Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
File: 2gttm-19ptQiB7kAZNPhPv0yVKw.mft (raw, json)
Hash identifier: mxe7b+6TCmFsIpaGIPIZatNw0Sm8LrGdZJnnpmG+FEE=
Subject key identifier: 47:D6:35:90:FB:37:33:1A:D3:D0:93:D1:70:B0:2C:DD:FA:0A:0C:82
Authority key identifier: DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
Certificate issuer: /CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Certificate serial: 01943F90ECDFEA83A7172A57C10DA86DA0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
Manifest number: 13EC
Signing time: Tue 07 Jan 2025 07:00:49 +0000
Manifest this update: Tue 07 Jan 2025 07:00:49 +0000
Manifest next update: Wed 08 Jan 2025 07:00:49 +0000
Files and hashes: 1: 2gttm-19ptQiB7kAZNPhPv0yVKw.crl (hash: 2Ct7otFySr7vcsYupF2IdbEOePjZSmO4dDj5dl9H394=)
2: yyfbJ1grn7X44SoHKSDDDnmrgfQ.roa (hash: bbz5auSFcuP8oHMH057CjMQ3Lp+FFT/WtZ4nmpGiIwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:90:ec:df:ea:83:a7:17:2a:57:c1:0d:a8:6d:a0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Validity
Not Before: Jan 7 07:00:49 2025 GMT
Not After : Jan 8 07:00:49 2025 GMT
Subject: CN=47d63590fb37331ad3d093d170b02cddfa0a0c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:5a:3f:fa:25:d7:f2:8e:c2:12:26:84:b7:
9a:f4:51:74:23:23:e1:ad:15:82:53:60:7c:9c:b5:
d1:84:9f:8a:f5:95:91:1b:0a:18:77:c1:6d:95:10:
e2:4a:eb:71:76:ed:5e:db:4b:a0:d5:4b:40:15:93:
9a:ee:7a:2c:bc:87:79:95:ca:2e:92:ef:2c:0d:e2:
e4:bf:44:5f:00:1c:3e:5b:61:43:0b:86:07:ec:9c:
62:57:71:b7:20:f6:c4:11:b2:8c:30:f6:be:be:41:
2e:1b:ce:89:27:2e:09:b1:de:e9:33:06:16:ab:8d:
f6:bb:e9:f5:1e:81:84:ce:33:81:49:e9:cc:9c:1f:
64:60:bb:31:35:c1:37:2a:85:ba:6e:c0:83:f9:43:
6c:5b:fc:d7:e8:38:61:10:18:a9:cb:c1:75:e6:e2:
13:fd:34:01:fe:d7:d2:b3:0d:84:17:38:82:24:38:
ce:8f:0c:f2:b5:bb:66:8d:5a:8a:86:ff:17:25:fe:
0a:a2:ea:ae:f2:66:26:1f:67:54:a8:0c:c5:0b:d1:
60:5a:a8:fa:08:18:c4:06:d3:58:b3:d2:11:b8:49:
0e:aa:8f:27:40:6b:51:cf:a0:5c:56:41:f0:18:b5:
d5:cd:a3:b9:7b:93:35:6e:c0:ce:7c:dd:0f:bc:9c:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:35:90:FB:37:33:1A:D3:D0:93:D1:70:B0:2C:DD:FA:0A:0C:82
X509v3 Authority Key Identifier:
keyid:DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1b:cc:b8:0c:18:de:e4:09:4c:71:ec:40:e5:44:b9:58:87:
bb:02:6c:f1:d1:1c:25:c1:25:4d:01:67:bf:71:e2:48:ed:ae:
3e:c3:64:33:37:60:9a:20:a3:d8:69:d2:71:3b:3b:b8:cc:59:
97:4a:54:35:5b:26:40:7f:96:fb:92:fa:a6:aa:f3:d2:04:3d:
d1:b5:8c:d6:ce:3c:68:40:f0:b2:35:a4:ae:07:a9:ac:59:89:
7d:08:96:2c:76:51:10:4f:fb:bc:cb:55:44:08:14:46:04:c0:
c8:ea:45:cc:73:fc:5f:da:01:a9:95:a8:f9:91:a8:4b:75:91:
ac:a3:a5:1f:5a:ca:81:8d:8f:b0:79:11:ce:f3:20:32:c7:33:
2a:83:2e:ae:e0:3e:1d:ed:a5:0f:e9:07:f5:ef:34:2c:0d:85:
8c:f2:04:c8:1c:7f:7f:72:b4:8b:cd:a5:ec:60:2d:0f:c4:a9:
6d:1a:3e:28:81:d8:6d:cc:59:84:4c:69:1f:20:f9:b3:16:b1:
d8:73:40:bf:12:14:8e:86:0a:c9:e9:fd:be:49:56:8b:98:0b:
6f:a8:7e:c7:fb:c3:f3:c7:29:e7:37:44:5f:28:f2:66:9b:7e:
2d:80:b1:db:65:3e:ad:9c:72:41:76:93:e6:2e:a6:56:91:c2:
ad:53:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:05 2025 by rpki-client