Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: cSP9xZM8NdWgU1TRtHL818eVKa8U+L0TnAz+CsdfcZc=
Subject key identifier: B4:E1:49:FC:1A:0B:CA:B5:7E:98:41:81:48:FF:B0:CB:3C:29:1A:AB
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 0194BD17CE09913F1144360654B1848D091E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: aFzAlUCOxrM8HSNfRqlMXbKCNCSPcqz6d9xcL5CYyqY=)
2: tFYWfziNY6T1pgWT96la8X957p4.roa (hash: 08hpQSe8BwmYvsZjvFViF9kdWzrXeHJU+sA3OilF/oE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ce:09:91:3f:11:44:36:06:54:b1:84:8d:09:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=b4e149fc1a0bcab57e98418148ffb0cb3c291aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:3d:01:e7:4c:9e:f3:25:d1:7e:85:d3:f3:
30:43:d3:50:2d:1a:27:c1:e8:b0:7d:e9:aa:f9:2d:
bb:fa:ed:57:ad:12:1e:70:9f:6b:d4:c0:c3:08:44:
fe:bb:43:cb:54:48:05:26:b8:78:b3:19:85:79:a2:
4d:ca:47:87:68:88:46:46:66:68:1f:c6:10:c2:39:
ba:81:37:1e:1d:d0:16:25:c9:b3:1c:c0:15:84:52:
e6:67:7a:ad:7a:e4:c6:e1:12:00:a7:18:8e:94:ac:
9a:98:53:f9:b7:3e:a2:23:36:38:13:76:f8:c9:f5:
9e:cb:d1:bc:f0:06:d0:73:69:6e:96:e3:5e:6c:af:
b7:e8:f1:c9:bd:7d:f8:df:e2:37:62:76:b7:d0:8a:
96:2c:57:b1:50:66:2a:48:42:18:7b:22:ea:7c:f4:
9b:d4:d9:6f:57:91:fa:b0:e2:3c:33:a8:64:76:3e:
39:11:b2:76:ea:97:6f:21:61:27:9b:88:fd:47:50:
6c:e8:76:6d:1c:b0:53:41:fd:2c:32:c1:fb:26:5c:
c1:bc:fd:00:42:89:f4:65:bb:ea:19:f4:83:95:c5:
c4:b6:0e:50:6c:84:d0:68:19:af:e7:a2:da:25:4c:
92:77:ff:59:3b:02:8f:a4:d8:51:32:53:bd:30:dc:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E1:49:FC:1A:0B:CA:B5:7E:98:41:81:48:FF:B0:CB:3C:29:1A:AB
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:8b:1f:b0:15:8e:16:9e:78:4f:a1:68:bc:38:e9:18:24:
2e:af:5e:89:a0:d8:de:6e:38:8a:ed:9d:2b:a9:a0:ac:50:fa:
23:94:0b:fb:f2:bd:61:b9:12:b0:3d:5e:33:a9:22:ac:49:4d:
91:00:ed:75:0f:b6:7e:c5:c6:a7:bc:49:9c:d4:ed:af:70:31:
c7:bc:bf:0f:ec:90:15:3a:49:91:c1:0e:42:c5:3e:14:7b:dd:
44:61:db:03:ed:5e:02:8e:1a:67:e3:e4:cf:79:c5:3f:c9:bd:
46:54:d2:4a:8a:7f:36:bb:e9:c4:5c:07:66:25:7d:fb:66:71:
c8:62:45:a5:89:6a:22:3a:c8:9a:8c:06:50:77:4e:2c:a9:c9:
4b:79:bd:f5:f8:86:b0:08:23:8a:ec:00:b3:b2:8f:64:8a:48:
9e:43:86:e5:57:65:73:7f:ae:5a:45:8c:14:9c:3b:8b:38:47:
fc:74:90:59:67:a0:c4:15:6f:c7:be:33:6a:6a:36:f3:91:a1:
5a:15:d9:1b:9a:b0:2c:77:79:7e:9c:bf:04:da:21:9d:1e:16:
84:cc:92:31:e5:57:e8:3b:6e:15:db:7a:8c:ca:84:d3:6e:b1:
1a:6f:50:59:62:f6:3f:b3:2e:10:b5:28:d3:2f:5f:13:8c:63:
b4:2f:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:58 2025 by rpki-client