Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: pv25cu0GYkQI0nYUHSsa66xXaZFCZNtIh67y8cRhDqs=
Subject key identifier: 31:D4:C9:23:62:4F:3B:EA:6C:DC:9A:C3:3C:EA:55:40:3F:BE:07:4E
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 0194BD4E84442138B50B1A4CAB41350E6CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: QuXcnMM5xnDeK2K3KShRykeLbhVncjoUKnqVuOSz+uA=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:44:21:38:b5:0b:1a:4c:ab:41:35:0e:6c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=31d4c923624f3bea6cdc9ac33cea55403fbe074e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:52:91:6d:a7:10:80:46:06:85:c4:69:c4:
6d:7c:9a:97:66:3b:0b:65:b8:ed:8e:80:e0:2f:5f:
9a:79:90:a4:4b:34:71:fd:ad:c1:c4:7a:22:0a:ed:
e1:d5:cc:3e:c9:c7:8a:b6:96:c0:93:e8:54:c8:e3:
53:ce:88:57:08:3c:25:a0:af:c5:ec:17:5a:cb:d3:
ea:c5:4e:01:a6:84:31:dd:e2:2e:95:88:09:a3:a9:
db:31:ee:98:31:47:02:a0:95:53:66:33:09:e8:ad:
e4:a3:26:42:22:b3:76:28:65:f5:d6:7d:aa:83:3a:
22:f1:01:8a:94:40:7b:b6:a7:28:76:91:9a:48:aa:
f9:d3:01:60:90:48:12:8d:72:ed:13:d1:7f:88:13:
cd:db:b0:ce:f2:57:67:44:9b:7e:b0:8d:1d:4f:49:
e3:63:7f:39:7a:d8:e4:54:8f:0b:4b:e0:4f:76:13:
a1:70:bb:87:30:52:f7:48:f6:ac:d8:f3:ad:ea:8e:
be:c2:03:2f:fc:8d:6e:3a:a5:f0:b5:6f:5b:39:b0:
c6:56:e7:dc:76:d5:70:ea:6b:d2:e9:f3:c9:a6:bd:
e1:d5:74:23:c3:85:b5:2f:c8:6b:1d:cb:03:59:64:
b3:08:cd:18:b9:4f:ff:7d:33:54:fa:4b:cf:dc:a6:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:C9:23:62:4F:3B:EA:6C:DC:9A:C3:3C:EA:55:40:3F:BE:07:4E
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b1:42:ce:95:b5:b5:72:e0:03:39:f3:e5:16:47:8c:7d:c1:
f6:50:60:2b:34:e9:4a:72:b7:f2:db:17:2e:6b:26:f4:9d:34:
72:1d:78:2c:81:d3:86:a4:95:a9:43:d0:1c:9d:c8:ad:d7:e2:
b2:8b:cd:07:e0:6f:b4:a4:02:62:4c:ed:8b:7b:c9:b2:ad:1e:
dd:50:ea:17:dd:69:c2:23:3c:90:9b:73:75:ad:d6:ec:7e:c3:
94:b7:4e:b4:41:c1:78:85:03:a4:0d:f5:3e:89:10:ee:2a:7b:
cd:ae:1b:81:b3:f3:69:71:8a:bc:eb:f6:65:c0:94:17:86:04:
88:ee:c5:4f:92:27:e7:d0:dd:5b:36:c0:b2:b0:06:7f:3c:69:
25:a6:ec:41:8d:24:5d:02:d4:14:fd:8d:10:e5:35:ad:d3:0e:
96:04:86:3b:a5:e3:69:0d:20:cb:e1:01:37:99:7d:26:c3:d7:
54:a0:04:2c:f7:36:c1:0f:f0:74:1a:b5:a3:22:fb:2a:b7:9d:
fd:e5:f1:0f:7c:f7:1d:5d:c9:eb:8d:a0:e1:ae:a3:82:82:69:
25:f8:5f:2b:17:99:86:b9:5f:91:93:b1:c7:94:8d:28:4a:36:
27:14:01:98:b3:26:ca:c0:08:2c:5f:11:d5:b5:a3:cf:0d:07:
d8:2b:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:04 2025 by rpki-client