Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: CW6kLzSVfB+GA88hIRcOt9skp8GFA2uuKbd5j4RCJVU=
Subject key identifier: A7:A8:9B:E2:DD:D5:24:53:62:F7:E2:F4:72:71:06:8A:68:79:9E:18
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 0194BBCEC7144481378D141A0539564CFAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: 1SdB4Qx7qFxK5iBZ5qIdzxYgGVxv41a8kAhs8VSMYLA=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c7:14:44:81:37:8d:14:1a:05:39:56:4c:fa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=a7a89be2ddd5245362f7e2f47271068a68799e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7b:3d:21:5c:ce:9c:c2:6d:2c:56:31:12:d2:
4c:2a:00:27:54:b1:50:24:ce:fc:4d:df:19:f6:8f:
09:ec:5a:12:d9:e6:60:0e:04:c7:74:d1:74:5e:b0:
ac:b7:d2:d1:37:07:87:93:35:bc:6f:7e:97:a3:34:
98:94:3d:41:2b:22:88:52:8f:50:1a:0e:21:c6:00:
52:b0:4e:7b:5f:a0:83:8a:00:cd:20:f2:7e:89:c7:
10:0b:c3:bb:fb:f8:9a:bb:f0:84:ae:83:0f:04:94:
73:03:13:2a:0f:cf:fa:44:8d:76:49:3c:79:52:a3:
8d:a4:2f:2d:44:5c:c2:fd:c6:bd:a3:07:26:a5:83:
90:88:b9:83:9e:e2:d4:a0:8f:a9:14:ba:28:dc:0b:
6d:18:8d:16:0a:2f:8c:7e:56:18:8c:1c:9e:55:5d:
52:61:ad:5e:10:23:ec:81:98:00:e5:bb:6b:07:2c:
ed:34:c6:f9:24:d4:e0:b5:10:e4:36:1e:c3:88:48:
ba:2a:ee:d2:46:05:8d:66:00:a3:ae:48:f6:95:5c:
8e:ae:04:c9:c2:7b:1c:16:8b:1a:b1:24:d1:8a:2b:
0c:47:29:96:be:c0:d7:18:1b:0c:76:3d:27:4b:5f:
15:66:b7:a3:06:2a:88:12:25:f7:a6:c0:d3:f2:66:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:9B:E2:DD:D5:24:53:62:F7:E2:F4:72:71:06:8A:68:79:9E:18
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b5:26:fe:d6:11:c1:3f:0a:1c:20:f0:e9:50:53:14:b1:01:
26:72:9b:85:70:e0:48:45:ba:0c:5b:78:c2:6c:cb:82:d1:9c:
39:75:32:5d:93:3a:4c:0d:99:2f:82:15:93:03:97:80:19:bb:
16:9a:c8:03:3c:bf:ad:a1:51:e6:50:3f:13:38:73:6e:9e:95:
e0:db:24:6a:70:61:17:f2:d0:5d:2f:b4:76:ec:a0:87:d1:15:
ca:df:a7:25:d9:11:50:77:d5:db:1f:ba:e0:ad:9f:2b:17:0d:
2c:f5:00:4c:95:c9:fe:ed:cb:87:6d:fe:4e:74:af:37:3d:b9:
e6:ad:ff:dd:10:8c:f0:c2:ad:9b:3c:d4:73:79:84:8d:5f:3a:
fe:58:a1:ee:dc:7c:81:4e:a2:c7:77:bd:80:c2:ab:4b:b9:2a:
2f:26:d4:30:26:9f:af:fe:21:c8:a8:d5:97:5c:7b:10:47:89:
e6:c2:1e:58:6e:ca:8b:0b:ad:50:54:0e:7f:00:f1:00:51:c4:
2b:f4:e6:37:4e:d1:20:59:df:e9:bb:5a:1b:b6:10:46:a0:de:
60:e7:3f:74:00:e6:fe:75:bf:82:a3:eb:c3:17:e7:7e:50:b3:
c5:cd:1a:9b:53:e8:45:5f:26:06:5d:d4:46:62:7a:76:28:d1:
14:6e:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:35 2025 by rpki-client