Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
File: 2FAiKC40aZ_lSLdShRmiWlDZEzo.mft (raw, json)
Hash identifier: 3X2TPLLSPS0cvzpmpNdWB2+j+Q1SELoIaIXcI5IX5Tk=
Subject key identifier: 14:A6:BF:F6:80:6A:5E:CF:85:30:86:AF:EC:9B:08:FA:EA:7D:73:0E
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 0194BD177EA800AC07396AB071FFE27F8948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
Manifest number: 1359
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 2FAiKC40aZ_lSLdShRmiWlDZEzo.crl (hash: 3AX3gGK+zJx6ZQDjrLsgrZEGJTeZ7Io5oncX6mAbNdU=)
2: 6R0wvkFPscZQ2uww-ZvwnaXh--0.roa (hash: wyiJ7rZP6x6kzeIfld1VjsLp4nIqzGhNhuxTGdTq1Ek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7e:a8:00:ac:07:39:6a:b0:71:ff:e2:7f:89:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=14a6bff6806a5ecf853086afec9b08faea7d730e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:19:b5:4d:88:e5:95:fe:5e:71:69:01:5f:
92:54:3c:ad:f2:50:b3:84:52:1d:e7:35:c3:49:c4:
3c:2a:b9:fa:40:30:78:9e:0f:3f:9c:fe:2f:a3:52:
49:af:36:01:f2:ea:cd:bf:68:c8:2b:6e:f5:fc:cd:
88:0d:79:e3:9f:33:7d:94:49:36:28:c1:90:30:a9:
c0:05:be:15:76:66:f8:9a:43:46:02:0a:5b:02:41:
4b:50:cb:bb:3c:14:2b:91:d1:4c:a7:e3:8c:36:10:
2f:ee:33:eb:15:47:61:5e:a7:ad:ed:4e:2d:de:82:
74:af:c8:18:a5:bf:27:45:bd:b7:1a:95:bc:ef:d4:
fd:7a:22:54:d5:80:fd:36:05:e0:c5:72:ad:99:53:
68:37:af:60:63:0a:ea:19:0a:39:1e:c0:71:68:ab:
b3:b3:8c:62:b6:da:3b:64:2a:3f:04:f1:38:fd:3f:
02:e6:47:53:d7:0e:01:61:a5:ba:01:7c:6a:44:1b:
3f:56:8f:d9:79:23:7c:f4:aa:79:c3:59:66:98:e6:
d1:0d:ec:29:de:63:1d:d2:db:81:04:c0:2e:13:d0:
40:32:2c:ab:5c:e6:cb:b5:71:fc:64:eb:38:43:fb:
c7:7f:bf:c5:aa:87:dc:63:48:96:e0:81:47:ab:61:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:BF:F6:80:6A:5E:CF:85:30:86:AF:EC:9B:08:FA:EA:7D:73:0E
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d8:b5:3b:0e:14:fb:16:67:6c:a9:8f:c9:56:69:31:ec:8e:
19:9a:09:31:4e:c6:15:7a:1a:2e:51:33:2c:5d:ab:46:39:bc:
cd:63:24:ce:25:10:f6:a0:a7:4e:38:f9:e6:6d:77:ed:1a:ad:
7b:98:84:d6:1f:f6:78:ba:2e:51:7d:b4:70:01:63:d0:67:bd:
05:79:8b:18:6c:52:d4:5f:33:6c:95:dc:48:c4:08:c5:aa:37:
2d:cd:0e:d7:8b:1a:6d:b4:5f:2d:9c:02:2b:eb:b3:b2:52:d3:
21:b9:91:60:c4:a6:8f:44:6a:a4:9f:64:1f:ff:09:1a:b0:fb:
75:82:7a:95:b8:98:dc:dc:eb:c0:ad:56:e3:f2:ee:a5:c6:d8:
c2:ed:f3:0c:8a:a3:13:54:b8:00:00:fe:db:20:34:65:5c:7a:
b0:f9:a2:f7:b2:81:7f:48:06:b3:9a:6b:b7:43:ed:83:21:1d:
37:8f:2d:62:1a:6b:17:f9:65:11:63:55:c8:ed:9e:6b:81:b4:
fd:b9:b5:ca:2e:54:32:90:33:e9:e4:c8:b8:ca:66:5e:bf:a8:
69:a0:17:04:b2:30:54:02:b2:95:a6:df:ba:62:68:84:7a:64:
a3:73:72:32:0b:ac:0b:a9:10:46:53:e0:65:8b:0b:52:48:01:
6b:6e:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:42 2025 by rpki-client