Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: 8ppoRriGt3uXSdMZ71lH9a+9CWV+jLezhfJW44MGG8U=
Subject key identifier: 01:73:3B:27:C3:94:4F:94:6D:F5:53:BE:DF:36:69:2D:19:55:24:0B
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 0194BC04A23B0A1E748FBC069C7071F27998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 03EA
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: hL/PgZut8jRK4iGubk5wrwB87BCrlzb4z03Bca3Ttmk=)
2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:3b:0a:1e:74:8f:bc:06:9c:70:71:f2:79:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=01733b27c3944f946df553bedf36692d1955240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:03:94:d6:84:05:1f:18:c5:ba:cd:7b:c6:
b0:52:cf:be:20:36:6c:7f:ff:8d:b5:b4:f7:77:67:
c8:67:31:f5:ed:5c:ee:c5:d8:5f:e6:2a:c8:0e:e0:
f4:81:a2:a6:7c:45:5d:f8:38:aa:ac:fa:d4:57:fc:
15:93:90:bc:eb:71:bf:e5:0d:a4:09:03:71:61:2f:
a1:f1:89:00:98:3a:7a:e4:4f:e5:e3:10:40:8b:3f:
b2:44:33:5d:90:c2:aa:b9:5a:7d:a4:b4:fd:27:f1:
af:cf:01:e2:d0:c0:a0:8e:2d:b8:7c:8c:89:0d:b4:
c4:33:76:4d:c1:e8:fa:27:14:04:44:61:8e:bd:ca:
e8:c8:01:33:00:aa:87:f5:aa:be:f9:1d:01:2e:a3:
86:72:47:5a:85:d9:9c:72:14:3e:bc:9a:54:e0:1e:
32:92:29:4d:91:0c:03:9f:43:69:7d:4d:e4:ff:67:
41:1d:49:0c:83:5b:57:65:03:d1:1c:de:2e:62:c5:
37:9f:18:52:0d:49:c2:54:17:47:5c:8e:9e:53:7c:
6d:be:97:77:59:96:38:59:3e:02:38:6d:ad:9b:42:
09:a3:15:87:9d:8e:73:eb:1c:d4:21:5d:b6:49:fb:
52:10:75:ff:fb:13:ec:1f:2a:42:8b:0c:d4:06:95:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:3B:27:C3:94:4F:94:6D:F5:53:BE:DF:36:69:2D:19:55:24:0B
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fb:0a:0c:d6:44:75:2f:bf:9f:1f:cd:db:18:00:58:5c:7b:
09:ca:f9:0e:fb:d3:70:bd:79:9e:4c:ec:40:72:2a:80:a8:db:
56:d8:dd:1a:f2:eb:ed:38:c6:41:d3:cc:4d:64:4f:d4:ed:13:
3f:89:c7:e3:71:54:b9:ae:98:ea:1b:47:4a:79:c0:5a:26:f9:
8f:16:71:91:47:ea:ec:3c:d1:27:b5:f0:b6:b2:51:62:c7:44:
f0:ca:b9:a5:2a:5d:97:07:3c:03:e1:82:e6:0b:5a:4c:04:58:
b5:1a:bb:86:e1:ed:4b:85:a6:48:cc:eb:de:74:ce:c4:20:a1:
10:1c:78:c7:77:9c:2f:05:a4:54:fb:52:a0:eb:30:0f:90:37:
f9:0c:c1:c4:9b:8b:42:63:b8:bb:95:54:e3:93:13:e4:b6:3a:
f1:3e:1d:2d:97:14:3c:fc:4b:d9:12:4c:76:17:5b:c8:f0:7c:
96:8c:06:63:de:f5:cd:99:80:42:06:21:4b:1b:d9:9a:f0:e6:
01:a7:aa:58:06:a6:c9:ab:36:77:95:71:f7:ea:f3:f5:f5:a4:
74:6b:96:cf:58:c5:4d:e3:f5:6f:45:a7:5e:b1:42:fa:9b:29:
80:69:19:6e:e4:f3:79:e4:f1:c1:78:b1:7c:a2:7d:67:87:23:
59:e4:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:07 2025 by rpki-client