Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: /zsmDWKt4pzVxWxmfRSFeiXfNlYz2IaIb5h3WirSFGI=
Subject key identifier: CF:E2:B7:F7:56:DF:53:4F:36:22:B7:25:F5:1A:57:7E:A6:E1:BB:AE
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 0194BC3C2AE63DB0C8A1806D287486EF7C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 018A
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: 2Oc3d/mQrpe4+DHtWiumILLYK5Y/N/Zp0O89DlBZZew=)
2: xaTFNHvIwGFGt2nvvisSJGJJn1U.roa (hash: dncutlGZCp4ijfHdULe589Ce9+6dKbRvNV71t7mvtSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:e6:3d:b0:c8:a1:80:6d:28:74:86:ef:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=cfe2b7f756df534f3622b725f51a577ea6e1bbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:25:93:5a:15:f4:8c:43:50:bb:0f:ba:84:
37:63:ce:46:32:69:b6:d6:d8:ff:bf:34:21:83:34:
af:91:a2:4d:be:16:90:a5:a3:db:e2:73:db:a7:ea:
79:67:1b:89:00:5c:06:6d:c8:b3:0d:ef:5f:61:7d:
2e:cd:c2:d5:f1:6b:bd:16:c4:31:89:0b:43:f2:e0:
57:85:31:63:d0:2c:9d:5d:3f:5e:c7:a1:34:f0:44:
03:5d:00:f0:9d:19:47:7c:bc:2f:88:6e:62:2f:8f:
a7:3e:ce:fa:4d:08:a9:f0:09:5c:fd:91:64:a6:f2:
01:58:89:9a:92:c9:76:77:d0:3c:d9:10:44:b0:db:
68:4e:12:28:67:1b:c1:01:b1:c1:81:50:0d:69:3b:
e0:ec:e3:73:fd:24:93:62:70:a3:4d:8f:d5:4e:7e:
b7:a5:52:02:f2:75:1c:07:f5:93:b7:c8:fa:c8:1d:
8f:38:dc:a4:ff:a8:01:17:c1:ca:9d:54:e5:85:a1:
fc:f7:8d:21:5e:8a:3a:b4:30:c3:71:df:ef:f7:67:
a0:2f:aa:9f:ea:26:d3:fc:17:fd:43:e2:72:98:72:
31:19:6f:ca:67:8b:3d:e9:e4:bd:10:05:7b:89:a8:
5f:b9:f4:ec:78:13:63:2c:8a:b1:1e:0d:62:7b:4d:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E2:B7:F7:56:DF:53:4F:36:22:B7:25:F5:1A:57:7E:A6:E1:BB:AE
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0b:bd:f4:fd:3a:4d:64:d5:d4:c3:f0:51:28:65:aa:14:74:
33:42:d2:84:09:cc:ef:27:70:68:68:48:2b:a0:69:2b:fa:12:
a8:1d:89:27:6e:b4:0e:af:11:30:d5:6c:6c:bf:6f:9c:35:f6:
4c:1a:60:cb:66:f1:70:43:d2:29:54:0a:ea:bb:4e:ac:a1:17:
6f:b9:08:ef:ba:e7:0c:64:eb:e2:c1:ba:4b:e7:86:13:ee:30:
d6:87:4c:76:b4:cd:44:a6:98:87:16:e1:93:6c:d1:d7:43:db:
51:fc:4e:c7:07:b4:5f:54:d2:8b:97:31:d3:42:30:84:67:d3:
c2:77:96:7d:c5:74:10:d4:c4:b4:80:58:67:bb:fc:87:aa:20:
fc:88:ed:8e:11:80:1a:82:b2:b0:f9:44:04:94:c2:c6:01:b8:
da:82:12:be:d7:c6:d8:a9:42:25:09:3e:f1:41:17:ad:6e:f2:
6f:76:a7:af:0c:a3:2f:d7:3e:cb:cf:11:5c:20:f2:97:65:74:
b6:c1:83:5e:35:7d:e3:96:62:f4:11:f8:ec:30:1d:c4:49:cc:
6a:82:44:b2:d3:d0:90:39:46:8d:cc:4e:aa:1c:c2:e2:45:8b:
98:0d:b0:3a:1e:db:37:60:2c:86:02:b3:3d:9c:3e:62:01:f7:
bc:8b:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:08 2025 by rpki-client