Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d95b69-0d65-400b-9c66-51e8775b11ed/1/2cSA5h1vdeQ0DRUY7iM6eSWdnqI.mft
File: 2cSA5h1vdeQ0DRUY7iM6eSWdnqI.mft (raw, json)
Hash identifier: GkFt+HaltyDhSEjfAusBO25QE0LpqG2LSv9o5VYFyjc=
Subject key identifier: 4F:07:2D:32:34:40:FF:C2:7A:6B:1C:F2:86:98:1F:F0:13:88:65:B8
Authority key identifier: D9:C4:80:E6:1D:6F:75:E4:34:0D:15:18:EE:23:3A:79:25:9D:9E:A2
Certificate issuer: /CN=d9c480e61d6f75e4340d1518ee233a79259d9ea2
Certificate serial: 0191A103CB49ABD4C8D0D4BB73AE48F5B532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cSA5h1vdeQ0DRUY7iM6eSWdnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d95b69-0d65-400b-9c66-51e8775b11ed/1/2cSA5h1vdeQ0DRUY7iM6eSWdnqI.mft
Manifest number: 10C8
Signing time: Fri 30 Aug 2024 02:01:05 +0000
Manifest this update: Fri 30 Aug 2024 02:01:05 +0000
Manifest next update: Sat 31 Aug 2024 02:01:05 +0000
Files and hashes: 1: 2cSA5h1vdeQ0DRUY7iM6eSWdnqI.crl (hash: g5FAdw7mVvyvR4oM43Je6n6oy/Tx97i7sjdtpC534wY=)
2: FdnYFNrdOx4SpzLtXYcl2JvFIMY.roa (hash: eeDHBgpJ06sF5StB9BQpFe6S2x6C3/0GM1Prmez2l3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a1:03:cb:49:ab:d4:c8:d0:d4:bb:73:ae:48:f5:b5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c480e61d6f75e4340d1518ee233a79259d9ea2
Validity
Not Before: Aug 30 02:01:05 2024 GMT
Not After : Aug 31 02:01:05 2024 GMT
Subject: CN=4f072d323440ffc27a6b1cf286981ff0138865b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:fa:84:63:0d:bd:56:b9:a3:50:2f:bf:76:
f5:be:6b:75:a0:f4:60:53:5e:96:5e:a6:44:12:ae:
59:03:0b:dd:e0:4f:c5:a3:ac:f1:b7:1c:26:be:c0:
54:b7:82:60:5c:7c:50:30:c8:aa:7e:ce:6f:bf:db:
8b:5e:37:ca:90:54:85:cc:7f:6b:7e:14:cd:47:1c:
93:32:f7:c3:22:f0:62:75:f4:5b:42:d2:4f:8d:32:
c3:86:9c:04:e0:b6:2c:6a:98:34:59:98:c0:ee:14:
ef:bb:2f:49:d9:1c:0d:66:15:93:f0:09:30:af:52:
eb:cc:7b:90:a8:ee:40:ae:fa:cb:5c:f0:3c:1f:0f:
b0:18:fe:56:96:64:b3:e7:29:5c:3f:97:5d:18:1b:
c5:f5:ae:ca:52:ce:73:7b:d4:e3:16:4b:d0:2e:25:
9d:95:99:61:29:e8:80:dd:98:66:bb:33:b9:9f:41:
08:4f:50:a2:56:42:8f:80:c3:50:10:bf:f2:2f:c3:
79:0d:21:f1:65:cc:a8:36:ed:56:eb:f2:12:6b:08:
67:f5:04:11:1b:55:9a:90:74:7f:5b:69:fe:e0:ef:
1b:03:2b:3f:32:74:ce:c6:2b:54:83:5c:a5:f2:23:
c4:32:cd:71:29:ab:fc:ff:2d:6a:1d:b4:6f:a0:5a:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:07:2D:32:34:40:FF:C2:7A:6B:1C:F2:86:98:1F:F0:13:88:65:B8
X509v3 Authority Key Identifier:
keyid:D9:C4:80:E6:1D:6F:75:E4:34:0D:15:18:EE:23:3A:79:25:9D:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cSA5h1vdeQ0DRUY7iM6eSWdnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d95b69-0d65-400b-9c66-51e8775b11ed/1/2cSA5h1vdeQ0DRUY7iM6eSWdnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d95b69-0d65-400b-9c66-51e8775b11ed/1/2cSA5h1vdeQ0DRUY7iM6eSWdnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9e:29:f2:23:26:aa:58:d4:05:20:30:d4:c9:8e:15:8c:09:
24:47:a6:23:d2:aa:81:48:b7:e8:cd:ac:ff:7c:76:cc:4e:36:
1d:72:40:5f:b1:c1:ca:7f:72:5b:8f:44:1d:c1:ab:5d:2d:27:
c9:74:b0:49:db:bd:8b:30:87:b6:65:7e:29:2d:07:5c:fc:2e:
1f:34:1a:de:74:c8:bb:3c:65:11:21:29:52:51:78:c3:d9:94:
37:2d:c8:9b:eb:66:5a:00:af:63:91:50:46:54:d0:73:36:74:
66:4d:c8:db:9c:e6:69:c7:68:8f:47:2d:85:4b:bf:80:a2:7e:
7d:8b:4d:1d:31:62:c2:47:e6:ba:8a:7f:05:8f:f9:1a:82:97:
a7:93:2d:0e:b9:4e:eb:e1:31:04:3c:8b:db:15:de:62:e9:a1:
74:55:70:62:e4:2d:4e:31:a5:8a:7f:05:2b:b9:0b:3a:31:fa:
d5:81:ea:62:7e:8b:85:8d:3e:8d:21:09:01:54:eb:72:e5:74:
55:8b:86:15:be:70:11:3d:51:9b:3e:9d:ef:bb:9e:ae:a6:05:
b9:5c:2a:1f:75:9f:b0:ee:a5:e4:46:78:07:51:c4:77:94:c4:
91:c9:bd:f7:ca:59:9d:ba:54:c2:43:40:18:da:f7:e4:ea:e1:
3d:9f:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:38 2025 by rpki-client