Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier: sxY0FK2Xysgk6fnoADnaD9ascFNu9KjLnAbzn+sXWLc=
Subject key identifier: CC:51:D4:B6:CD:25:6D:98:A5:17:96:54:9C:0B:CF:C7:82:7B:45:D1
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 0194BD4E3F3CB557FDF8BC04EDC9159589F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number: 0A94
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 17FLk26rZWNpnvEJucbEAG-7zqY.roa (hash: qMmpcRGKwOqOR5+GsVwNkgRbdBAdNorVpaMiale+nXI=)
2: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: 6JB8SaibHM/dLndzTFvt01Q5gAYpd4njobsV3vlGV5Q=)
3: MdwNzYBJU13swBaE5UOOOcRBz5k.roa (hash: +Fd+WQi5wLctEErQiuTXcED6kILUDNrn9fQ2BbzAxhc=)
4: bBGzNd5qGUUIPYH3-5zWMnwwyJg.roa (hash: 290Z2J6Jo9xanYpdqpciKr53wSmtU/PW4k3Qs+NnOTs=)
5: s7mUu7WrVHVPJEBCCdi0H3bHpis.roa (hash: ExGJpFM76OJZURK1GFJNiBKKffY4pIrBrUBBm9tcC8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3f:3c:b5:57:fd:f8:bc:04:ed:c9:15:95:89:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=cc51d4b6cd256d98a51796549c0bcfc7827b45d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:7e:0d:cd:a8:2b:c1:00:a4:53:ea:49:66:
e8:8f:3d:e1:8b:9a:25:73:d1:b7:5b:d2:fc:11:70:
23:71:95:74:14:17:da:e4:14:7d:9f:77:15:88:a7:
e3:e3:4a:58:68:b3:dc:b1:4c:b9:4d:bc:68:80:b1:
55:29:0c:d0:8b:b0:12:ad:c1:a5:44:11:c9:34:10:
d4:10:7a:c3:c9:d7:3a:15:e7:84:28:ed:f8:f3:9f:
b7:85:d6:07:90:12:d3:4f:bb:7b:82:c1:94:2e:06:
d9:09:19:c2:9b:d6:78:ad:c2:45:d2:fa:e7:49:28:
ee:82:31:b5:0c:b7:72:d9:6c:c3:dd:72:6e:08:a6:
c2:58:2a:92:31:50:73:e5:a6:ba:7b:62:f9:e6:61:
dc:3f:0f:51:e8:b8:75:1d:08:05:8c:8d:9a:1f:8e:
08:80:d4:51:06:84:a5:c1:c8:70:17:26:d0:1a:d5:
69:a0:3e:13:5e:eb:61:25:34:21:a2:90:8e:81:a7:
b5:88:bf:c3:0c:1b:95:a4:84:e9:12:a4:11:67:d1:
dd:74:6e:dc:e0:c1:c4:e1:63:33:45:81:48:f3:d0:
42:fc:0f:02:62:c4:1e:10:1d:ab:36:d2:00:17:61:
f0:79:6c:b6:8a:57:66:35:a4:20:3c:8d:1c:5f:29:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:D4:B6:CD:25:6D:98:A5:17:96:54:9C:0B:CF:C7:82:7B:45:D1
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:24:62:1a:87:a5:1a:2e:bd:00:f5:a1:3a:cf:0a:2f:c3:f6:
02:ad:b2:dd:5b:16:2e:4c:4d:c7:92:67:0e:48:aa:43:d9:a8:
d5:e4:89:50:1d:1c:aa:2e:73:67:01:94:14:a8:0f:c9:4f:3d:
4b:06:0c:98:84:61:96:95:2d:be:85:af:08:5b:2b:4b:16:bb:
38:d3:eb:1e:b6:82:0a:b2:e5:cf:42:ee:b2:09:77:98:6d:5b:
65:5b:a7:42:c4:d7:d9:04:02:a4:de:33:44:cf:9b:0c:ba:f7:
8a:d0:0c:16:76:1a:b5:96:84:bf:9a:b4:ec:11:0a:5f:3d:54:
23:5f:f9:77:05:d8:4b:a8:55:ed:d9:67:11:ee:6c:cd:c2:07:
78:a5:df:40:cf:ff:5a:30:66:de:23:cb:50:5b:75:b4:b4:69:
d7:60:4f:18:3a:51:95:8f:e9:d6:6a:ec:fe:43:12:27:ec:b2:
cf:a4:1d:39:6d:8e:79:08:0a:ba:a9:20:eb:73:23:4a:b4:33:
d9:44:8f:e0:13:3c:0a:66:f0:8d:32:6f:21:07:48:f0:be:a8:
2c:4a:0b:fd:6e:fb:ed:4c:99:13:69:4c:6e:c0:bb:af:92:7d:
55:4b:d7:d7:74:4f:a8:ec:dc:e7:1c:33:98:5f:af:8b:99:55:
b2:cb:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:12 2025 by rpki-client