Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: yhWcPkHyeCs/Y5noZb8G2H+6dKi5Y4eiEnjWuLsqNmg=
Subject key identifier: 9D:6A:2C:30:32:50:91:0C:DE:40:B7:CA:9A:CA:5C:E0:10:4B:CE:A2
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 0194BC7295E739148AF99C461ACE1FD503B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 0F06
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: SuFYgg7CyNrfjdjlG6SqAGQPz5jUCc7Rk3Vbhhx+aNE=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:95:e7:39:14:8a:f9:9c:46:1a:ce:1f:d5:03:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=9d6a2c303250910cde40b7ca9aca5ce0104bcea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:5d:8e:00:e3:38:d9:77:2b:ae:17:06:6e:
ff:d9:94:ed:0b:b4:e3:38:01:ac:f5:3b:8d:a3:96:
67:39:85:6b:4b:d5:25:f5:a8:56:6f:20:a3:5c:ee:
e7:e5:32:0c:b1:12:af:4a:a4:a6:78:af:c1:99:dc:
c6:62:48:00:35:4c:15:77:6d:ae:45:f8:3d:de:aa:
9b:7a:7e:a0:6f:4b:22:00:d6:81:4c:12:1e:61:ab:
cd:dc:5a:b2:c9:aa:e6:5c:0b:ec:59:2d:bf:5d:15:
6c:48:45:b4:98:f9:e9:98:cb:14:9c:4c:e8:25:67:
ed:e5:ed:34:99:59:30:36:e8:ee:43:64:9c:d1:4c:
ef:71:a5:c7:5a:ab:5f:57:b3:f8:3d:77:79:a6:34:
b2:df:32:e0:50:82:cf:00:94:d3:7a:e0:9e:1b:46:
2e:9c:0b:4e:70:44:06:84:ce:64:de:1b:8a:df:70:
56:0c:85:ff:4e:8a:fe:81:b6:89:d8:79:24:7d:8e:
51:b8:e4:2d:c2:6e:24:7b:d6:8c:07:97:34:9f:27:
16:ee:4f:7b:ec:bd:79:f7:6a:67:c8:92:a9:54:89:
df:2c:6e:90:d6:57:6f:53:de:89:ab:a5:44:4a:19:
21:3b:c4:46:95:dd:57:b5:61:c0:04:dd:73:ba:89:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6A:2C:30:32:50:91:0C:DE:40:B7:CA:9A:CA:5C:E0:10:4B:CE:A2
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fb:1c:92:4a:77:53:88:e4:d2:aa:41:bb:2c:b4:f4:b4:2d:
a1:52:5e:a7:13:9f:ee:71:ad:e6:db:a5:c6:ac:34:16:60:cf:
06:61:b7:8e:41:9f:5e:8e:71:41:0a:c7:c6:95:83:36:44:1c:
46:53:1f:54:18:9f:84:6c:5f:7f:0d:fc:2a:4b:63:7d:46:bf:
c8:83:6f:29:3f:61:38:f1:94:19:47:83:b5:2b:5d:49:a5:34:
a7:74:68:65:10:9c:c0:14:19:35:b5:51:99:ee:99:b8:b7:d0:
88:6c:53:9f:02:e7:97:02:f2:8a:a7:a5:e1:8b:03:46:ae:ad:
b1:07:7f:f0:9d:0d:53:db:75:d8:1e:2d:b5:14:b2:50:e1:32:
60:94:41:f5:e3:91:16:58:43:62:7d:79:e1:ce:70:8c:26:be:
d5:f5:f8:f5:09:63:b8:1d:a2:53:ca:4b:f7:2b:44:fc:64:89:
bf:1e:73:2c:61:8b:e1:36:bd:f7:8a:27:fb:5d:7b:b3:8e:51:
59:b2:97:73:f1:06:99:57:ff:26:23:08:e4:1f:ed:d6:4a:60:
b8:8f:34:2e:9b:e9:91:3e:62:5c:74:dd:67:41:a8:fe:00:ff:
22:49:09:bc:a7:2b:e2:7c:38:90:ed:14:b3:ed:6d:26:b5:99:
09:e8:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:17 2025 by rpki-client