Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: 3/4sj4ElNRzkSa6x1wF0WhlQyFFKTeng0Koh4Vqaidg=
Subject key identifier: D4:D9:AA:94:12:62:3C:C4:32:53:C3:30:7C:96:06:31:79:20:CB:88
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 0194BC0512E6E7610E420D052E3F9EBDCCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: 9185B4lpMHetu3JLHsbKNV5BJYZq7dJQh0ej4l5uPoQ=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:e6:e7:61:0e:42:0d:05:2e:3f:9e:bd:cc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=d4d9aa9412623cc43253c3307c9606317920cb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:73:e6:b3:03:78:ee:d3:16:2a:af:ea:c1:
0e:51:bf:c6:65:a4:18:ca:08:f4:23:bb:41:a8:87:
fe:1b:26:4a:6b:51:17:c7:03:71:9d:91:3b:d7:71:
e5:c7:c4:10:f9:ea:13:1f:4d:51:6b:95:ff:3f:d2:
d6:62:a9:a3:79:fd:f3:21:68:d3:66:48:66:6c:53:
df:e4:e6:2d:e4:28:8f:ad:25:b8:14:f4:d3:51:1e:
7a:6f:88:1b:3c:d5:04:90:a3:9f:c1:07:5f:f0:2d:
d4:d4:10:13:a4:dc:f9:4c:65:ef:43:fe:fa:54:7b:
3a:d2:f4:31:c5:35:f1:66:85:9a:a9:9b:14:68:b7:
6b:70:46:70:e7:ef:50:de:1b:49:06:40:04:b9:c5:
7b:18:fa:ef:35:9e:74:fd:2b:c5:b5:8c:89:1f:7a:
26:04:2e:17:a3:f8:d3:5b:57:1a:60:df:a1:d8:8e:
10:73:b1:de:25:d6:cb:66:61:d7:32:79:23:45:c3:
c2:cd:8d:e6:3c:ab:0c:9e:ea:cf:37:77:4a:84:aa:
b2:73:cc:4c:70:c0:71:e8:43:5b:4d:aa:ea:7e:fa:
28:57:3e:f8:c9:f1:07:d4:3b:70:41:1e:e8:67:3e:
84:7e:9a:af:4c:c1:60:a8:fb:ec:cb:fc:9e:b3:6a:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D9:AA:94:12:62:3C:C4:32:53:C3:30:7C:96:06:31:79:20:CB:88
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dc:99:4a:ba:16:ac:4c:3f:05:e0:0e:9f:af:54:c5:87:3c:
32:e0:7b:d0:b4:f3:fa:78:9e:75:31:97:2c:01:68:59:8c:e4:
6a:54:20:75:65:61:59:98:5d:0f:ac:75:e9:49:5b:f3:db:d0:
c9:28:49:22:4c:2a:e9:e2:d9:d9:6b:ee:d2:bf:13:51:a3:0f:
30:a2:b5:9e:68:b0:1e:7a:4f:9b:8f:fa:9e:39:f4:cb:b0:84:
54:de:84:39:e1:1f:0d:20:42:47:51:3c:cd:f6:a9:f8:46:d8:
f3:93:ce:08:61:a6:7d:f8:fb:f5:91:ae:07:0c:2d:50:9d:0c:
47:ca:64:8c:93:35:10:98:5e:f6:fb:dd:9f:5f:e1:07:88:cf:
44:81:79:1f:74:56:e8:43:86:a5:d1:d5:51:ca:64:01:fd:94:
d3:52:ef:4a:df:de:b0:e0:b4:98:fd:ae:d8:43:91:2e:58:71:
16:6a:93:9f:da:86:f4:a8:fc:1c:c7:59:ef:56:37:a7:64:9a:
51:59:01:7b:0d:ae:15:50:24:da:77:64:c4:85:8a:55:92:90:
f0:da:4d:b4:37:3e:00:96:ad:e5:85:01:98:0d:05:8b:4a:86:
2b:f9:42:00:f6:3e:53:ce:b0:8b:6a:38:ee:b7:f3:31:fd:c7:
88:0e:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:49 2025 by rpki-client