Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: 5hk3UnHTQXVfzIiUsb0EmupRvhsW3z54rjfJBmDT4Dc=
Subject key identifier: AD:27:89:90:1E:B4:BF:68:0A:8F:EF:6B:94:50:1C:5D:BF:11:CC:AD
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 0194BC052A7E7EF82C059489C1EC6CC60E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 0E9B
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: ZuLchs72bPXAAWZLbGM1otClZAU9Olwg8zJGeo6tUJ0=)
2: vmvMz7iYINXEEkk8q3hTcUEqEpc.roa (hash: cIoty3QgZcrRdlAsEyLTb5L8GB5LiEjn7CzAwFabxRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2a:7e:7e:f8:2c:05:94:89:c1:ec:6c:c6:0e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=ad2789901eb4bf680a8fef6b94501c5dbf11ccad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:11:93:3b:33:14:34:fa:65:68:f0:ad:42:90:
bb:8b:ae:5a:ad:73:b6:81:d8:61:cc:41:fd:58:c7:
7a:ee:54:4c:86:41:10:e3:18:e5:61:b7:9d:a0:c3:
d9:d8:6a:6d:80:af:a3:ef:f3:8d:a6:76:2c:48:4d:
91:50:a4:c5:34:c9:f7:9c:5e:40:cf:5c:06:94:11:
e5:2a:f5:91:b9:d9:70:6b:8e:62:63:2c:1a:77:3d:
b9:df:3f:92:6f:e3:43:73:3c:c7:d5:f7:31:15:a4:
37:ec:68:5a:26:b5:7b:6d:9a:d7:1c:d5:26:bc:c2:
27:a0:06:2a:d6:ee:3c:67:f7:33:43:9c:34:92:78:
e7:13:7e:d9:71:24:74:aa:03:00:00:12:87:37:4d:
ab:31:ca:99:43:5a:29:03:9b:a7:f4:ff:e7:75:e8:
0f:d8:d3:3d:5d:c1:84:70:c6:11:79:6d:c6:f2:0a:
0c:40:be:ad:db:42:1d:4b:cd:86:d9:8e:75:8e:fc:
a7:38:25:0f:bb:a2:e8:ad:99:a4:ce:8a:cd:0c:96:
ed:37:05:b2:f4:c4:ff:4f:6f:0e:79:d9:52:a3:a8:
c7:e8:87:61:f8:17:f6:65:0a:86:8b:c3:50:04:2b:
11:5b:91:e0:0e:f5:48:ad:8b:31:0e:36:51:02:c5:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:27:89:90:1E:B4:BF:68:0A:8F:EF:6B:94:50:1C:5D:BF:11:CC:AD
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:38:df:86:90:d1:45:51:bd:3f:7b:fa:7e:bb:9a:2e:39:be:
10:27:bb:af:9b:3a:29:89:fd:88:06:9b:32:cb:db:e0:04:3f:
63:b4:93:5b:3c:dc:99:4a:8b:ac:69:8d:26:84:f2:52:9c:c9:
d5:39:41:98:0b:6f:0d:ea:5f:b2:f5:d4:db:a8:f5:48:ba:b9:
db:cf:b9:0a:e4:a1:dd:58:c3:91:70:2a:f8:c1:4a:c5:e2:93:
16:f4:d4:19:99:40:77:70:59:8b:ab:d7:ed:b2:ba:26:7c:73:
24:08:8a:dc:b1:fe:c9:05:f2:14:15:c1:7b:25:2d:7a:44:1b:
12:e5:35:c2:ff:8d:20:7d:73:70:70:b2:a8:f1:3b:68:74:06:
b2:e5:df:d3:eb:b4:90:ec:8b:44:09:fe:42:ae:b8:38:6a:34:
97:6b:5b:f3:7b:63:bf:29:7d:7d:1a:57:d0:cd:52:0a:23:6d:
ca:91:bc:c7:83:3a:fa:e1:91:da:d7:0f:fc:e6:6e:62:cd:ac:
8d:82:d4:97:d4:8f:db:0a:a5:27:87:90:a7:a9:f4:4f:95:29:
78:84:ef:4b:b3:7b:f9:39:3c:5a:4d:de:08:48:47:4b:9c:76:
db:c7:bf:b9:67:f5:9e:57:a3:14:62:14:87:54:56:86:cd:f8:
93:56:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:56 2025 by rpki-client