Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: AHGbMezQPSQAbKn9/tl237F5EozfwDDO8jKhSw8wWhw=
Subject key identifier: 89:22:30:38:80:82:64:09:9B:11:59:F4:07:07:2F:EE:9B:2A:4D:67
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 0194BC04B74A409CCA265599F796AA20001D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 1HJjsYIKgn5m4aKZWr3wynalRwQ.roa (hash: 4AW+T8DVNHH/qCqGZo07n9kC0wNSFK9esxUBxaOybzo=)
2: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: K4AyS4kX9AV0YqZKcnriFhxu36fOwCFgVTYaQDD7L1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b7:4a:40:9c:ca:26:55:99:f7:96:aa:20:00:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=89223038808264099b1159f407072fee9b2a4d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:7d:31:fe:cd:37:4d:99:71:db:53:87:fe:
37:0c:d7:df:5a:8b:24:18:dd:d0:75:66:54:e9:5f:
7f:13:30:8e:30:61:3c:7e:4c:fd:21:f8:eb:95:35:
d9:bb:1f:6e:36:4e:cc:e9:4b:7f:c7:18:27:2a:92:
c8:4d:0d:9c:80:59:80:b9:3b:8c:b3:1d:30:26:e6:
44:95:62:7e:21:52:2e:9a:06:61:77:7b:e4:26:20:
b0:80:b5:27:ca:33:07:ad:0c:aa:d0:0f:e0:aa:df:
93:47:25:28:c4:fd:57:7f:24:16:80:30:41:d1:c6:
63:83:a6:28:47:3c:a9:e8:cb:c8:9e:7d:f4:ee:71:
29:6d:34:ad:46:56:a0:43:de:fa:e5:0a:82:8e:b9:
3c:37:2c:1b:72:98:a6:8c:85:e7:fc:41:0b:bb:c9:
5b:a9:1f:ee:d6:bc:1d:51:a1:63:8a:c7:83:7e:e6:
a9:3d:80:43:9c:ac:13:2f:27:23:bf:16:f3:44:1e:
be:bf:8c:ee:16:b9:9b:ce:82:6f:b3:6c:77:4b:43:
b5:1d:9f:89:8d:c5:97:bf:eb:90:4e:70:7a:c4:77:
cf:5d:06:43:cd:d1:72:76:48:31:1a:71:46:74:5a:
3c:ed:9d:cb:a6:3f:4c:3a:49:29:a9:b0:b2:96:4a:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:30:38:80:82:64:09:9B:11:59:F4:07:07:2F:EE:9B:2A:4D:67
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cd:c0:8b:77:c7:6c:a4:94:97:4f:28:7b:37:57:5f:39:d1:
bd:65:c8:d5:8c:fa:db:3a:d7:b3:ab:51:01:6e:b3:74:a2:ff:
f0:d6:2c:52:7a:04:96:ae:ab:2c:10:c5:4a:dc:d3:bb:24:60:
0b:5a:84:23:71:7d:70:a8:b1:5a:85:4d:7d:07:b7:0c:4c:4e:
4a:7e:24:d3:66:5b:cb:3a:ea:b0:3f:b4:b6:0d:af:25:cd:4a:
9f:39:66:50:57:13:2d:be:c4:79:03:0a:61:b2:67:86:b0:2a:
db:4e:75:5a:51:80:bd:47:c1:e5:66:a7:77:91:85:64:68:fa:
fb:8e:63:60:c7:c3:23:fd:c3:d1:06:2b:5e:92:c7:79:49:17:
1a:c8:27:21:dd:af:58:71:56:61:f6:62:e9:1b:df:a2:c2:04:
fd:a0:5b:94:03:74:e7:67:b2:5e:ee:c0:a9:12:42:81:64:98:
f5:17:19:21:3f:8f:68:7a:9b:c1:43:b6:f1:49:8e:95:94:b2:
7f:9c:fe:3e:53:3b:50:7f:58:db:b6:d9:45:10:6e:ee:53:35:
d7:ba:6f:d8:45:a7:7f:46:15:c2:e6:46:69:0c:62:5a:51:92:
a8:76:68:73:04:7a:7d:ab:70:8a:ae:b3:12:5f:fd:36:44:cf:
61:f8:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:42 2025 by rpki-client