Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: 9jMOB+nZB974pKTkAob4Ex+TLx6F5QDam94AiYTUF+U=
Subject key identifier: 84:F2:ED:C4:9F:35:E1:38:A0:DB:4B:2B:63:40:D5:82:1B:B0:47:23
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 0194BBCE5D489B92C86841A276D6EEC520EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 0BC9
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: 2YJJnUC5q6wOTXppuZMLCH/9pTG5+xicyq3EKYSbaOU=)
2: ydjVuxhclCo9WITtZ8reVakuUyk.roa (hash: xSeH/WCDjMoX4ZrZ3Xlx1/Z9w0yzrfN0W1h+i1dlTy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5d:48:9b:92:c8:68:41:a2:76:d6:ee:c5:20:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=84f2edc49f35e138a0db4b2b6340d5821bb04723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:8f:ca:7a:e0:39:64:bd:d5:10:f7:4d:96:
8d:9b:96:c2:d4:19:42:37:7e:38:cd:e5:8a:3b:f4:
aa:31:cb:3c:8f:03:76:33:14:6e:ed:f2:46:06:cb:
cd:89:5a:fd:35:bf:e4:c7:fa:5c:fa:d2:07:de:8b:
bf:d5:94:73:18:a1:a3:4b:94:33:e4:6b:d8:bb:79:
75:3f:04:13:35:97:98:ef:d2:01:1c:cb:be:5a:31:
d8:2d:b1:bb:4e:b1:42:1c:87:fd:43:e1:5a:cf:a4:
9d:f5:98:02:27:2e:5a:0b:47:c9:68:11:65:bc:fd:
81:c6:22:20:b6:c0:db:6c:f6:b3:ef:0f:01:99:8a:
36:0e:a7:0a:5a:56:2e:7d:8b:2f:51:a8:c7:42:90:
c9:0e:2d:bd:f3:87:2a:7d:70:1e:c9:5c:03:8b:4e:
e0:7d:08:4a:26:7c:d3:d5:07:e2:06:58:6f:df:3f:
d2:03:e1:f0:11:c9:69:d3:79:b9:ea:27:7a:49:04:
d0:41:b0:0e:88:da:3f:79:8c:45:37:7a:1d:37:6f:
a9:24:52:a3:59:8f:ef:41:5b:53:c3:c2:a4:94:e0:
f9:7e:e9:7a:c0:c8:35:23:92:9d:1b:36:1a:14:0a:
05:cb:bb:e8:f8:30:70:b7:bb:7d:4f:09:f5:dd:1e:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:ED:C4:9F:35:E1:38:A0:DB:4B:2B:63:40:D5:82:1B:B0:47:23
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:50:be:0e:c0:71:4f:00:ae:90:75:9d:da:c4:84:8b:af:ad:
7b:3c:f2:02:71:66:9e:b6:b0:2d:20:f3:d4:35:76:e6:a4:43:
c1:e9:7f:d7:48:07:35:f6:ad:07:5c:58:61:25:37:66:14:97:
1f:69:b4:5c:df:a9:71:99:de:25:0a:16:c2:ac:6e:86:86:e7:
d9:bd:c1:0f:64:de:09:98:c3:0e:03:dd:31:1a:e8:53:ab:fe:
82:21:e2:f3:b5:10:2a:34:75:18:c9:66:de:54:bc:ac:57:e7:
d2:0d:c6:4e:5d:87:c5:99:8f:fa:21:e2:cf:76:79:6e:60:63:
af:78:a1:ed:56:23:7c:17:f7:d7:08:06:22:ef:dc:75:11:d6:
5e:39:df:61:a2:ee:51:24:64:4a:98:0d:6d:be:03:49:4d:74:
2b:1d:21:16:d9:98:09:06:d7:0d:5e:b7:d5:13:cf:96:46:7f:
51:ee:09:70:17:9f:cd:a7:b7:af:7d:3d:9d:d3:80:ec:98:3e:
92:4a:dc:65:26:53:5a:6f:32:91:14:c8:70:7d:ba:97:81:8c:
5a:70:67:93:e9:47:56:3a:42:f8:8c:10:c9:f1:28:3c:4f:b5:
a1:53:35:7d:8e:e4:40:f8:a1:f6:3c:fd:6b:d7:0d:2f:b8:c3:
23:f1:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:50 2025 by rpki-client