Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: CjFvQqDjwWr9KBuUt8ZhTJAc+0H3Ju+bUgWh7FFMfrM=
Subject key identifier: 76:26:FE:76:92:20:95:A3:25:25:CC:2B:6B:B7:0E:69:A4:18:68:A0
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 0195E00F99E3D112A67FE14E158C41D2B451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 02CC
Signing time: Sat 29 Mar 2025 04:01:13 +0000
Manifest this update: Sat 29 Mar 2025 04:01:13 +0000
Manifest next update: Sun 30 Mar 2025 04:01:13 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: 3zmwMFVmEPTYbilDZpfitftYsasWnVN8WPt3BG6j9VA=)
2: JNEydf2lKXnao8GrKqno19jXP6w.roa (hash: +0xX0M+yF7B+qU3xPS7RZz2tcDVRNPquvsVNbfH8B2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:99:e3:d1:12:a6:7f:e1:4e:15:8c:41:d2:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Mar 29 04:01:13 2025 GMT
Not After : Mar 30 04:01:13 2025 GMT
Subject: CN=7626fe76922095a32525cc2b6bb70e69a41868a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:04:74:26:7a:b7:11:cd:ea:3d:2d:4c:ec:
98:68:b3:a5:69:b8:09:73:88:67:fe:bb:4d:07:fa:
0f:b6:27:1d:75:a0:96:7a:81:c4:af:03:9f:e8:fe:
17:84:06:ed:c3:a1:66:4c:80:5d:59:79:ae:fb:83:
fc:b7:21:91:3c:ad:08:95:86:6a:f1:34:2f:4c:c6:
3c:c8:0f:c9:43:8d:b9:03:5e:9a:8f:4e:0f:30:03:
7f:42:ba:d6:2a:d3:f9:f8:2c:2f:f4:41:c2:19:1b:
bb:42:d1:46:2e:b6:74:ab:d9:ff:39:38:5e:34:53:
2f:3d:5c:e3:c3:9b:72:79:ff:17:db:12:0d:db:ad:
2f:0c:42:31:fe:46:16:dc:07:2e:f5:62:5a:dc:c0:
1f:71:15:6a:8b:5a:f3:9a:5c:c8:f3:9b:8c:41:89:
c9:3b:a5:01:0b:d4:a0:56:62:6c:e9:03:32:ef:f9:
76:58:34:eb:83:e4:c5:0f:b2:34:1b:6d:84:2a:35:
63:bb:b4:c9:8c:bd:a2:f8:76:45:11:db:06:99:66:
f5:29:73:87:87:19:9a:ed:3f:9f:43:8b:3e:fa:4c:
96:ed:69:46:c9:8a:8a:d8:42:36:ea:3d:a9:76:c7:
d2:7b:92:b6:fb:fa:e5:9a:e8:79:07:49:67:e4:b8:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:FE:76:92:20:95:A3:25:25:CC:2B:6B:B7:0E:69:A4:18:68:A0
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bd:18:bf:22:4f:8a:08:99:8c:40:eb:c8:c8:d4:70:02:43:
e7:f3:dc:97:ef:68:2c:a0:d6:80:7d:d2:3b:ec:e4:9b:c0:8f:
c0:9d:14:57:61:51:fc:41:d2:37:a6:52:64:a9:4e:f8:dc:10:
9e:4e:2e:fe:43:dc:b8:e6:ed:d3:e8:4c:a4:ab:63:da:02:c9:
0e:4f:b9:c2:58:84:52:6b:d8:c6:f1:2c:6c:e0:24:01:1a:8f:
78:7d:90:ea:fb:10:e9:c4:71:ef:00:70:ba:cd:dd:31:89:96:
aa:79:17:22:f3:9e:1a:4f:f7:1e:0c:5b:d3:19:3f:b1:7d:cc:
79:3e:a7:20:da:90:73:5c:03:4b:8b:7d:24:28:b1:2d:83:80:
20:71:bb:0b:db:bc:fa:08:eb:d5:5f:95:a2:b8:3e:8b:fd:89:
bf:4a:2c:18:58:5f:25:61:a0:1e:fc:e8:0c:4b:fd:65:4f:0e:
85:57:51:90:e8:58:9d:6f:00:7b:89:95:9b:e3:31:4d:4e:85:
61:26:77:b8:d5:0a:48:9d:d2:3e:27:a7:9a:34:21:b7:23:01:
bd:e5:16:97:db:af:70:36:7f:d7:bd:f4:22:2e:47:d9:40:8b:
88:9f:6c:2a:b0:3a:e1:e5:0c:49:dc:94:56:62:fd:bb:f0:88:
6a:34:67:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD5nj0RKmf+FOFYxB0rRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDQ4Mjc2MzA3MDk1NWU3ZWE4N2UyY2EzN2I4OTFiODY0
YjI1NzcwHhcNMjUwMzI5MDQwMTEzWhcNMjUwMzMwMDQwMTEzWjAzMTEwLwYDVQQD
Eyg3NjI2ZmU3NjkyMjA5NWEzMjUyNWNjMmI2YmI3MGU2OWE0MTg2OGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk0EdCZ6txHN6j0tTOyYaLOlabgJ
c4hn/rtNB/oPticddaCWeoHErwOf6P4XhAbtw6FmTIBdWXmu+4P8tyGRPK0IlYZq
8TQvTMY8yA/JQ425A16aj04PMAN/QrrWKtP5+Cwv9EHCGRu7QtFGLrZ0q9n/OThe
NFMvPVzjw5tyef8X2xIN260vDEIx/kYW3Acu9WJa3MAfcRVqi1rzmlzI85uMQYnJ
O6UBC9SgVmJs6QMy7/l2WDTrg+TFD7I0G22EKjVju7TJjL2i+HZFEdsGmWb1KXOH
hxma7T+fQ4s++kyW7WlGyYqK2EI26j2pdsfSe5K2+/rlmuh5B0ln5LiiRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYm/naSIJWjJSXMK2u3DmmkGGigMB8GA1UdIwQY
MBaAFNkEgnYwcJVefqh+LKN7iRuGSyV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgt
YTliMjc2Njc3M2FhLzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgtYTliMjc2Njc3M2Fh
LzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv70YvyJP
igiZjEDryMjUcAJD5/Pcl+9oLKDWgH3SO+zkm8CPwJ0UV2FR/EHSN6ZSZKlO+NwQ
nk4u/kPcuObt0+hMpKtj2gLJDk+5wliEUmvYxvEsbOAkARqPeH2Q6vsQ6cRx7wBw
us3dMYmWqnkXIvOeGk/3Hgxb0xk/sX3MeT6nINqQc1wDS4t9JCixLYOAIHG7C9u8
+gjr1V+Vorg+i/2Jv0osGFhfJWGgHvzoDEv9ZU8OhVdRkOhYnW8Ae4mVm+MxTU6F
YSZ3uNUKSJ3SPienmjQhtyMBveUWl9uvcDZ/1730Ii5H2UCLiJ9sKrA64eUMSdyU
VmL9u/CIajRnng==
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:26:03 2025 by rpki-client