Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
File: 2HGZiqFAq3wf8kDqsMkjWRPJboo.mft (raw, json)
Hash identifier: FUQlHR2f2t3VjGaU8RHQN/BuMoM6aUYNhUWtLEBSE+k=
Subject key identifier: 76:0E:31:66:42:04:03:B5:B3:78:D5:F6:29:9D:AA:8D:47:91:5E:30
Authority key identifier: D8:71:99:8A:A1:40:AB:7C:1F:F2:40:EA:B0:C9:23:59:13:C9:6E:8A
Certificate issuer: /CN=d871998aa140ab7c1ff240eab0c9235913c96e8a
Certificate serial: 0194BBCE127C8AFBB70DB88E4EB1A45F8FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: 2HGZiqFAq3wf8kDqsMkjWRPJboo.crl (hash: 0VV+6Q24wgKRTwuRzKadlos1L4E2wChWJOLeANJ4e6k=)
2: ogQz1j5jLQsKEpzhS2JSyEZnZ6I.roa (hash: B7xqxcI+bkCsaT71C5rhEWIjLfcjAKzC1lxv7kehuvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:12:7c:8a:fb:b7:0d:b8:8e:4e:b1:a4:5f:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d871998aa140ab7c1ff240eab0c9235913c96e8a
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=760e3166420403b5b378d5f6299daa8d47915e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:c0:47:4f:aa:e8:31:b8:5d:7f:0d:01:9b:
09:f1:be:60:61:f3:69:92:93:61:25:aa:73:c4:05:
be:02:a1:59:99:60:08:4e:d8:79:43:95:c1:d5:19:
47:9f:3f:7d:a4:b2:6f:b8:98:14:af:ad:e0:b2:78:
6c:55:48:8d:f1:6c:bf:ae:d0:cd:19:75:e1:05:5c:
a3:39:e4:ec:56:aa:e7:78:3b:93:ae:a6:79:6f:91:
c6:39:37:05:73:66:87:8c:73:fd:df:17:58:ac:d0:
fa:5c:6b:77:f1:af:82:62:db:e4:c6:c9:ce:57:62:
52:97:66:e1:a7:85:6c:9f:61:9f:36:2e:9b:32:91:
7b:2c:36:8a:93:b2:b4:f4:b3:f6:16:b0:b7:b1:96:
c5:62:a5:ca:83:fe:18:c0:d0:b1:cb:5e:bd:70:ac:
56:47:9b:4b:ab:2b:66:88:8b:9f:07:45:0c:4b:7c:
be:66:54:f7:a4:e8:f7:12:1b:9f:8a:eb:47:e9:39:
bf:ed:8d:48:de:d1:20:a5:44:84:e6:97:15:3a:9d:
bb:c7:65:49:5f:be:62:a0:09:28:17:8c:89:c8:cf:
27:2f:8f:b4:4c:8e:b3:93:08:25:5b:af:f1:dc:6f:
32:d2:da:e7:49:9f:b5:3a:6f:3a:3f:e8:32:51:96:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0E:31:66:42:04:03:B5:B3:78:D5:F6:29:9D:AA:8D:47:91:5E:30
X509v3 Authority Key Identifier:
keyid:D8:71:99:8A:A1:40:AB:7C:1F:F2:40:EA:B0:C9:23:59:13:C9:6E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HGZiqFAq3wf8kDqsMkjWRPJboo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/33aa24-35ea-4adc-8c05-5a34e52b0b10/1/2HGZiqFAq3wf8kDqsMkjWRPJboo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5b:e6:92:9b:4e:bc:5c:cc:80:e4:56:47:c0:c1:2b:f4:d7:
9f:8d:f3:64:7e:c8:93:1c:a3:8a:80:5d:50:66:26:b8:87:c6:
1d:aa:84:03:85:3a:4c:72:4f:d3:57:ad:41:f3:84:6c:25:86:
2d:80:ec:d8:53:97:45:44:03:4d:6e:58:f2:5c:fe:d7:5b:81:
d2:96:db:51:b0:36:87:0f:52:85:b2:65:65:d5:91:f4:16:dc:
52:b5:3d:fb:7a:28:4a:ab:ed:e7:3e:a0:00:a8:b9:5c:cc:d4:
a0:de:a6:f0:66:97:79:cf:b9:c2:c1:f5:92:48:12:fb:1d:2b:
7b:45:b4:4e:67:58:a3:19:e6:a8:ac:98:6d:ad:0b:df:4e:28:
50:e2:09:d5:39:a7:2e:8d:e4:bc:63:b4:af:81:bb:c0:7b:f0:
73:7e:bb:e4:ce:32:cf:96:ee:1e:70:60:cc:1e:a1:24:65:e3:
14:d5:14:8b:ba:90:ff:d6:e8:32:d5:f9:d7:e7:5f:ff:85:f5:
32:d2:df:f7:97:b7:b6:bd:bf:1d:52:91:b5:0e:56:e1:dd:08:
5a:65:79:d7:8d:3a:37:95:de:69:3b:c6:62:67:72:4a:3b:8b:
65:96:ef:06:88:e2:92:3e:4f:79:dd:1c:be:51:ce:37:3c:3c:
4f:4f:90:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:01 2025 by rpki-client