Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: d12KzReN4jwiRgYPJ2V+aQtifk0YGgJbyoIgKbavHac=
Subject key identifier: F3:22:DC:36:79:21:C3:8B:D1:D0:95:EB:B6:F2:D2:AD:B5:17:44:5A
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 0194BD4EBFF912D62812A90BA9A07F0EA168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0B12
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: bjXCjozCcR9WzD+ydeHtxiPSKgk56gfP/ZQIt/AkmsY=)
2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bf:f9:12:d6:28:12:a9:0b:a9:a0:7f:0e:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=f322dc367921c38bd1d095ebb6f2d2adb517445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:ce:0c:a8:c3:6d:ee:47:a4:ce:e9:1b:19:
74:f8:0a:0d:66:97:fa:37:06:6e:28:f2:b9:4c:c0:
86:11:c1:b9:8a:e5:5f:bd:a9:91:47:de:a9:d8:b1:
9e:0c:56:6c:b8:98:41:d6:fd:25:8b:d4:a2:f1:54:
90:73:70:96:f4:7f:26:20:49:7e:13:ad:f0:80:0b:
22:ff:bd:7f:a8:1f:9d:bd:c5:f5:6f:80:63:35:9c:
bb:e1:72:f9:de:0e:25:1d:3a:9d:de:9b:aa:86:e9:
d6:0f:64:80:d8:98:55:2a:cb:a6:79:3b:ca:b8:16:
c3:f3:ea:71:4d:24:6d:fb:02:8d:88:b6:8b:b5:af:
0d:af:47:20:04:62:c2:fc:01:38:cf:34:42:bd:1b:
f0:9a:f8:64:93:cd:2d:eb:73:f3:fe:49:d0:07:5f:
d8:42:c8:9c:06:46:5b:b3:e3:29:81:40:64:ab:0c:
f8:31:8f:8c:98:54:88:9c:30:cc:6e:9f:1e:73:7a:
7e:f4:01:af:88:66:95:b6:e7:de:bb:2e:e1:76:0b:
62:69:7d:6f:4d:0a:61:66:05:0b:c1:9a:db:0c:47:
f8:93:13:75:12:9e:e1:d5:be:64:32:47:47:19:07:
7e:50:02:e5:14:2c:54:e4:a9:87:8c:9b:dc:6d:6f:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:DC:36:79:21:C3:8B:D1:D0:95:EB:B6:F2:D2:AD:B5:17:44:5A
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a1:c9:c4:b0:cb:3d:90:9b:f1:96:e3:5f:9a:fb:17:d4:89:
63:45:e7:39:e7:e5:88:be:6c:3a:1f:39:6c:fd:78:a8:cb:96:
d6:cb:38:c0:e1:8c:43:cd:5d:e8:f6:65:4f:f8:31:cb:95:51:
e4:0d:13:85:df:5b:0b:d0:f7:cd:51:38:98:21:07:fe:9f:d3:
bc:f3:71:55:33:f2:08:fc:7e:b2:a4:ee:7a:c5:9e:6f:59:60:
f1:8e:f7:b7:0e:19:6b:e8:2d:e5:21:81:27:77:92:66:82:b7:
e1:43:0f:56:4d:0f:9c:b0:11:2b:5f:85:85:3a:63:4e:03:b3:
d9:9f:76:4c:9c:c7:d1:3a:4f:f0:6a:6f:c4:1f:4f:5a:7a:d9:
36:43:a8:f8:c1:e2:b4:82:62:95:b0:8a:dd:a6:d2:47:e2:59:
d5:f5:b0:e6:9e:c0:4b:c9:e5:6a:af:be:9e:e0:cc:08:d1:21:
b4:55:58:88:20:9a:0a:55:a8:24:11:34:4f:a1:ef:97:b6:55:
05:81:44:b4:4e:a4:0d:30:be:30:8c:3d:db:2c:96:ea:a3:d0:
4b:f4:1a:f6:0c:c1:10:5d:e8:f8:59:56:a5:43:92:28:65:f9:
0f:0b:1a:fd:bd:b7:03:97:09:c0:cd:5b:2b:80:1a:67:89:2e:
8c:93:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:50 2025 by rpki-client