Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: 4EK3ukY/IzDyDlGCZInw3O7gvqvSl6H23g2Uqfe6QgA=
Subject key identifier: 03:F2:4C:6C:20:FA:7D:8C:45:47:5E:AC:64:BA:82:D6:BC:85:27:2E
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 0194BBCE24C83B3482B4DE958EA010A1AF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: TJggodUhVHSYuEwvRaAiOK8hYsbGVyR7kv1XQKuFq+k=)
2: lr5jbDjaqu0iW63nm_TgYe8r0I0.roa (hash: T3EVn+q8uKMPho7QfZp0crU+xrdxlEjJ2MkqJEKn8k4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:c8:3b:34:82:b4:de:95:8e:a0:10:a1:af:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=03f24c6c20fa7d8c45475eac64ba82d6bc85272e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:5b:62:0b:e6:5e:10:21:28:91:5c:03:34:
4a:1e:a1:97:e8:e2:58:3b:c4:81:31:16:0f:bb:0e:
da:a0:3d:c5:cf:8d:37:c8:5a:ec:ff:27:ec:59:5a:
70:e9:83:52:bb:78:80:91:c9:87:80:b1:ec:b6:e3:
88:0d:3a:7c:03:d9:d7:67:01:81:03:52:3a:d0:5a:
cb:0c:3c:55:d9:d2:f8:41:cb:3b:b7:d5:f4:4d:4a:
4e:e6:b5:92:96:04:e0:c8:18:48:64:9a:c6:85:ed:
f4:be:52:84:dd:45:d1:62:ed:8d:0d:fc:2c:86:48:
a7:36:ec:74:2a:a6:f1:63:c7:af:5b:00:d6:21:79:
d9:4c:77:26:86:b7:fc:97:4f:69:ff:4d:a1:52:61:
95:be:f9:4b:8b:aa:1d:e6:17:81:ab:86:ef:9b:10:
a6:a3:92:37:b7:6d:88:2e:69:c3:24:6a:c9:78:f8:
89:90:5d:5f:3d:87:3a:e5:7b:4a:0c:91:2b:18:21:
a7:af:62:90:e3:40:4e:6e:41:09:38:08:53:c0:71:
d4:c5:b1:8e:fe:cd:fa:96:f9:fc:6e:e1:09:57:aa:
47:b5:bc:d9:97:4b:e5:6b:06:f2:67:47:06:37:1c:
e0:e1:f7:4c:1f:4c:54:48:3a:4d:ec:9f:42:8c:dd:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:4C:6C:20:FA:7D:8C:45:47:5E:AC:64:BA:82:D6:BC:85:27:2E
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c4:a3:e7:00:14:93:f7:fe:76:7f:9b:57:2e:59:e4:41:c3:
c4:35:e5:e1:35:58:2d:58:31:bd:e3:89:ae:7f:3e:95:39:b1:
0d:e4:95:94:7d:f8:82:55:2a:a8:f6:1f:4a:02:26:51:07:3a:
25:53:b5:09:af:f2:1c:0a:aa:fb:2d:61:03:19:b0:a1:b6:0f:
86:35:0d:da:45:ff:a2:e5:89:e9:65:8f:e3:50:04:bd:42:e0:
2d:69:e1:d9:79:f2:be:55:55:46:26:b1:e0:7d:b2:ee:17:dd:
12:e6:71:76:82:cf:df:5f:77:80:e6:b4:19:d6:9c:c3:a0:53:
19:7d:74:d7:a6:31:33:0d:cd:1a:40:41:ce:89:fd:d1:45:c4:
19:0a:7a:1b:45:42:bd:49:f7:5c:c1:de:35:b7:3e:5e:35:27:
76:1f:0d:51:04:5c:eb:20:09:95:5f:82:aa:09:62:3b:f3:bb:
4c:fd:d8:73:98:32:03:5c:38:ef:0f:01:e3:84:37:10:d0:f9:
2c:de:ed:c4:16:7d:be:0e:25:75:23:53:11:c9:d5:c5:e2:63:
fb:7b:09:1d:0f:56:91:a6:5c:87:cd:0f:8b:10:44:05:76:b3:
69:ed:8e:63:73:31:a5:fb:e4:78:f3:b7:e3:96:0f:5f:f5:61:
7c:2a:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:37 2025 by rpki-client