Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: NKUdiK0XBPGZdExFiDR9pVc7xNIA6GbCkpL9R1dutfE=
Subject key identifier: 52:A0:50:96:B3:69:A0:97:3C:9C:8A:E3:BB:08:43:5B:66:8B:9A:C6
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 0194BBCE403773209134A125F2E296EB52EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: Nlmu6USxaP6yeC/Grao0ZTylZaC+C2nZcibFy/zEByc=)
2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:37:73:20:91:34:a1:25:f2:e2:96:eb:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=52a05096b369a0973c9c8ae3bb08435b668b9ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:55:24:da:3a:49:6e:7c:c7:41:58:fc:11:
12:2d:3b:21:c1:cd:ec:d3:ab:3b:a9:82:f4:65:41:
36:54:7d:a7:d2:b0:29:36:8f:25:d4:4f:61:72:73:
aa:c7:4b:b2:1c:f7:67:a9:8e:d8:5e:69:90:47:bf:
8e:03:5c:e2:49:2d:44:38:c4:b9:48:cc:2d:09:6d:
5d:29:d3:1b:13:93:ac:b9:b0:b3:14:99:d7:0f:ed:
a0:41:96:d3:83:20:f5:a1:04:a6:6e:85:60:6e:98:
23:86:c1:55:22:e4:e7:44:4c:71:23:ea:25:5e:65:
d8:81:4b:28:93:65:de:af:68:f3:eb:17:e1:be:1d:
78:e1:37:10:6b:58:ab:70:f6:47:1c:50:8e:ba:55:
00:7e:73:a3:e2:84:90:5e:4e:6a:7c:a6:22:45:95:
1f:bc:ec:78:6f:ef:67:9e:aa:04:3b:6d:aa:62:46:
2a:14:0f:9b:30:39:3c:53:b0:ac:17:ce:c0:c5:e0:
e5:c7:5c:bf:0f:e0:9d:83:d9:b3:f6:87:3d:b0:e6:
1f:94:e2:b6:89:b6:b4:dc:41:8e:b5:ff:5d:ed:52:
5a:7a:cc:79:7d:16:a1:a9:ed:a4:b9:8b:24:df:48:
95:c8:02:4f:40:3c:d6:aa:b7:19:ac:34:f9:ac:13:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A0:50:96:B3:69:A0:97:3C:9C:8A:E3:BB:08:43:5B:66:8B:9A:C6
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ea:7b:76:dd:22:c8:af:05:e9:f1:69:b4:2e:17:6e:8d:5b:
36:f1:b3:08:3b:c0:6a:23:1a:23:36:16:4a:19:12:7d:4b:93:
12:06:2c:2c:e9:05:1f:82:de:91:52:bb:87:15:82:c2:cb:a0:
8b:2d:f2:e2:3a:31:a3:fe:3b:70:69:c1:f3:91:78:d3:26:e8:
5a:20:75:8d:0e:27:ff:72:00:40:ff:af:a7:21:cc:34:89:87:
90:41:75:b5:e4:6d:7f:f2:62:34:00:71:bb:42:ba:19:5b:29:
69:70:e5:b8:ec:2d:42:03:dd:99:63:53:7c:30:32:c5:d1:83:
d7:34:56:55:8d:7e:4b:f1:18:50:2b:41:22:16:86:54:d2:e9:
f9:ac:60:38:d5:73:fa:e6:61:6e:57:15:3c:71:70:f1:a0:bf:
56:50:cf:48:90:58:8f:64:26:63:00:0e:11:ef:ba:29:28:61:
de:fd:80:6c:5a:92:5a:a5:30:4d:14:7b:3d:35:54:03:6a:f9:
76:c0:a3:10:de:2e:3e:98:3e:44:9e:63:1a:ad:ae:76:f7:7d:
d7:cb:23:b7:25:35:6a:88:3e:89:3c:1a:45:32:4b:b7:d8:4b:
af:46:6b:e8:7b:c6:67:00:28:c6:2d:c3:a4:3a:03:11:51:f7:
a0:b7:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:41 2025 by rpki-client