Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: eAKDk6Q86Xh4Jz9mUOlfoLXvSByXpu6Zs/HgVWxqpPU=
Subject key identifier: 4A:02:B3:7C:1F:EB:21:8E:A0:A3:E3:CB:18:9F:31:8F:E3:B9:0E:72
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 0194BC3CB0E5E6BD6FC5A9EFCF43D0F9A88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: 3/NbHCMoA9T59Tfz/b2IEipW/ZgujblQ9WoWLgWUoBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b0:e5:e6:bd:6f:c5:a9:ef:cf:43:d0:f9:a8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=4a02b37c1feb218ea0a3e3cb189f318fe3b90e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:b3:6a:1f:e6:af:23:79:e3:05:9f:b7:0e:
47:cd:a9:44:40:91:38:77:91:0b:b1:23:c6:ad:16:
3c:be:66:08:70:0e:76:fd:ba:74:7f:75:24:b7:3d:
ba:e9:14:54:60:e6:d8:ae:33:c2:38:c8:d7:a2:8e:
ca:ad:70:02:9d:c7:66:eb:6b:00:20:b2:82:96:5f:
44:f6:06:f6:4b:ca:0e:bf:a9:59:37:32:0b:b7:33:
64:45:b9:4b:f6:c4:e6:a6:7f:2a:a1:69:0e:bc:b7:
84:d6:97:c1:27:e3:0a:5b:7e:0a:dd:23:ae:65:7d:
78:51:42:83:59:9a:0e:a7:e6:51:8f:8a:0c:8e:61:
96:c4:6a:bf:88:f1:db:28:43:72:e4:8a:f1:0a:5a:
d3:b6:4b:9f:50:99:e0:17:0c:cc:40:bd:d8:67:db:
1f:04:43:2c:2a:fd:8f:40:73:01:aa:d6:ff:e4:2b:
17:3a:2e:76:52:75:cc:74:ff:60:a0:3b:6e:5f:94:
d1:f1:3d:86:8e:d4:49:d7:d1:48:65:43:e6:ab:5b:
af:ee:32:66:14:0f:e7:cd:ff:6b:03:36:ff:4c:a2:
65:75:19:64:cc:b5:27:20:9d:59:54:9d:a8:b0:c6:
cf:f0:6b:b4:55:5a:52:7b:b4:17:9f:3d:42:af:68:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:02:B3:7C:1F:EB:21:8E:A0:A3:E3:CB:18:9F:31:8F:E3:B9:0E:72
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:f1:74:61:66:db:22:39:31:d5:f1:d8:8c:9b:9d:4b:27:
4b:ac:37:72:d0:41:a9:26:58:ad:7f:99:96:a5:b5:15:53:e0:
bb:0f:05:79:97:1b:ae:0c:15:79:7f:3c:04:be:15:ed:4a:0b:
79:dc:40:23:8a:7a:0e:8c:26:29:6f:f7:45:1c:dd:0a:83:8d:
27:c7:e1:88:d0:04:e0:ef:ac:86:b7:83:d3:35:6c:34:af:56:
be:78:49:e4:b8:9c:4a:e2:eb:72:12:1b:c4:d0:dc:de:c2:ba:
77:47:9b:52:cf:dd:16:48:62:48:7e:d2:d6:12:df:62:e9:7c:
e0:db:7e:cd:3f:f3:7d:41:fa:57:f1:ca:17:3f:bd:cc:22:ef:
0b:8c:0f:79:22:e6:03:c0:75:e1:ca:15:dc:08:10:5b:79:fa:
f1:a0:75:bd:bd:9f:66:5f:20:0e:92:05:bb:89:3b:49:6d:23:
a2:cb:5b:51:03:cb:93:f8:0a:9f:5f:84:c3:d6:e3:09:6a:6f:
da:15:34:d3:ec:78:3a:02:21:80:61:4b:bb:43:df:c1:77:36:
19:36:d5:61:a7:e5:f5:63:e2:bd:91:f7:21:83:5a:c9:d0:79:
06:b9:f2:d7:1e:bb:8b:69:f6:26:aa:61:ae:15:27:6b:98:65:
17:a5:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:50 2025 by rpki-client