Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: v3xAprAtD+E5pi5qu3ZOGZ/SO22KhRgAyPeEGiVFjHE=
Subject key identifier: D1:21:92:6C:D8:06:B0:71:A6:AE:36:63:4E:C2:AF:AA:EF:34:5A:82
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 0194BCAA0E447BFF8A30AD3D4C96E29AFE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 12F3
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: p0cyznONmssZRqnVLxumfTzAYteiPaA4SMnarrDBALk=)
2: jnl0pkc8VZioDFc1rU2LXYR9u10.roa (hash: hBLoItEXtLXi0Hx0eyOzMHvYDZZAUIWBeCW6pZ7dYGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0e:44:7b:ff:8a:30:ad:3d:4c:96:e2:9a:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=d121926cd806b071a6ae36634ec2afaaef345a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:4f:5a:f3:67:e2:2f:f3:f7:47:62:ee:a5:
9f:99:46:3c:81:40:15:40:b3:66:da:19:50:0e:7a:
98:49:de:43:3f:76:d1:b3:39:63:e7:58:28:9b:96:
e7:a8:13:6e:50:cf:69:6c:9f:35:17:b5:02:7f:93:
30:28:78:d3:ad:18:08:fc:cd:4f:31:57:97:2f:ec:
c9:fe:dc:49:d5:5a:8b:e3:fb:87:fe:77:e7:f3:7d:
37:26:ef:4c:66:43:c6:60:88:48:e8:0d:19:03:f6:
2d:be:d8:dd:3d:63:6d:16:43:64:7c:16:b7:e0:60:
97:d4:36:c4:7a:c1:5b:59:cd:1e:cd:c1:bb:89:c8:
af:1b:04:49:38:a0:8f:6a:13:d3:f2:be:0e:29:47:
9e:39:2e:61:db:5e:ec:ac:f2:b7:e7:46:81:20:c7:
ed:fe:66:f7:ca:df:81:bb:80:25:76:33:2b:f1:be:
12:74:a9:f2:e0:24:ff:a1:9f:17:a3:bd:2c:76:c1:
d4:75:f5:56:03:81:fc:37:5e:5c:fd:e9:09:d8:2b:
80:4a:77:92:b8:f7:be:ea:8f:c7:43:ef:15:7a:90:
f9:c8:ee:80:30:cc:b5:33:1a:fd:7f:60:20:b8:ea:
f1:66:7e:66:1d:01:da:93:f1:d0:2a:06:83:a1:9c:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:21:92:6C:D8:06:B0:71:A6:AE:36:63:4E:C2:AF:AA:EF:34:5A:82
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ea:23:ee:09:71:34:3a:2a:b9:f9:c0:63:6b:ab:c5:ed:6d:
d5:e4:31:fc:3a:36:8b:2a:68:c1:57:02:fd:7b:8a:9f:9b:c4:
d3:fa:02:63:e8:43:a2:91:c1:02:a9:8a:fd:32:06:66:53:6d:
b9:6a:29:bf:90:26:2c:7b:61:3a:fa:ee:f1:83:78:b6:b4:5d:
9c:23:9b:65:5d:93:e2:cd:7d:7f:d6:0a:60:65:ea:b3:28:cf:
6c:c6:9c:49:6d:50:ce:f6:47:d7:22:76:04:c3:d4:7f:de:f8:
70:2c:fc:43:27:ad:e9:e4:2d:02:39:b0:10:e0:1e:5f:87:ee:
2d:85:72:60:07:a8:5e:b3:ad:d0:0d:e5:5d:ed:ee:01:2f:2e:
68:e9:cd:b9:62:0c:c3:41:0d:29:2d:22:94:9a:4d:b1:cb:0a:
2f:f4:df:70:aa:68:b3:10:c7:0d:11:92:a1:07:fd:ae:71:1e:
da:79:76:a0:1c:16:d3:16:43:5e:4e:ee:7c:70:04:aa:8b:f0:
f6:a4:b5:7a:2f:de:3a:b4:98:0d:7f:01:c5:95:48:d1:e8:ef:
6f:7e:9d:13:fa:7a:cf:d8:a7:a7:24:95:15:44:12:c0:35:45:
0e:4c:ff:14:53:c4:d9:5a:d6:92:c3:2c:1b:22:c4:40:12:65:
dc:7b:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:11 2025 by rpki-client