Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: HhJR9oxl1S/sW3osTh7LRNPbz2o27vYr8hxrKRbGL+g=
Subject key identifier: 94:88:18:38:66:92:F3:5B:A0:1D:CB:33:33:24:58:AE:5F:DA:00:AE
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 0194BD175C3240BAAAD804C6563B3F2A7EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 10D8
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: ZV09N5G/eg3jp8aWoOSYQh9fLLU+Juvo6fqwAE28gqY=)
2: kIzUAPC0DdQ_FT2bfHdyL_f4yoU.roa (hash: rSGry/QGGACqFb/sa5t28CBZOiur+so7pmuHdYgh5Pk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5c:32:40:ba:aa:d8:04:c6:56:3b:3f:2a:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=948818386692f35ba01dcb33332458ae5fda00ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:85:1b:de:b2:fe:40:db:04:f9:5a:e1:a5:
38:2b:e0:35:94:82:7a:ef:e9:7c:54:50:61:7d:e6:
68:5f:9b:cc:19:97:49:36:22:c4:27:83:f7:36:d9:
57:22:d4:32:63:af:38:8b:2d:ff:35:71:a2:9a:6d:
84:ad:e2:0c:4f:7b:fe:74:13:86:88:85:cf:e5:f2:
23:fe:5b:4c:7d:e2:76:b7:12:f6:6d:be:5d:45:52:
5b:6a:7e:09:8a:55:bb:c7:d2:fc:50:86:25:3c:c8:
05:3d:35:c1:ba:e4:27:e9:d6:d1:e6:67:79:6e:1f:
9a:36:5d:05:ba:65:f6:d6:ce:7e:85:ca:ac:e8:09:
8b:a2:6c:a0:53:db:37:8e:4f:32:c9:80:90:fe:b7:
e0:cd:92:ef:8f:c8:b6:22:ae:81:69:94:9f:50:11:
1a:61:77:5b:79:52:9a:c3:e4:37:91:e7:e9:79:bd:
f2:cc:45:8b:e7:5b:cd:ff:b9:19:f4:7e:b2:e6:d0:
54:a8:57:03:89:52:10:c2:98:91:a1:e5:c1:db:e7:
50:3d:33:cb:89:39:d0:50:c3:d0:b1:73:15:08:13:
93:78:cb:5f:77:86:29:6b:15:0f:fa:7c:52:ac:57:
4d:d2:f0:80:28:50:b4:17:73:32:0d:34:8a:49:3d:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:88:18:38:66:92:F3:5B:A0:1D:CB:33:33:24:58:AE:5F:DA:00:AE
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e1:8b:39:4f:3a:d8:48:bf:6c:a2:37:c8:34:4e:69:b9:01:
18:b0:b0:8a:3b:b3:fb:d7:e1:1d:dd:7f:2a:f2:15:7f:4a:40:
29:ae:c2:7e:36:38:f2:d5:93:49:d2:97:f6:58:90:81:f6:5a:
7c:e9:ff:e6:51:ac:69:d3:a4:c3:da:71:fa:9f:9b:d1:a3:d0:
28:cc:16:08:3e:73:5a:ea:ae:8f:61:11:26:6a:be:24:26:e2:
5d:20:73:83:3a:31:cf:5d:0e:6c:49:1b:72:0e:db:32:04:9c:
ff:9d:1e:b4:e0:ea:82:60:c6:00:15:86:18:44:a4:96:db:07:
b7:bd:9d:ad:fa:65:3b:49:ff:36:51:6f:02:a0:09:75:09:2a:
ca:e3:3e:33:7e:45:b0:9c:8b:80:4e:37:5f:21:76:48:eb:54:
58:88:25:17:55:e5:b1:4d:10:c1:6f:e8:18:21:4c:7d:01:79:
97:b5:93:ea:12:6a:f2:93:75:7d:e5:33:66:af:da:e6:71:ce:
c9:ff:a6:06:e4:e6:7f:aa:58:fa:de:07:0b:c6:60:83:d3:07:
15:39:b4:7d:a3:31:16:84:7e:ac:d0:c1:98:e9:2c:83:ba:bd:
ea:9d:50:32:d2:bd:27:14:5f:26:c4:74:5e:77:bb:26:bd:70:
19:69:2d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1wyQLqq2ATGVjs/Kn67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh
YWM0MDQwHhcNMjUwMTMxMTYwMDEyWhcNMjUwMjAxMTYwMDEyWjAzMTEwLwYDVQQD
Eyg5NDg4MTgzODY2OTJmMzViYTAxZGNiMzMzMzI0NThhZTVmZGEwMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6aFG96y/kDbBPla4aU4K+A1lIJ6
7+l8VFBhfeZoX5vMGZdJNiLEJ4P3NtlXItQyY684iy3/NXGimm2EreIMT3v+dBOG
iIXP5fIj/ltMfeJ2txL2bb5dRVJban4JilW7x9L8UIYlPMgFPTXBuuQn6dbR5md5
bh+aNl0FumX21s5+hcqs6AmLomygU9s3jk8yyYCQ/rfgzZLvj8i2Iq6BaZSfUBEa
YXdbeVKaw+Q3kefpeb3yzEWL51vN/7kZ9H6y5tBUqFcDiVIQwpiRoeXB2+dQPTPL
iTnQUMPQsXMVCBOTeMtfd4YpaxUP+nxSrFdN0vCAKFC0F3MyDTSKST1iWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSIGDhmkvNboB3LMzMkWK5f2gCuMB8GA1UdIwQY
MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt
NTE3YTY2MWFlNmJkLzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk
LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuGLOU86
2Ei/bKI3yDROabkBGLCwijuz+9fhHd1/KvIVf0pAKa7CfjY48tWTSdKX9liQgfZa
fOn/5lGsadOkw9px+p+b0aPQKMwWCD5zWuquj2ERJmq+JCbiXSBzgzoxz10ObEkb
cg7bMgSc/50etODqgmDGABWGGESkltsHt72drfplO0n/NlFvAqAJdQkqyuM+M35F
sJyLgE43XyF2SOtUWIglF1XlsU0QwW/oGCFMfQF5l7WT6hJq8pN1feUzZq/a5nHO
yf+mBuTmf6pY+t4HC8Zgg9MHFTm0faMxFoR+rNDBmOksg7q96p1QMtK9JxRfJsR0
Xne7Jr1wGWktMw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:21 2025 by rpki-client