Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ba3adf-f655-455c-9e83-cc0fe473c37d/1/2DxcMaLZv8TgECFKZS29ZX2TskM.mft
File: 2DxcMaLZv8TgECFKZS29ZX2TskM.mft (raw, json)
Hash identifier: YboYpobFRPIhymTU3HgQWzQAYmFyABSTwagyAyVrslg=
Subject key identifier: C1:7B:FB:9F:2B:2F:EB:42:EF:4F:D7:DA:C1:00:8A:5A:28:03:1B:A1
Authority key identifier: D8:3C:5C:31:A2:D9:BF:C4:E0:10:21:4A:65:2D:BD:65:7D:93:B2:43
Certificate issuer: /CN=d83c5c31a2d9bfc4e010214a652dbd657d93b243
Certificate serial: 0191DA19D8E9013798D7819CCFFA53F516E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DxcMaLZv8TgECFKZS29ZX2TskM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ba3adf-f655-455c-9e83-cc0fe473c37d/1/2DxcMaLZv8TgECFKZS29ZX2TskM.mft
Manifest number: 0D32
Signing time: Tue 10 Sep 2024 04:03:32 +0000
Manifest this update: Tue 10 Sep 2024 04:03:32 +0000
Manifest next update: Wed 11 Sep 2024 04:03:32 +0000
Files and hashes: 1: 2DxcMaLZv8TgECFKZS29ZX2TskM.crl (hash: ptobQHvBIbPmFB+lw1rSPk1THDymoP8N51pBIwVT5S0=)
2: OFhqx2U1-As8lobqUdxruEA4-vM.roa (hash: Ma6kISwO4fBnEI/4poWlpAoYaQnnAyvVvACXMohca+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:19:d8:e9:01:37:98:d7:81:9c:cf:fa:53:f5:16:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83c5c31a2d9bfc4e010214a652dbd657d93b243
Validity
Not Before: Sep 10 04:03:32 2024 GMT
Not After : Sep 11 04:03:32 2024 GMT
Subject: CN=c17bfb9f2b2feb42ef4fd7dac1008a5a28031ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:f3:74:63:74:d9:6c:a1:9e:62:b6:7f:a0:
d6:ba:45:45:c8:e5:8b:08:f4:37:0f:38:78:b3:f3:
61:b7:a9:23:f8:2f:bf:ac:10:83:5a:b8:7d:10:5d:
35:11:4d:a4:40:64:0f:0b:fd:e2:a0:b0:dd:84:10:
41:a1:ef:b6:4a:5e:a2:c6:49:f7:7f:84:ab:5a:74:
da:d9:59:f2:5e:66:e9:3b:f6:44:20:10:77:4a:3d:
65:62:37:ba:a3:30:82:7b:2c:91:17:ca:a3:4a:42:
d8:8e:54:60:41:51:69:e0:25:dc:80:fd:9b:f3:71:
29:95:2e:70:0e:a3:db:ed:5e:f0:2e:d1:f0:cd:ed:
83:97:7e:63:75:61:b8:7c:f1:b3:bc:d3:27:e8:ce:
28:61:9c:9f:e8:f7:cc:db:46:d4:ad:25:a7:1c:e6:
20:bc:50:eb:53:85:d8:4f:5e:af:16:f8:66:e8:a0:
0d:b3:f0:54:9a:8c:25:91:d7:46:c9:82:4d:9d:05:
29:91:d5:91:86:69:9b:9d:ed:e5:78:ff:11:ef:c1:
04:49:ca:ad:31:16:6e:f5:15:e1:1d:ff:38:6c:57:
a4:a5:af:e5:49:da:88:c2:ae:76:2d:77:ae:31:1d:
ba:a8:0f:35:e7:6f:87:1d:62:df:4a:b7:79:05:77:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:FB:9F:2B:2F:EB:42:EF:4F:D7:DA:C1:00:8A:5A:28:03:1B:A1
X509v3 Authority Key Identifier:
keyid:D8:3C:5C:31:A2:D9:BF:C4:E0:10:21:4A:65:2D:BD:65:7D:93:B2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DxcMaLZv8TgECFKZS29ZX2TskM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ba3adf-f655-455c-9e83-cc0fe473c37d/1/2DxcMaLZv8TgECFKZS29ZX2TskM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ba3adf-f655-455c-9e83-cc0fe473c37d/1/2DxcMaLZv8TgECFKZS29ZX2TskM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ec:c0:f7:c6:59:28:77:80:08:5e:11:68:84:29:ac:36:9f:
f1:4c:8d:b3:94:be:94:25:cd:4b:53:f3:8a:a1:01:22:59:48:
b2:93:ef:1c:e5:d1:04:a6:72:a3:e8:c0:df:6c:46:13:f8:d3:
01:7e:7d:65:ef:59:fc:00:04:1a:24:2e:57:84:6a:47:f1:08:
dd:b1:14:57:41:37:5b:9f:f5:79:f2:ac:93:19:1e:4c:c9:9f:
32:8f:d9:27:2b:f2:49:53:ac:dc:cb:d1:57:df:c8:20:05:68:
8d:36:83:7a:83:37:d3:af:d4:69:f7:9b:1e:3d:ea:26:32:3c:
66:ca:90:93:29:4f:8e:b2:4e:d8:f5:11:8b:e6:a2:4a:b6:6b:
d7:bf:96:da:32:6f:35:10:f8:ca:c7:f6:6a:55:33:de:33:01:
2a:c0:8f:f2:3c:fa:fd:d5:cc:37:0f:71:32:47:54:57:34:a7:
9e:24:e5:e5:27:fe:82:da:f8:5e:37:06:08:92:00:4b:6f:4a:
ff:28:4a:98:96:d3:fb:ce:c5:50:99:54:3f:17:f8:3a:7f:28:
2c:1f:22:a4:19:7a:9f:25:ee:fa:ab:d7:c5:22:cd:0c:e5:87:
f9:66:f5:b9:30:e0:67:04:69:e7:34:71:45:3f:9a:b2:af:e1:
d4:12:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:25 2025 by rpki-client