Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: KVLWh5I6c+yMcSOAx7Z0QtQL7bVNg4XJI0CKIFhvx70=
Subject key identifier: D1:B0:0D:65:AE:77:3B:E0:7D:CE:8C:09:F8:FA:1C:B6:92:1D:30:AB
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 0194BD85AD591B1B67B45D2B97F10019B7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0968
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: BS+MzwMwGj/NaVX6BxBe0laQl2jH89pTdKzwS2x6S24=)
2: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (hash: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:59:1b:1b:67:b4:5d:2b:97:f1:00:19:b7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=d1b00d65ae773be07dce8c09f8fa1cb6921d30ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:0c:21:7e:9d:6c:59:d7:50:37:fb:f2:cd:
6f:f1:39:47:fb:72:e9:e6:ec:ef:44:15:f8:b1:87:
1d:bc:9f:b8:2d:68:66:97:62:93:82:74:74:8f:b0:
05:6f:58:e1:ea:54:16:60:e6:ec:3f:67:7e:08:bd:
14:f2:ac:1b:c6:7f:e8:8a:62:b1:a8:4e:6d:44:22:
46:e5:f1:ad:50:d1:d8:2c:f3:b7:b7:49:44:32:b8:
bb:60:de:ef:28:eb:60:61:cb:28:35:f1:7b:3d:90:
47:07:cd:05:94:03:b2:2c:ca:0e:76:44:e0:20:d4:
e1:09:47:9d:a8:33:79:85:85:ce:6d:5c:70:5f:7e:
d2:92:82:55:37:36:29:9c:7e:46:5f:9a:72:8d:a7:
e3:f5:61:d1:94:e0:b5:17:ff:bd:a4:01:ca:6a:da:
c8:62:a6:7b:4e:3c:49:7d:51:6b:d0:43:f4:1c:d6:
c4:d7:68:10:cf:1e:42:bb:1f:93:90:ee:37:97:07:
0b:1f:cd:30:90:c6:a3:70:f7:98:ea:2a:ff:d5:76:
64:4f:4d:ff:fc:91:c2:36:7b:d4:0d:f6:98:5c:2d:
d0:00:76:fb:5a:e5:52:e0:ba:fa:52:51:af:00:a0:
76:d0:8f:39:3e:9b:2f:de:b2:8e:7a:5b:1e:fc:53:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B0:0D:65:AE:77:3B:E0:7D:CE:8C:09:F8:FA:1C:B6:92:1D:30:AB
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:24:e6:a4:0b:6e:3d:ba:0e:10:45:e2:1d:07:00:b1:19:1b:
e0:03:9c:d6:7d:52:b2:05:a0:1b:a1:82:e6:e3:4f:26:c2:25:
30:42:cb:20:df:64:85:f3:7a:78:af:11:3c:48:ae:13:da:51:
84:8c:90:e1:ab:fe:f9:eb:3f:31:c7:2a:21:af:49:dc:91:aa:
d8:ac:59:a4:1f:b9:1d:9d:56:cc:8d:34:1b:96:b2:3f:cb:2b:
e8:2c:ed:5c:d7:34:b4:4c:6d:ad:f4:dd:01:43:87:f9:70:7f:
d2:7a:e9:ac:59:e1:05:de:cd:c7:eb:24:d1:4c:d4:28:2c:08:
1b:93:f2:61:75:13:98:06:b6:64:2a:34:c3:5f:77:ea:e7:87:
9e:ce:e5:af:9b:c0:fc:ce:99:c6:f7:e4:25:08:94:f1:64:bd:
c9:c8:92:d0:0c:81:bd:76:a0:70:97:79:9d:96:77:65:bc:48:
ec:45:4d:5c:09:00:67:1c:e9:b0:fe:9a:e0:0f:b2:93:c7:c5:
fe:fc:d9:36:ec:85:64:26:ee:32:c1:c0:89:40:66:d1:08:9e:
10:1e:a8:cb:29:8a:a6:2b:e4:82:a2:07:c8:cc:13:ff:b2:fc:
b3:76:66:3f:f6:e0:e7:d3:fb:66:71:ee:2f:bb:9c:04:d1:fe:
55:00:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:18 2025 by rpki-client