Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: MWp/3PndTrFU9WEd3PmpIgQbjXIwhElX49k11dwXoos=
Subject key identifier: A9:83:C5:A7:ED:0E:49:BA:5B:DA:5A:F4:A3:5B:33:FD:5A:04:1F:4D
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 0194BD17801BB7D841B3DFF2EC34C903B453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: iBGVfMbTl4+nuxNFkCde9ctyjtCQGeNAsEsGVopWmfA=)
2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:80:1b:b7:d8:41:b3:df:f2:ec:34:c9:03:b4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=a983c5a7ed0e49ba5bda5af4a35b33fd5a041f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:9d:af:3c:39:f0:80:48:b4:50:e1:90:24:
8f:4b:94:8d:51:3f:66:b0:30:91:9f:bd:27:6b:eb:
05:80:0a:3e:94:82:ab:f4:df:75:47:2f:da:53:9d:
27:f5:61:47:13:5c:7b:85:3f:6f:f4:9d:eb:33:78:
15:c5:c1:90:e2:2d:a7:0d:8f:63:38:b2:cb:e2:60:
70:f1:b2:7f:84:0e:52:bf:79:a3:03:5e:56:73:a6:
22:46:42:d4:2e:da:73:33:97:45:ce:94:55:42:d8:
47:62:c1:63:e4:1e:68:1a:80:74:56:3e:a3:e4:c2:
84:d4:40:74:ad:3b:3f:ea:19:c5:f2:f9:ef:19:78:
17:30:ea:00:fe:10:3d:b1:c4:12:71:60:89:b2:d9:
57:3e:65:05:34:f5:83:f7:23:5f:ed:c1:63:39:97:
3e:59:01:da:24:23:96:8f:21:b5:60:77:bd:15:31:
3d:fb:5a:8b:b3:4a:3e:8a:35:fc:f3:9a:6a:38:69:
7c:de:96:4f:25:e6:d7:92:3f:0c:2c:47:e4:57:ad:
0c:4b:03:99:94:8d:98:4c:df:f3:59:03:b0:72:42:
3e:84:b7:98:e7:07:34:d7:e6:d4:22:df:38:67:ec:
af:7e:d7:11:05:48:ec:7d:a3:19:2e:a5:44:6a:c7:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:C5:A7:ED:0E:49:BA:5B:DA:5A:F4:A3:5B:33:FD:5A:04:1F:4D
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:39:47:08:9a:ac:cb:8c:2e:2d:7f:53:1b:e6:e2:9d:c6:6b:
e1:72:47:0f:0b:06:cd:6b:49:18:0e:30:05:8e:79:55:7f:38:
0f:9e:e7:07:e8:3e:4a:bd:e7:fe:8b:6e:d6:4c:44:58:1b:38:
2b:98:1c:51:4e:40:99:48:26:79:16:eb:aa:63:22:8e:56:75:
9c:b7:91:e4:cb:cb:a6:84:d0:0f:96:e1:9b:48:0f:9a:3f:2e:
0b:b9:66:10:66:09:94:64:aa:cb:dc:a6:13:35:dc:56:2f:58:
47:88:b1:92:c9:d5:54:e5:85:f6:51:f3:23:1f:f9:56:88:3e:
11:f2:82:35:aa:78:2a:c3:ca:40:5c:ad:e4:cc:cd:54:73:36:
29:b5:4e:4e:28:3a:6d:4b:5b:00:8b:7a:a3:8a:50:d6:ad:ab:
3d:bd:15:31:2e:7f:b4:16:ef:b3:33:08:bf:b1:b7:e3:32:6a:
03:f4:e3:1c:f3:f5:77:c4:7b:0c:15:0d:38:7e:e0:e9:7e:48:
1e:5a:c6:f9:0a:e1:5f:d7:4f:17:bd:2b:2e:f1:47:b3:f3:1d:
4e:0d:44:99:26:95:3d:e3:8e:2e:70:01:bb:29:5a:10:68:a3:
87:9d:f5:0f:13:b6:bd:0e:61:ef:23:05:85:db:26:d8:48:50:
65:02:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:48 2025 by rpki-client