Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: ovM8BOiPxxnLX3jO0ej/KDuXK5rr9cucVlOFhOzZrh8=
Subject key identifier: CB:EE:F1:C7:FB:8B:59:4D:1F:19:6B:56:61:9E:45:F3:2A:25:B0:ED
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 0194BCE0687A4B8CFC9835C20CF4197C1CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 128A
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: lX3G82L3LFI0H6o89TrrYF+x9WHB3BQEkzlvK++Tb5I=)
2: MPv0ZIQf8gF63bRVzj_wdZ-dXZY.roa (hash: KkiJFkcyvUz1heqkxBgEPmTtzY4d9T2+9il0WhHIMyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:68:7a:4b:8c:fc:98:35:c2:0c:f4:19:7c:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=cbeef1c7fb8b594d1f196b56619e45f32a25b0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:6f:4e:84:64:92:0e:f1:eb:4d:57:f1:de:
4f:7f:7d:31:c3:05:60:c1:aa:57:16:09:7c:d2:f2:
e6:c3:4e:4c:08:0c:9f:8e:49:e2:b0:fb:8b:7a:53:
0b:75:e0:6c:db:65:4e:fb:e4:81:bd:63:73:63:99:
92:8c:fd:0f:3f:89:d4:5b:14:eb:f2:ec:d5:e0:ec:
00:6a:f0:13:2c:e6:e2:fb:27:b3:93:8c:fa:2f:29:
2b:69:40:f8:fb:59:ff:e5:d6:47:0b:e3:b5:60:a3:
63:d1:96:71:e8:bf:03:60:33:8f:0d:7d:47:b8:eb:
f3:e7:8b:80:76:98:a6:04:53:66:91:74:7b:df:de:
94:91:8d:10:3a:ed:cf:69:a7:02:38:d0:d3:b3:33:
39:10:91:90:01:1d:1d:77:9c:45:14:2a:b5:6f:1f:
6d:7c:98:44:62:cf:a9:a2:2f:a8:96:eb:21:cd:52:
f2:e3:a5:08:ba:64:8a:11:89:5f:ec:f0:a7:76:a5:
62:aa:9d:fe:85:a0:37:81:ed:fc:50:67:c7:63:6c:
64:f7:96:a0:93:62:06:64:03:18:a3:e0:e7:ce:15:
f4:67:80:72:1c:1d:94:f0:36:8f:05:02:37:69:8c:
f3:9c:ec:56:eb:21:08:45:af:77:df:35:6a:7e:ab:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:F1:C7:FB:8B:59:4D:1F:19:6B:56:61:9E:45:F3:2A:25:B0:ED
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:53:a4:96:2d:a3:8b:73:14:9c:3f:bb:f1:67:01:c7:8b:55:
37:1a:23:79:c7:7e:4b:bd:2f:b2:7c:d3:ec:6c:a4:15:7a:43:
51:7c:77:59:be:2f:66:54:89:e8:e3:ad:7e:0e:b1:15:a5:fd:
61:0c:6b:9d:46:79:6e:ab:05:a1:9d:65:97:0d:4f:27:7a:43:
b7:f6:ec:23:c2:e0:b6:19:b2:6f:3b:f4:f8:69:a0:37:a2:00:
62:78:b3:9c:15:09:52:57:d9:d7:68:8c:07:cf:57:54:28:52:
de:9f:03:39:79:50:ac:f1:0e:9e:ca:1c:7b:7c:97:2a:df:27:
6e:cb:f5:3f:62:f1:36:07:af:8e:78:a6:44:6c:a9:e5:ff:7d:
a9:a1:4f:25:6b:55:fe:ff:b5:34:b0:82:35:c2:18:ac:fa:ca:
31:ad:a8:21:95:ab:6d:c4:26:43:e6:8e:7d:54:7c:cd:64:38:
db:ae:e8:29:99:2f:cd:f9:7c:d8:89:14:62:54:34:2b:39:8f:
3b:1a:95:04:86:fa:ee:b7:95:ce:e8:d0:43:3b:d5:57:15:2a:
57:13:ba:95:2e:16:30:ab:ed:a6:ce:ab:96:0e:20:c7:62:aa:
f3:fb:9e:71:b5:b3:63:2d:e7:d9:f6:e5:e4:1d:d0:d3:dd:22:
ef:e6:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:05 2025 by rpki-client