Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
File: 2afNm3hyoceqJis_rRqQdlAlKDI.mft (raw, json)
Hash identifier: Zf3I0qaW4m8UmgT1b/LEXK4U7l6jB4upX/mJf4UiFZg=
Subject key identifier: 2D:35:DB:B0:81:66:F8:BB:99:5C:AE:E6:4E:C0:FA:0D:F5:30:6D:D9
Authority key identifier: D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
Certificate issuer: /CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Certificate serial: 0194BC72F060F88AFE796F3893D4AADFA80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
Manifest number: 0250
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 2afNm3hyoceqJis_rRqQdlAlKDI.crl (hash: GGomUwdX6Dog+ii3zMq2tKrGhdYACVRoz1AvtccL50M=)
2: 8xRb-DPzCzHiHinhBGSiJKFCfq0.roa (hash: A9plqAZ6tW823XWa6YGs85LIMKZtOqJdz/q0S+8zYRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f0:60:f8:8a:fe:79:6f:38:93:d4:aa:df:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=2d35dbb08166f8bb995caee64ec0fa0df5306dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:83:35:fd:2e:70:80:27:af:24:65:c0:22:
94:d0:9c:47:ea:72:37:18:98:86:a4:e4:ab:3f:74:
30:56:b4:d2:ed:18:19:e0:dd:78:d7:56:5c:1d:db:
79:b6:79:91:a8:01:e7:2d:fd:9a:27:b6:8c:bd:af:
fc:fb:5a:c2:d7:cc:75:b6:48:c0:eb:c0:b4:e1:fb:
68:cd:6c:cc:99:12:65:60:d6:51:db:cb:1b:38:94:
8f:31:80:9e:1e:82:62:30:d3:1f:39:f6:fa:95:05:
ef:3d:23:35:f4:c1:25:d4:48:c5:ff:fa:e8:e3:d4:
0e:13:61:5a:a0:bc:be:96:07:52:07:24:ad:93:bc:
ed:c4:fc:2e:f5:cb:95:5f:f6:ce:d0:f3:24:a5:28:
98:68:c6:c6:8e:d7:e1:c3:7c:71:fb:e1:77:71:31:
66:2a:59:75:d8:77:cb:11:61:2d:3c:d3:25:c7:25:
b4:99:34:0d:27:a3:c1:3f:b6:10:29:b9:d3:dc:4a:
72:d1:5b:fb:3b:f2:a9:7b:52:67:3f:c1:84:79:ad:
6d:76:e5:dc:e4:36:7b:5a:8b:87:e5:65:54:ec:94:
5e:bf:ba:b2:b7:ae:d2:65:8b:af:a3:cc:cf:09:40:
dd:ac:b2:3b:5b:24:be:1a:bb:84:47:05:d3:3c:91:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:35:DB:B0:81:66:F8:BB:99:5C:AE:E6:4E:C0:FA:0D:F5:30:6D:D9
X509v3 Authority Key Identifier:
keyid:D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:74:a9:07:e6:c0:c2:88:96:1a:ed:7b:c3:6d:ae:a2:fe:17:
fb:84:96:12:bf:cd:9f:2b:dc:5b:30:f8:c7:69:99:52:a8:56:
3a:15:5c:26:f8:c9:71:48:77:9c:a3:48:c4:a5:40:89:8d:60:
c6:18:5a:85:63:57:50:51:3d:1f:82:ff:db:dc:e0:ef:16:c9:
a4:cb:2b:00:ef:99:64:b2:ca:06:59:35:d4:ae:0c:d8:09:bb:
ac:c7:41:87:37:7f:c0:c9:ac:e7:6d:eb:40:42:50:f6:f0:fa:
58:d2:ee:fd:9b:d8:29:83:d3:9b:93:b8:18:9e:3e:a1:2f:29:
1c:5f:af:3b:aa:3b:a3:0e:3d:9d:fe:8b:a2:31:08:e0:56:7e:
4c:96:c9:df:d0:82:0e:de:50:91:94:56:b0:ef:52:16:fd:6d:
40:30:a7:03:e3:de:7d:8e:39:1a:60:c0:ef:9c:c3:e6:e1:43:
4b:8c:12:a4:22:be:c9:b7:d0:ae:1b:c0:fb:6f:ec:b2:19:99:
da:d9:1f:ba:c3:53:f3:35:8c:a5:91:61:bb:6d:78:34:81:ef:
04:eb:b3:27:8f:38:85:33:75:96:0f:f3:30:3d:d5:d0:d9:d2:
f0:50:1c:c0:7e:b2:e7:99:e5:ff:01:1d:71:9e:bb:af:bf:bc:
c9:88:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:29 2025 by rpki-client