Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: Wy+dhoProGwlgh2cMlU+Ah1sKFX7T392zscSOsElU3g=
Subject key identifier: 59:26:16:04:66:20:8B:42:EC:93:B1:BC:12:6B:49:CB:47:AC:03:6B
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 0194BC3C1EEA55C786C029B988601D4E2631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 04C5
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: Boe5picYvOjPRScORy6FHfVhC+njHm7N+EanM3dvbcU=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1e:ea:55:c7:86:c0:29:b9:88:60:1d:4e:26:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=5926160466208b42ec93b1bc126b49cb47ac036b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:66:79:2b:fd:15:3f:26:7d:51:fc:72:e6:
f6:05:40:44:4e:3b:5b:19:3e:e3:19:a4:2d:fa:41:
bb:58:e6:12:ba:d7:e3:1b:eb:0c:91:b6:78:8e:2f:
43:7b:fc:6b:eb:d5:bc:c3:ee:1a:aa:2b:3a:1d:7c:
7f:48:7f:4c:91:77:fe:ff:c0:40:90:a8:a2:5f:65:
3c:85:17:f4:15:e7:0e:bc:b6:73:bd:d7:32:74:e2:
46:ed:2c:50:94:10:cf:d2:05:f6:2d:bf:d4:58:be:
9b:c5:50:2d:51:36:3d:e4:cc:04:c9:e7:46:b5:0c:
32:2f:e9:1e:6e:30:36:fb:61:9a:06:39:10:99:d5:
3c:2b:cd:a7:8f:c6:61:cb:28:8e:4a:1a:5a:c5:ed:
8c:6d:31:e1:df:93:e4:57:c4:40:76:31:09:d5:35:
8f:dd:52:b1:be:ec:63:0e:1d:df:41:b1:b5:d3:2f:
84:4f:2a:68:58:df:29:0f:8c:04:1f:3c:10:7c:0c:
30:26:b3:07:b2:ca:aa:03:01:ac:1d:b0:a3:c3:28:
73:d3:a0:11:7b:4f:0e:24:0c:4e:1b:e0:58:7b:c8:
4e:0e:6c:4d:dc:08:4f:c0:5c:58:c9:51:40:41:91:
02:4f:0f:ea:e2:38:71:8c:03:8b:2f:9b:96:41:05:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:16:04:66:20:8B:42:EC:93:B1:BC:12:6B:49:CB:47:AC:03:6B
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4d:c1:4c:3b:1e:e2:64:75:9e:3a:cf:14:f7:e2:e5:fb:7f:
c4:f9:9e:b4:eb:19:55:bc:d6:20:ff:13:32:8d:d0:2a:f8:35:
3f:4b:fc:d1:45:99:6e:a7:81:9c:75:92:70:ce:f6:a0:75:bc:
b4:6a:dd:bf:b7:c8:45:51:81:28:30:45:d2:b2:09:f4:e0:d5:
a9:ca:ac:ce:45:cc:4b:c8:1a:8a:59:ca:bb:1f:bd:d3:d7:d9:
cb:01:2d:08:f9:5a:e0:a5:f8:4d:f9:66:1f:cc:4e:cc:ad:9d:
09:c6:a0:c6:df:26:3f:6a:02:33:a9:ce:a0:c1:6e:4d:1a:7d:
d9:f9:55:35:f3:6e:e1:a0:38:ed:d9:62:d2:c7:8a:cb:2a:12:
b9:0f:f7:a5:64:56:31:c8:59:50:ee:79:a7:37:32:e4:59:40:
00:bb:39:a1:23:7d:18:87:35:93:7a:fb:d4:17:c2:28:00:53:
bf:d2:fc:4a:cf:c3:15:10:ff:ad:13:5b:31:04:90:00:77:5d:
03:f0:22:5f:e4:cc:f4:9b:ab:fe:3c:ff:a5:45:64:bc:a3:0d:
43:24:23:c3:f5:a5:9d:45:50:01:8b:56:41:61:5f:23:d0:3f:
9b:54:ef:7a:d8:a8:86:b9:25:3d:17:c3:cc:70:a5:61:ba:de:
e9:19:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:18 2025 by rpki-client