Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: znkEVgFJHP7SAQtq2lh9zH35h9t3vvmCRykHP9Vu9g8=
Subject key identifier: 91:4B:F3:82:EC:DE:2C:5D:A0:04:5C:A4:46:5B:19:60:E4:2C:2B:ED
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0194BC73071CA174CE972ECC140D6B23F992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1446
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: iRLjoCnfoY/84KvKAgRvA6ucN0+rCsZxz4ax14uwvm0=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:1c:a1:74:ce:97:2e:cc:14:0d:6b:23:f9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=914bf382ecde2c5da0045ca4465b1960e42c2bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:78:ff:93:6d:03:9c:fe:5c:0a:48:ad:05:
ba:43:82:88:29:10:6e:10:59:67:4d:63:00:28:63:
ae:8e:c6:84:46:0c:c5:f4:d8:6f:da:30:62:db:d1:
66:2e:9a:c0:7c:9a:2c:c6:0e:aa:95:8e:22:41:2f:
14:e1:e4:72:04:a8:01:2c:1b:97:47:51:ff:66:c3:
0e:3f:0f:05:40:af:ab:b7:be:20:4e:9e:e1:6f:7b:
c6:7d:8f:35:5f:95:da:05:71:60:87:40:d3:28:01:
30:f4:23:88:0e:c7:45:e3:43:d1:60:9a:a9:3a:88:
35:b0:28:f2:af:0a:8b:a3:9b:c1:8e:43:8d:09:81:
56:1c:af:1e:8d:6e:5a:1c:39:57:b5:79:66:40:31:
85:64:d1:6b:f7:7a:04:c1:f3:97:bd:7c:64:32:5f:
94:fa:f2:80:37:a3:02:fe:7d:ac:a5:03:af:0c:dd:
2e:51:cd:02:19:df:33:35:8d:80:b8:3d:aa:f4:b6:
48:81:85:81:d0:0b:97:c0:79:3e:cf:fe:15:f7:b7:
3b:ab:9f:b1:55:6b:7e:60:51:8f:3b:48:24:e8:fe:
9c:6e:ba:86:fa:42:a5:bc:3d:ed:07:75:08:eb:08:
c2:e2:b8:51:5d:b1:01:19:8e:90:f3:e0:68:2b:82:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4B:F3:82:EC:DE:2C:5D:A0:04:5C:A4:46:5B:19:60:E4:2C:2B:ED
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:46:20:83:71:88:aa:70:35:9e:19:04:fb:60:53:36:77:0a:
ae:13:97:91:1f:e7:50:e9:b7:ab:61:a5:bd:d6:2b:6f:b6:59:
8e:c1:f7:49:a2:05:ae:e6:89:81:68:81:79:1a:ab:16:60:d2:
f6:7f:a0:18:97:c8:25:04:1e:8a:e5:87:b1:60:ba:4f:20:e0:
fc:ed:1b:66:a3:90:b2:a0:11:de:50:62:34:38:a1:e9:e5:b4:
c7:eb:e6:1d:0c:d0:60:9a:84:14:ee:88:3d:52:5e:18:64:47:
30:4d:16:1f:9f:d5:bc:96:e8:ac:86:d1:9f:74:74:3d:64:d9:
52:79:61:8f:fb:a3:71:bb:9a:55:82:a9:40:4e:9e:46:98:6f:
cc:2c:8d:46:f3:15:4b:f0:be:c5:96:d1:7d:cf:0c:d2:13:7e:
e1:f7:07:c1:98:90:01:5b:78:97:63:55:a8:e8:73:6b:b0:26:
af:98:25:f0:d4:81:17:fc:32:a1:1c:d9:a5:3c:e7:b6:2a:28:
37:b5:57:78:21:a3:bf:af:85:32:32:34:e0:8a:94:12:d4:3c:
9d:ce:34:99:32:26:96:d1:6c:b9:d6:da:bf:ea:00:0c:76:07:
27:7c:16:49:87:1b:1e:d3:d5:7e:54:0f:dd:b0:37:4d:42:cc:
96:23:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:36 2025 by rpki-client