Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
File: 2lTIIO5UFUMsaLATYZJ1_0xubqU.mft (raw, json)
Hash identifier: s0gHfQCZnle5IP6J0DBLQqhaWg9rkrI3gMX/RYaHtHc=
Subject key identifier: DD:9C:F6:52:0F:F3:B9:19:B7:A0:F9:02:92:5B:65:CE:63:63:BC:3A
Authority key identifier: DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
Certificate issuer: /CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Certificate serial: 0194BBCE69100D6657FC1B9C04A2CB3E56F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
Manifest number: 04AE
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 2lTIIO5UFUMsaLATYZJ1_0xubqU.crl (hash: s/17Vq3XXGXr4rAcVisOKIx86jH1Jh25v4piXJUXi70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:10:0d:66:57:fc:1b:9c:04:a2:cb:3e:56:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=dd9cf6520ff3b919b7a0f902925b65ce6363bc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:fd:2a:dc:5e:28:50:43:0d:11:29:78:05:
56:7e:ef:9c:12:c5:f3:9f:b0:6b:cf:5d:f8:77:e9:
d3:23:d3:4c:36:60:8d:a1:7d:ee:0f:18:b4:8a:89:
9f:74:0c:65:5f:42:22:36:c0:53:b7:83:76:d6:6b:
bf:30:e6:cd:9b:b2:80:44:e3:fd:8b:ae:52:b9:8f:
7d:7f:be:16:54:33:59:c9:b2:16:0e:65:e0:36:af:
15:92:a2:eb:40:d2:af:af:01:db:f8:9e:0c:60:9f:
af:1a:16:4b:a5:b5:52:99:c6:ed:b5:6b:57:85:5c:
bb:88:23:b3:78:a4:dd:73:7d:4e:ab:1d:1d:cb:f3:
39:f8:b9:82:4d:e4:4a:86:78:52:8a:dd:b0:0e:8f:
a4:24:bc:8d:2e:5a:be:0f:bd:c5:3a:65:aa:bc:b8:
af:01:62:eb:1b:8c:5e:dd:2d:76:96:2c:51:a5:0c:
46:e4:21:77:bb:f2:62:a5:f7:db:a9:bd:f9:f0:b0:
1f:cc:2e:89:ff:28:44:d0:57:c6:dd:c3:88:a0:3e:
6a:40:4b:67:09:61:e7:ff:30:d5:d6:f2:cc:9e:04:
28:56:43:d6:14:e5:77:7a:33:f3:23:48:2b:ec:fb:
ca:7d:76:a9:8b:e4:a4:38:d4:df:71:b8:ab:d7:61:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:F6:52:0F:F3:B9:19:B7:A0:F9:02:92:5B:65:CE:63:63:BC:3A
X509v3 Authority Key Identifier:
keyid:DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c3:c7:d2:01:30:1d:05:c9:44:9c:ee:0e:76:22:ba:51:db:
2f:2a:a7:4b:7c:2c:b9:33:cf:90:d2:2a:7d:35:65:11:52:a6:
eb:4c:5a:29:7c:b4:4f:e7:b5:aa:eb:8c:c3:46:da:78:4b:b0:
51:1f:e7:1a:ba:b6:35:f2:f4:98:20:be:1e:a0:98:31:96:1d:
51:56:2a:f7:e2:7f:0a:8e:12:d7:e7:8c:e9:3d:e4:bc:2e:21:
ae:2b:01:6c:b9:9f:aa:b9:b7:4f:64:62:c3:f5:8d:79:94:5e:
a6:0b:b3:20:43:b0:db:4f:1b:24:23:1d:e6:44:12:5d:05:80:
2d:76:db:cc:3e:b5:03:36:0e:4a:d7:f4:d0:5c:33:a8:2a:bf:
7b:e6:c6:7e:1e:59:55:d1:f0:43:ef:33:79:d8:41:65:3e:c8:
f2:ed:16:cc:73:84:07:47:c4:e9:68:c1:3a:ba:10:a8:4d:5d:
63:e3:d2:51:a1:52:ff:b5:c9:58:e9:b8:5e:cd:cd:40:3e:fb:
a5:08:94:87:8b:63:9b:05:62:ea:c2:bb:6e:d2:a5:e0:3a:1a:
20:9c:39:16:b7:e6:a2:46:88:48:74:a9:2d:1d:51:5d:89:52:
30:80:4a:51:22:b7:95:95:f4:c5:14:0a:62:4e:43:61:34:dd:
7c:32:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client