Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: lec+QFMoxv7nSi0cEn37rZz/Ty1+Y1Vy9j1Mg97ZuKc=
Subject key identifier: 38:B6:89:3B:B1:7F:06:2E:60:83:AA:84:AC:B8:E3:A8:0C:89:87:39
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 0194BD856B82B12A8CD7AB76F9EF67F5B558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0A02
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: q5SG5sl6suqgyEmP0R4k9O4CDMWhpqpe7cSyYqKxYzY=)
2: IS0smRtY_UHklMsTV-a11MXxvnU.roa (hash: 1NEqhD+uaMSbaGDtUxTmaG/oRgFCvJ6p9cklS658oe4=)
3: WbjFo-ltxvF-7ZrjyQy1FqeRLns.roa (hash: V+1LDHomAKK5fbX6O5ZL1HAUnZGkvTtj4L1E7oUU45k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6b:82:b1:2a:8c:d7:ab:76:f9:ef:67:f5:b5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=38b6893bb17f062e6083aa84acb8e3a80c898739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:bb:54:6f:40:b4:cc:11:14:99:8e:f7:75:
6a:89:4d:a9:9d:0e:2b:1d:55:88:2e:41:b1:95:e0:
d0:1d:ed:c4:1f:07:46:fe:0b:77:39:9f:8b:8a:cf:
cf:f6:11:ce:17:f1:f5:a3:75:90:d1:5a:29:2e:dc:
e1:e8:d9:e9:8c:e8:d6:1e:46:6b:17:cf:1b:d1:72:
6b:e6:49:5a:e6:03:5b:31:84:7f:1c:9f:e2:44:f8:
63:87:76:b4:a1:bd:db:6c:17:7a:e8:f0:e9:75:22:
5f:cb:13:71:a3:f6:57:ae:e3:c1:f2:6c:bb:e4:33:
9b:e6:0f:86:49:94:b3:b5:1f:07:34:60:cb:7c:bc:
0a:1e:d8:f3:6b:7a:d4:cc:fb:a2:73:26:60:b1:b9:
a3:b8:b5:bf:42:b5:11:2b:c3:42:f1:7b:c6:8e:78:
a8:03:eb:99:96:e0:92:73:4f:d0:06:b9:ea:f7:75:
c4:3a:b8:04:67:3a:3d:d8:14:23:81:5c:b9:34:b4:
e5:4f:97:90:56:8a:9e:f0:3e:79:d3:ad:c1:7e:d9:
66:76:ad:50:14:99:44:74:d6:63:45:7a:5f:b1:0c:
13:88:21:46:fa:55:51:f4:1a:34:b5:50:5c:2b:e2:
05:22:11:3d:8c:33:cf:6a:ee:8a:74:4f:63:b3:78:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B6:89:3B:B1:7F:06:2E:60:83:AA:84:AC:B8:E3:A8:0C:89:87:39
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:31:90:36:ca:3d:81:ac:4c:cb:17:18:41:5d:4a:23:f8:
33:3f:bc:28:bc:af:02:5b:6b:c5:26:8a:ce:7b:f3:3d:75:f3:
bf:44:45:63:dd:d9:33:e8:a4:ae:40:61:6e:95:b8:66:e2:75:
6a:50:60:fc:06:48:11:4e:ba:ea:46:30:6f:6a:02:e1:60:ad:
23:dd:18:27:6a:29:7d:29:2a:41:21:04:f7:38:2b:b9:d7:40:
02:17:5d:95:92:a7:81:20:4d:ee:d7:8e:7a:75:b9:1e:44:7f:
99:43:1b:9c:a7:67:4a:2e:d8:d5:04:58:e2:a5:de:eb:f0:74:
38:4b:f5:33:3e:a5:91:1d:11:77:0e:d4:d4:e7:71:37:0a:83:
b1:13:1e:69:0c:f2:d8:c0:3d:28:f2:1e:fd:89:1c:6d:aa:1e:
dd:26:56:b0:1d:da:10:f5:ca:62:4c:3b:9e:d8:d3:f6:79:0d:
d0:4c:76:ab:52:cc:f9:82:34:37:06:42:1d:56:f0:4e:73:f0:
c7:9b:c1:92:81:83:da:5e:eb:1a:0e:51:02:a9:0e:49:88:8b:
07:88:d0:3b:c4:65:55:9e:6c:77:95:be:1a:ed:09:0a:c0:14:
59:f1:08:30:ce:89:38:d6:4f:e6:54:0d:bd:95:be:8c:ee:5a:
05:49:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:17 2025 by rpki-client