Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier: QjbvI09RQTSBGHWwBZg6c3iEw1h6MPjPiZ1C4IJnd0c=
Subject key identifier: 39:68:CD:E9:5A:9C:24:17:E7:A8:E1:B5:50:3A:B6:82:59:41:41:07
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 0194BC04D6121388A114B2FBEC543F110A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number: 04D6
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: mJdy6cF1tAvinm02SSbCIzMHcyfkYzRAjnKTLbfdqD4=)
2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d6:12:13:88:a1:14:b2:fb:ec:54:3f:11:0a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=3968cde95a9c2417e7a8e1b5503ab68259414107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:06:f8:70:4a:fb:8e:bb:dc:7e:6e:4e:cd:
37:e7:b8:3a:73:d2:16:53:72:c5:90:2a:c2:4f:97:
7c:6f:d7:7f:84:d5:b8:07:fe:9e:d3:d6:8e:d7:3f:
76:58:b4:d8:2f:eb:f3:d7:b8:22:17:4c:f1:43:3e:
ed:1c:fd:3e:53:3f:d9:ff:65:73:2f:70:9b:86:25:
ab:71:09:f2:7f:6f:cb:4a:1d:38:65:63:ed:79:71:
3b:91:0d:30:76:ac:f6:a6:e0:21:7a:45:44:4f:40:
d7:0f:2e:ee:03:9c:a9:8d:1e:81:30:bb:51:c2:11:
82:23:c3:ba:8e:bd:c4:6e:ee:59:63:a8:bd:cb:16:
69:eb:1e:01:b2:ae:08:b7:d4:8c:f2:67:9b:10:75:
35:1f:e2:64:6f:59:de:ad:00:29:14:fc:c0:2e:c2:
37:16:5a:5c:01:a7:03:0f:47:02:e5:ea:16:06:d1:
b7:32:6f:4e:b9:98:df:2e:3f:da:bc:b6:ee:c4:7a:
1d:5f:2c:ce:7e:82:a5:aa:05:56:9c:39:5a:5c:9d:
50:0b:dd:9c:ed:9e:b1:82:f0:99:7e:e1:5b:a1:d2:
f3:30:d1:06:f6:b1:37:a4:ae:e3:29:01:03:4b:68:
42:e8:c5:fe:de:b5:bb:1e:20:97:51:96:99:6a:b9:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:68:CD:E9:5A:9C:24:17:E7:A8:E1:B5:50:3A:B6:82:59:41:41:07
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:48:cf:a1:b1:f9:ee:dc:26:e7:da:cd:30:8f:b9:f0:cd:
45:2b:1a:2f:b6:8f:34:8b:2a:17:c1:f8:c8:74:65:5d:a2:a6:
44:b3:ef:05:9c:fb:f2:3f:15:11:d8:20:cf:b4:03:ad:fe:1f:
7c:7c:b1:50:b7:88:1a:34:7b:f8:84:85:4b:87:61:17:99:80:
af:c8:a8:d2:7e:d8:00:50:e1:67:aa:4b:06:83:2f:d0:4a:28:
98:4e:69:ef:7b:a8:58:b4:fb:1f:19:62:80:90:8a:84:de:5f:
40:ca:cd:c1:15:a8:0e:d7:1c:43:e8:2a:2d:53:7e:02:a7:e5:
c4:c2:0b:04:c6:57:7f:ff:da:c5:8a:78:b3:9a:58:a1:70:7c:
46:12:d7:a7:b0:91:0a:c4:30:9e:d2:ca:ce:5d:32:e4:d8:ea:
2f:ad:b7:a3:dc:c7:a7:af:1d:3b:f3:60:af:a5:e9:88:e0:1b:
c9:1a:3c:10:8e:09:6e:64:3b:14:5b:54:8a:6b:70:d5:19:85:
39:fb:af:0f:00:92:69:a8:67:01:4b:fc:f8:18:11:92:8b:0d:
bd:43:c1:ab:77:5a:a1:7e:c9:18:1d:5f:57:f0:c0:b3:75:ef:
96:58:06:7c:51:8d:a4:6a:b5:b0:51:68:a8:ac:63:4a:d9:b8:
58:64:97:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:32:06 2025 by rpki-client