f9:ee:1e:38:19:ed:b0:d7:
a2:4d:dc:cf:84:aa:9d:a5:11:b8:35:98:a9:79:fe:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EE:F4:98:D0:AC:30:B6:78:8F:18:1E:4E:12:F7:BE:B1:FC:51:CB
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e3:39:4a:1e:00:27:39:72:19:c1:15:ba:cd:31:fc:d8:bd:
19:5a:fb:3c:c6:79:b8:1b:3e:76:32:fd:d3:a8:51:2b:84:95:
19:82:56:53:cf:9e:99:bc:f2:72:7f:cd:ae:29:99:b0:cf:9b:
0a:99:bf:39:b6:e2:76:13:5c:0d:a8:b6:be:57:4d:e2:0b:ef:
61:c7:6b:59:d8:cf:c8:a4:ff:10:b2:2a:21:b7:63:97:a7:18:
46:1d:49:34:aa:41:6a:0b:0d:83:d0:2f:3d:6d:b5:e1:c9:58:
fe:a1:a8:2c:34:ef:41:9c:03:5b:99:72:db:06:8d:af:c1:c3:
de:0c:c2:71:fd:ed:3f:0d:4e:b5:50:0c:70:db:42:0b:01:1b:
ea:47:9a:52:0e:43:c2:db:84:20:f8:ab:72:c4:ba:3c:dd:47:
9e:70:b5:3e:db:43:00:82:7e:56:25:8f:93:e5:28:fe:20:32:
cf:37:a5:0d:81:a1:7c:3c:53:9d:5c:cb:82:fb:fe:43:9a:4a:
2b:0a:79:cc:16:10:6a:76:a6:5e:0e:0c:f3:52:bd:e8:a8:61:
29:1f:55:c4:a9:19:3c:79:79:69:cf:21:0d:40:78:cb:47:00:
d2:32:f2:4e:6d:86:09:e1:98:c1:4a:9b:b8:f3:f5:66:c9:97:
ce:67:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:33:00 2025 by rpki-client