Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: nEfUvyGyriIkm/XV4QchEvjbZj0tPEi9SS39FrRr+dA=
Subject key identifier: 5B:AD:1F:F0:24:B5:73:E7:55:98:3F:F4:04:92:8E:97:CF:68:B6:28
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 0194BBCE245F4DD36601992746FC02E218B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 12C1
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: 9xdptxM+3645mn/2K0ObjVYszxJDMQNI+zqKgm1XiCQ=)
2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=)
3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=)
4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:5f:4d:d3:66:01:99:27:46:fc:02:e2:18:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=5bad1ff024b573e755983ff404928e97cf68b628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:45:87:cd:27:6a:a4:b6:b8:f0:69:75:9f:
8a:51:55:4a:19:9c:10:d7:73:5d:b6:27:24:99:5a:
53:d1:b1:62:06:aa:ca:25:6c:6b:5e:02:c7:7f:f3:
25:4f:a1:32:59:51:03:95:71:b3:bd:68:8b:f0:ef:
7c:fa:b6:d6:13:b0:da:79:54:0c:30:6b:a8:38:8e:
f9:ff:2f:12:71:86:7c:76:d4:20:e2:ce:a2:33:7d:
df:ab:1d:0c:ab:26:69:0c:a9:ef:33:8d:81:76:51:
99:ad:21:16:c2:fd:cc:7d:4b:52:ef:ab:05:ec:de:
67:42:c2:e2:b7:88:1c:51:d6:82:69:39:99:e4:7a:
de:ce:4a:58:73:e5:c6:6f:9b:3e:8a:c5:49:77:37:
ce:6d:81:ed:76:e7:8c:1e:29:92:69:0e:e3:55:d1:
72:ed:d8:01:37:93:a2:30:a2:10:51:c0:46:35:80:
e9:6a:99:6c:af:c1:5e:09:39:08:ca:e5:bf:32:47:
15:76:4e:fd:d2:f9:53:03:3b:49:3f:fa:c2:b2:aa:
17:0b:f3:d7:db:d6:14:19:a4:36:8c:f7:de:4e:73:
b5:b3:ed:70:b1:80:4b:97:77:e7:6d:8d:91:6a:03:
cb:65:ec:ff:40:a8:60:12:d7:3f:32:c6:62:71:0d:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:1F:F0:24:B5:73:E7:55:98:3F:F4:04:92:8E:97:CF:68:B6:28
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:80:99:02:a5:06:57:f6:7b:85:af:bc:01:94:7e:17:e8:60:
22:f7:c3:17:e3:d1:7b:6e:1d:6b:ee:56:5a:b6:af:2e:04:28:
bc:51:e7:08:69:49:b9:e3:50:9d:b3:cf:16:a6:5f:c8:fb:4f:
7a:05:aa:3c:f7:22:52:28:39:12:99:c3:02:69:26:a7:2c:2c:
5e:4e:0c:29:e2:ef:95:15:29:6f:a0:fa:59:89:99:f2:ac:5c:
6b:ec:4c:50:a4:df:94:ff:8d:97:fe:3b:f2:38:6c:0f:cd:f6:
58:1d:a7:b8:03:55:9f:ae:0c:17:8a:f7:a1:da:4b:d6:97:d3:
e9:97:a1:a4:8c:d3:92:b3:25:0a:ca:27:4a:5b:7b:57:00:0e:
7f:85:a6:8b:da:51:86:19:81:c9:c1:44:2e:3e:cb:e9:e4:56:
e8:74:9b:ce:c4:2d:9a:af:67:8a:0c:f5:7b:30:b5:82:77:94:
27:25:1e:db:f9:27:5a:87:26:4d:f9:6f:cd:bd:1f:20:ee:19:
f9:76:20:b9:89:2e:7e:3b:2d:d6:ad:43:7f:51:90:ce:6a:6c:
9d:67:58:5c:c2:09:61:bc:74:a7:3b:6a:56:24:1b:c5:23:2b:
9c:0f:8a:b8:50:05:1c:34:c2:fb:0e:ed:18:da:8c:b2:81:72:
e2:a4:b8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client