Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: e9gMf27MCgtnRqPBOFKZ/NkQV2bQ6KA0HTiQwRYpl+M=
Subject key identifier: A6:A9:85:31:BF:1D:90:3B:CF:B0:28:BC:50:66:99:CE:B1:ED:9B:57
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 0194BD17F4DEE9802FB09386751548373E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: uj7MvSlhYIy91TlC07p3fXaHybkzw3iPaLucG7PtBLM=)
2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f4:de:e9:80:2f:b0:93:86:75:15:48:37:3e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=a6a98531bf1d903bcfb028bc506699ceb1ed9b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:55:ca:2d:ab:dd:a3:b3:4f:59:e5:46:b8:
c1:32:07:2d:ff:38:d5:94:af:01:5b:b6:6b:7e:cd:
71:d5:34:4c:f2:91:5a:a6:09:36:7a:9a:c7:cb:80:
97:1c:40:3c:a7:96:7e:33:e0:43:62:2d:f6:b0:47:
d3:67:bc:b2:60:58:0f:bf:b8:71:80:62:e8:7e:19:
e2:9b:eb:fb:82:5d:65:e7:66:3d:80:e7:e8:f8:40:
2d:28:dd:5d:1b:47:86:23:e1:7e:c3:a8:5d:0f:28:
78:20:da:bd:77:2b:66:dc:94:88:a9:57:15:55:d8:
7f:b8:0f:3a:30:3e:f6:0a:88:6f:c1:76:82:32:cb:
f6:12:2b:3a:b9:5f:18:cd:ae:27:6d:8c:47:fc:59:
f8:24:05:d0:b6:e3:90:ae:18:c8:13:25:3a:5c:9d:
fa:30:be:83:80:c3:5d:93:df:3a:d2:00:fc:ed:d6:
43:61:1e:12:a0:db:8e:6d:e1:ea:eb:23:cf:bb:d2:
b9:21:1d:1f:15:ca:77:3e:2e:18:b2:dc:dc:bc:69:
cf:7d:7a:ee:f4:52:9b:75:74:ce:8e:8b:6e:cd:55:
02:a5:36:1c:22:27:de:66:39:34:ea:9e:8b:e0:03:
28:7a:41:16:d6:d2:f1:6e:dc:07:61:26:8b:8c:8b:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A9:85:31:BF:1D:90:3B:CF:B0:28:BC:50:66:99:CE:B1:ED:9B:57
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:85:40:2d:75:07:ab:98:3c:74:20:ca:5a:71:aa:de:e7:9b:
49:07:47:28:ef:75:33:5b:fb:74:6e:4e:84:8c:6a:3a:b2:50:
5f:3f:c9:c0:1e:b6:23:6f:cf:b8:8f:6f:eb:c5:5f:82:3e:b6:
be:b6:f9:0b:63:78:7b:b7:2e:da:3c:6d:58:46:3c:bf:80:20:
fe:3e:98:6b:8e:6e:ba:7f:ea:1d:db:9f:18:53:dc:60:b9:28:
86:c5:3c:08:42:63:37:ee:a8:01:e1:16:09:46:91:34:11:cb:
55:ef:c6:2d:94:41:82:3f:ff:83:f2:ae:11:c0:5f:70:53:f3:
d5:d9:62:fc:9f:73:5c:b8:5a:f0:d7:0a:38:e9:e0:eb:e4:a6:
bb:b7:52:56:51:3c:e0:96:41:a9:5a:50:ae:8e:29:c8:b6:da:
45:cd:f2:be:1e:20:ce:4e:34:57:0f:bb:86:31:44:fa:1d:1a:
7c:b1:37:d2:75:86:2e:85:eb:4f:00:c5:71:ac:2e:14:61:37:
ac:67:42:f0:aa:42:15:5b:1e:4b:1f:7d:79:7e:12:a7:5c:ae:
c8:79:a2:e0:23:d4:19:5d:47:a9:30:f3:b7:c8:56:f6:d3:77:
64:60:e5:1d:2a:a4:84:c5:25:81:c9:7d:b9:75:0f:1b:e4:49:
30:6f:36:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/Te6YAvsJOGdRVINz4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Zjg2NmZiMGFhODNhMjcxYTBjYjdkYzkwMzAxODhjODlk
MjNlNWQwHhcNMjUwMTMxMTYwMDUxWhcNMjUwMjAxMTYwMDUxWjAzMTEwLwYDVQQD
EyhhNmE5ODUzMWJmMWQ5MDNiY2ZiMDI4YmM1MDY2OTljZWIxZWQ5YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizhVyi2r3aOzT1nlRrjBMgct/zjV
lK8BW7Zrfs1x1TRM8pFapgk2eprHy4CXHEA8p5Z+M+BDYi32sEfTZ7yyYFgPv7hx
gGLofhnim+v7gl1l52Y9gOfo+EAtKN1dG0eGI+F+w6hdDyh4INq9dytm3JSIqVcV
Vdh/uA86MD72CohvwXaCMsv2Eis6uV8Yza4nbYxH/Fn4JAXQtuOQrhjIEyU6XJ36
ML6DgMNdk9860gD87dZDYR4SoNuObeHq6yPPu9K5IR0fFcp3Pi4YstzcvGnPfXru
9FKbdXTOjotuzVUCpTYcIifeZjk06p6L4AMoekEW1tLxbtwHYSaLjIsYKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaphTG/HZA7z7AovFBmmc6x7ZtXMB8GA1UdIwQY
MBaAFNn4ZvsKqDonGgy33JAwGIyJ0j5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYt
NWMxZDVhNjk5MmQ4LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYtNWMxZDVhNjk5MmQ4
LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYVALXUH
q5g8dCDKWnGq3uebSQdHKO91M1v7dG5OhIxqOrJQXz/JwB62I2/PuI9v68Vfgj62
vrb5C2N4e7cu2jxtWEY8v4Ag/j6Ya45uun/qHdufGFPcYLkohsU8CEJjN+6oAeEW
CUaRNBHLVe/GLZRBgj//g/KuEcBfcFPz1dli/J9zXLha8NcKOOng6+Smu7dSVlE8
4JZBqVpQro4pyLbaRc3yvh4gzk40Vw+7hjFE+h0afLE30nWGLoXrTwDFcawuFGE3
rGdC8KpCFVseSx99eX4Sp1yuyHmi4CPUGV1HqTDzt8hW9tN3ZGDlHSqkhMUlgcl9
uXUPG+RJMG82iQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:47 2025 by rpki-client