Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: AYGSluH8gUcDWQ53ftsI7lyIQ3ld9yLq6G0BvBOK0QI=
Subject key identifier: F7:3B:30:E4:54:AF:6D:F1:3E:64:B2:0B:64:C9:62:84:0D:E4:18:3A
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 0194BC72FBF9D1715CC86EB61AD09EE69857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: B3TPFL/9bnOLMagJ3LR+oIPpEPRngb58QxDR8eporjo=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fb:f9:d1:71:5c:c8:6e:b6:1a:d0:9e:e6:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=f73b30e454af6df13e64b20b64c962840de4183a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:3f:ad:40:2f:32:ca:df:c0:ab:88:ca:29:
8b:4e:7a:a1:fc:ae:dd:cf:f5:5f:32:30:32:b9:38:
dc:ba:b7:83:f9:63:08:c7:99:59:02:cb:85:45:88:
eb:5a:56:e5:bd:33:42:f4:4b:06:60:27:8c:ed:d4:
33:74:e5:08:77:e4:5f:08:56:0b:9d:e7:47:20:1b:
e1:8a:a7:75:ef:88:8f:00:0a:4b:48:a8:1b:94:13:
03:06:11:6f:23:de:26:9c:44:26:89:36:3d:1c:05:
1b:7e:d9:8b:3c:48:a5:80:99:7e:1d:6a:60:8a:b4:
23:3c:0c:75:37:13:a2:58:b7:f7:6b:e9:08:14:f6:
e1:15:bb:15:6d:1c:20:7e:7b:d3:16:da:81:01:ad:
e4:18:69:ce:2b:f8:fb:a6:a0:c4:46:36:7b:26:08:
ad:89:49:5c:ec:db:e3:e6:07:9d:81:4b:33:f3:19:
b7:9d:26:02:d1:c6:97:e9:cc:7b:bf:7c:48:6a:45:
f3:3b:ca:2d:ca:8e:c9:d3:92:9c:3e:18:93:da:59:
c8:41:a3:f9:5e:e3:18:01:bc:c5:6b:32:9b:4c:aa:
fe:8c:a4:ca:b6:00:d0:d0:65:a5:1f:9b:5b:e2:80:
82:76:56:01:45:f6:99:a0:86:f5:cd:1f:58:5e:d8:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3B:30:E4:54:AF:6D:F1:3E:64:B2:0B:64:C9:62:84:0D:E4:18:3A
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:15:15:67:99:7d:0a:0b:d9:6c:72:33:aa:ce:38:66:77:1b:
fe:92:90:f1:0b:9b:4f:b3:56:dd:6e:8e:49:81:2f:a5:77:4f:
7a:f3:da:30:0c:a0:bc:e6:a6:8d:14:7a:d3:d1:f4:72:cb:9a:
aa:b4:a4:d4:a0:b0:8e:d5:ad:47:d4:56:39:54:dd:9d:74:18:
c8:f5:8f:59:b1:22:52:6b:70:7e:76:21:22:b7:d7:fe:23:8e:
12:0a:22:d4:67:71:e0:49:47:db:60:49:8b:7f:3b:95:99:28:
a6:8e:7e:87:a0:6c:16:26:72:ed:10:0d:8a:54:29:a6:5c:9b:
e8:bb:1c:82:b2:aa:b4:e0:58:b8:d8:14:09:6b:35:e6:46:f8:
7c:54:b0:1d:fe:05:e5:16:ae:0b:bc:07:22:8c:04:b7:c5:a9:
8d:fa:da:f2:fe:88:ec:6f:7a:47:b0:e6:4e:a0:9d:60:f3:b9:
fa:06:7b:1f:58:06:4b:53:4c:5b:8f:90:47:8e:ac:1c:55:65:
83:fb:47:4a:10:68:ed:a2:6c:ff:1b:b8:10:6f:9a:8c:98:6a:
0a:fd:aa:34:9e:bb:4a:57:3b:76:14:e0:e2:8b:a9:15:9c:e0:
b8:9a:93:01:8a:35:64:53:98:d9:b6:65:6e:8f:d2:3e:33:9e:
4a:6f:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:38 2025 by rpki-client