Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: 9xjO9ke7vOEHhp5OFjNQ58QHPfW7rc8YFNXgmD2TLs0=
Subject key identifier: 8C:CA:85:CF:2A:F9:C2:E8:E2:2A:73:FA:04:8F:6E:7D:38:ED:4E:93
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 0194BC04FD46E8FBFF751F2B374D8F4704C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: /mDvpRy7FimljFq+d0wxdT2s3d6UvCODB+8MwPKt4IM=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fd:46:e8:fb:ff:75:1f:2b:37:4d:8f:47:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=8cca85cf2af9c2e8e22a73fa048f6e7d38ed4e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2d:2f:cf:71:4a:77:3b:9a:c0:fa:2c:fa:e3:
94:73:98:57:9a:94:2c:9b:c0:27:9a:db:32:bc:aa:
f8:d2:26:96:10:20:86:13:f7:87:2e:fe:51:96:36:
dc:6c:2f:da:5e:d0:03:b4:a2:5c:c9:7d:e0:b2:0d:
30:17:50:67:7d:b3:19:b0:3e:a9:cd:ef:63:fa:23:
52:74:f6:c8:7c:f5:a4:27:dc:3f:84:53:68:9c:8b:
98:c8:a3:fa:c2:0c:35:b7:b2:6d:b6:31:34:19:c0:
bb:2c:d4:ac:71:ad:99:a1:74:69:17:1a:92:3d:48:
77:d0:4b:d3:13:d1:21:b4:c7:56:b3:8d:a2:aa:42:
e2:12:04:d6:85:75:cf:02:09:5f:19:a5:70:e7:63:
74:aa:2b:64:83:34:4b:ad:85:fa:5d:72:ee:5e:15:
13:6e:bb:fa:c8:1d:d5:ab:6a:63:ac:f4:0d:ea:eb:
b8:d7:b1:e6:45:32:8f:68:2a:85:28:1a:70:dd:d5:
eb:c1:a9:d1:74:73:dc:1d:80:a7:1a:e4:5b:5e:79:
75:75:35:cf:7b:37:da:7a:07:87:ad:4d:b1:3e:a9:
53:ad:ab:08:15:7f:ba:d1:b9:84:88:63:6b:0e:81:
a3:3c:02:f3:01:46:de:7b:dc:0f:16:a5:ec:e8:7b:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CA:85:CF:2A:F9:C2:E8:E2:2A:73:FA:04:8F:6E:7D:38:ED:4E:93
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:24:a6:f2:f9:65:79:e2:55:53:7c:00:db:a7:27:2b:c9:b6:
97:69:a4:cd:68:cc:0f:25:02:98:94:cb:5c:57:f4:24:50:23:
e7:90:ed:74:4b:5a:b1:cf:4b:0a:8e:4f:09:15:fc:9a:de:f3:
0c:a2:57:13:79:06:03:19:d7:79:e1:6c:13:80:35:73:0f:9d:
76:4b:6c:0b:96:ce:b1:f0:2c:d2:cf:f9:97:4d:e9:9c:33:e7:
09:aa:2f:59:ec:8a:cb:84:e6:ee:d1:cc:68:38:ce:70:97:13:
e2:5c:00:41:75:f3:bf:bb:0d:76:26:f9:1d:30:43:8c:cb:17:
d1:48:53:09:e0:58:76:79:aa:cd:6e:1b:0c:54:96:9c:db:fd:
8e:5b:98:50:7d:f5:2e:55:b6:26:e0:92:ff:a5:fe:cc:fd:44:
dd:67:23:37:52:b4:b1:9f:63:6f:73:0a:8b:2c:f3:31:40:1a:
d5:61:67:4f:fa:48:4f:a9:b8:7a:11:d2:cb:4d:27:90:58:05:
ab:35:bf:91:7a:e0:90:40:ee:24:75:ed:19:da:53:7a:fc:71:
3d:58:8f:31:e8:4d:f8:6f:67:8e:03:cb:cd:9e:59:3b:f8:12:
f1:c9:69:72:22:79:34:70:95:99:53:9b:0e:64:bc:7b:92:99:
1c:9a:35:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BP1G6Pv/dR8rN02PRwTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTg2NDIyMjc5ZDlkOGI0ZTY4ZTY5YjEyOTZlNTMyZDRk
YTBjM2YwHhcNMjUwMTMxMTEwMDMwWhcNMjUwMjAxMTEwMDMwWjAzMTEwLwYDVQQD
Eyg4Y2NhODVjZjJhZjljMmU4ZTIyYTczZmEwNDhmNmU3ZDM4ZWQ0ZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6y0vz3FKdzuawPos+uOUc5hXmpQs
m8AnmtsyvKr40iaWECCGE/eHLv5RljbcbC/aXtADtKJcyX3gsg0wF1BnfbMZsD6p
ze9j+iNSdPbIfPWkJ9w/hFNonIuYyKP6wgw1t7JttjE0GcC7LNSsca2ZoXRpFxqS
PUh30EvTE9EhtMdWs42iqkLiEgTWhXXPAglfGaVw52N0qitkgzRLrYX6XXLuXhUT
brv6yB3Vq2pjrPQN6uu417HmRTKPaCqFKBpw3dXrwanRdHPcHYCnGuRbXnl1dTXP
ezfaegeHrU2xPqlTrasIFX+60bmEiGNrDoGjPALzAUbee9wPFqXs6HtaXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzKhc8q+cLo4ipz+gSPbn047U6TMB8GA1UdIwQY
MBaAFNsYZCInnZ2LTmjmmxKW5TLU2gw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2Mt
NWM3NzIzNDYwMjIzLzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2MtNWM3NzIzNDYwMjIz
LzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiSm8vll
eeJVU3wA26cnK8m2l2mkzWjMDyUCmJTLXFf0JFAj55DtdEtasc9LCo5PCRX8mt7z
DKJXE3kGAxnXeeFsE4A1cw+ddktsC5bOsfAs0s/5l03pnDPnCaovWeyKy4Tm7tHM
aDjOcJcT4lwAQXXzv7sNdib5HTBDjMsX0UhTCeBYdnmqzW4bDFSWnNv9jluYUH31
LlW2JuCS/6X+zP1E3WcjN1K0sZ9jb3MKiyzzMUAa1WFnT/pIT6m4ehHSy00nkFgF
qzW/kXrgkEDuJHXtGdpTevxxPViPMehN+G9njgPLzZ5ZO/gS8clpciJ5NHCVmVOb
DmS8e5KZHJo1XQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:18:05 2025 by rpki-client