Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier: ObXR+Ips2c7WkotcRpriCWAjOL+9lvZlRXzyUJTY45Y=
Subject key identifier: C3:7D:95:FD:40:E2:1E:73:8D:77:41:E4:31:4F:8E:6C:D1:AE:7E:8D
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 0194BC3C444229496EF5AE247333E48F1717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number: 85
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: VPPtch6tbty3sJ5DmvR1iPJpYF+OPdK9iPU1dF9d0xQ=)
2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:44:42:29:49:6e:f5:ae:24:73:33:e4:8f:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=c37d95fd40e21e738d7741e4314f8e6cd1ae7e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:bc:eb:26:df:0b:f6:f2:64:ae:d1:cc:0a:
50:a9:34:60:b8:e3:4b:02:3e:5e:48:fe:d5:97:a3:
56:c5:91:03:6a:f6:6a:77:f4:e9:ab:a4:bd:a8:a5:
72:ff:73:b5:53:87:16:10:0f:55:90:ae:8f:98:c1:
09:c2:aa:6f:11:2e:fb:d8:fe:4a:0b:04:9d:ea:78:
95:b8:63:87:9c:9e:d4:ca:0f:29:33:52:d8:d0:c0:
ef:5e:52:0b:fd:fd:48:66:15:d8:5e:7f:91:a1:83:
a1:2a:a6:19:91:90:cb:a4:54:9c:7a:06:dd:9f:eb:
57:ba:8d:80:c9:82:c6:8e:74:ec:24:d1:54:5c:4a:
7b:cc:6b:c7:e2:d0:9c:45:70:a0:0b:0e:06:ef:05:
95:fc:a2:f0:a5:ae:a4:09:1c:67:32:30:07:cf:b7:
31:90:73:19:26:62:90:e6:3f:a1:cc:52:24:ed:96:
30:fd:4d:6c:da:89:4e:12:27:40:41:b7:c9:4a:90:
96:f2:81:0e:d4:00:68:76:49:a3:ea:87:5e:8a:b9:
48:00:c5:95:bc:06:a8:3e:c7:54:1f:a0:fd:f6:48:
82:dd:0b:53:83:7e:9c:95:da:92:79:a4:01:65:e0:
9d:bd:04:45:56:fc:5a:ed:10:14:52:8c:a2:51:01:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:95:FD:40:E2:1E:73:8D:77:41:E4:31:4F:8E:6C:D1:AE:7E:8D
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c1:56:c1:43:e3:be:81:20:fb:1b:56:ed:0f:34:ff:6d:8e:
64:7f:3b:96:5c:96:6d:72:ae:d7:60:1a:a7:c0:31:dd:5c:92:
cb:7d:fb:89:34:9e:35:dd:14:c6:bb:81:36:06:a3:00:78:f3:
3c:71:d4:2a:23:95:2c:05:e6:c2:4d:1b:61:c2:d8:16:eb:1e:
25:92:69:36:b1:25:b3:58:c0:91:b5:ae:6f:98:ba:95:e9:0d:
75:51:03:c8:42:a9:42:b0:b9:3c:db:94:be:64:d1:3e:fa:81:
52:53:bf:f5:f4:19:64:28:31:1e:ec:75:5d:af:c0:50:c9:1e:
d9:51:e5:22:98:51:90:19:f2:e3:5f:c7:d6:50:70:0a:4c:82:
c5:d5:23:7b:0e:d1:8c:56:62:58:7c:d8:e0:93:be:7e:57:39:
de:f3:a1:af:e1:25:2f:60:8d:00:2b:80:5e:71:5c:16:ad:f8:
31:cb:42:2a:27:c1:04:58:e0:c3:25:e1:a7:af:23:8d:8a:e6:
b2:9a:ae:6c:af:57:41:44:ab:c9:f1:5b:0e:e1:9c:ed:81:4e:
e4:72:2b:3d:08:67:87:0e:5e:3b:aa:6f:c2:17:44:a9:ad:ee:
4d:e8:58:57:1e:c5:4e:77:63:b9:64:db:24:32:48:06:c3:65:
4c:e4:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:22 2025 by rpki-client