Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: eVXxtPO0U8e0LMLf+diYn+1VC42G4MBm4Fe5RSa6hIo=
Subject key identifier: 1D:6C:35:46:3E:93:3A:8F:2E:53:C7:F6:C0:C9:EB:3E:14:23:4A:7C
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 0194BD176425F1FDAD1E9E25CFBA0D486034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0A1C
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: fWuf7SEibvnhRzf0gkdbz830UpdjGuQItRSNUeqOGEI=)
2: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (hash: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=)
3: _dm0as-nFQQ1bS3pghCSO6ryUwQ.roa (hash: fzQteoaQMk8gRjZgQC3tI6Hb34tGlOG3z2safrXEkbY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:64:25:f1:fd:ad:1e:9e:25:cf:ba:0d:48:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=1d6c35463e933a8f2e53c7f6c0c9eb3e14234a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:2a:c0:9c:0a:02:71:f9:b6:af:92:3b:1c:
71:9f:c3:6b:ad:a1:e1:66:14:2f:29:2c:db:3c:a3:
22:e0:65:56:e8:7e:b7:39:6a:48:48:5a:10:bd:aa:
73:cb:c2:48:f4:95:d7:b1:59:d8:53:1d:8a:f7:18:
cb:94:d3:ef:68:e7:2e:2c:98:37:84:1e:6a:bc:3d:
c3:e4:24:4e:cc:37:82:00:9b:4a:8e:21:3a:f0:d4:
89:53:a7:57:7e:7a:0a:78:01:99:5e:c9:93:da:95:
20:e5:4d:07:40:33:e5:da:3c:f6:22:37:ec:5f:eb:
9b:05:80:31:3c:a6:b2:f7:3d:9b:74:22:86:29:95:
1f:a7:58:7d:71:58:47:b9:8a:8f:b2:3f:34:c6:b1:
e1:b8:16:7e:9d:ef:f4:79:df:0b:32:4f:09:2b:7d:
51:6a:9a:6f:1f:fd:01:5f:48:e9:6f:bd:1b:2c:cc:
e5:51:f3:14:07:31:5b:4f:e5:fd:52:a8:4d:14:81:
6c:31:77:b9:fa:33:d5:67:6f:13:3e:47:aa:11:13:
78:6b:99:f6:d8:81:46:0f:aa:6b:b5:a7:21:b1:77:
4f:7a:26:c2:a6:80:95:99:d9:c0:cd:14:67:ee:89:
f3:2a:22:94:c6:d5:ee:55:1e:a3:c1:d2:c5:b6:37:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6C:35:46:3E:93:3A:8F:2E:53:C7:F6:C0:C9:EB:3E:14:23:4A:7C
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e6:a3:37:ad:9b:13:7c:56:6d:77:b3:40:9f:40:8f:e1:05:
33:61:9f:51:b7:fd:07:10:c3:d5:85:68:d2:10:89:ce:75:ce:
bf:0e:47:d6:ef:34:22:33:df:82:b8:40:3b:a6:a1:31:2e:48:
8b:71:41:7e:f5:61:b4:ef:dc:12:e0:3f:50:67:26:dd:a6:8c:
bc:3a:6a:23:19:86:a6:2a:9e:b3:3a:2a:2a:f3:46:e1:40:3d:
4d:df:1e:09:d3:b4:f4:97:a0:e3:55:e3:1a:47:0d:bc:10:73:
1a:55:25:1c:22:af:bf:ef:a7:4d:15:a5:0b:d2:4b:19:0c:8c:
bd:0f:9a:82:b6:9e:8a:57:e7:ba:ef:30:a2:51:d4:44:1e:3e:
0a:40:46:47:55:b7:ca:40:bc:fa:1f:74:82:38:9b:9a:b1:9b:
21:e4:72:8d:6f:cc:38:9b:13:20:05:de:1e:18:5c:3a:c3:ea:
01:40:34:3e:04:41:e0:ae:97:8f:d9:b5:e7:ab:70:04:06:d3:
16:94:5c:af:02:10:46:21:8f:7c:fb:30:6b:ec:9d:f4:8d:18:
58:bd:a2:89:0c:72:90:2a:d0:0c:f8:2f:30:00:91:6d:c2:81:
a1:a0:d4:13:bd:01:1f:01:7c:a6:2c:71:48:61:c9:32:4b:4d:
28:f8:46:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2Ql8f2tHp4lz7oNSGA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjcxMTNkYjU1YjYzYjY3YTRhNjI3YTcwMDhhOGFmYzJi
Y2M0MmMwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
EygxZDZjMzU0NjNlOTMzYThmMmU1M2M3ZjZjMGM5ZWIzZTE0MjM0YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRUqwJwKAnH5tq+SOxxxn8NrraHh
ZhQvKSzbPKMi4GVW6H63OWpISFoQvapzy8JI9JXXsVnYUx2K9xjLlNPvaOcuLJg3
hB5qvD3D5CROzDeCAJtKjiE68NSJU6dXfnoKeAGZXsmT2pUg5U0HQDPl2jz2Ijfs
X+ubBYAxPKay9z2bdCKGKZUfp1h9cVhHuYqPsj80xrHhuBZ+ne/0ed8LMk8JK31R
appvH/0BX0jpb70bLMzlUfMUBzFbT+X9UqhNFIFsMXe5+jPVZ28TPkeqERN4a5n2
2IFGD6prtachsXdPeibCpoCVmdnAzRRn7onzKiKUxtXuVR6jwdLFtjf4zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1sNUY+kzqPLlPH9sDJ6z4UI0p8MB8GA1UdIwQY
MBaAFNonET21W2O2ekpienAIqK/CvMQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTct
MjNiMjhmMzlhNjAyLzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTctMjNiMjhmMzlhNjAy
LzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuajN62b
E3xWbXezQJ9Aj+EFM2GfUbf9BxDD1YVo0hCJznXOvw5H1u80IjPfgrhAO6ahMS5I
i3FBfvVhtO/cEuA/UGcm3aaMvDpqIxmGpiqeszoqKvNG4UA9Td8eCdO09Jeg41Xj
GkcNvBBzGlUlHCKvv++nTRWlC9JLGQyMvQ+agraeilfnuu8wolHURB4+CkBGR1W3
ykC8+h90gjibmrGbIeRyjW/MOJsTIAXeHhhcOsPqAUA0PgRB4K6Xj9m156twBAbT
FpRcrwIQRiGPfPswa+yd9I0YWL2iiQxykCrQDPgvMACRbcKBoaDUE70BHwF8pixx
SGHJMktNKPhGHg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:35 2025 by rpki-client