Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: aKk0S13yrnmriJZ+EgwpXcpv4Bk0c7PJHMNlUL5LwAk=
Subject key identifier: 36:4D:FD:B2:9C:FC:F8:5D:0A:A3:DF:B8:6F:74:E3:CE:F2:B3:FF:E9
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 0195DFD8A7998D06CF75D4DF9AFAF2C40FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 055C
Signing time: Sat 29 Mar 2025 03:01:12 +0000
Manifest this update: Sat 29 Mar 2025 03:01:12 +0000
Manifest next update: Sun 30 Mar 2025 03:01:12 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: u1yKCT75c6Tr6JAQU7+YQHhVAlgMQsQUS8pgvQUlEac=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a7:99:8d:06:cf:75:d4:df:9a:fa:f2:c4:0f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Mar 29 03:01:12 2025 GMT
Not After : Mar 30 03:01:12 2025 GMT
Subject: CN=364dfdb29cfcf85d0aa3dfb86f74e3cef2b3ffe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:ed:46:24:ac:1b:4f:64:49:52:07:2a:88:
d5:12:2f:c0:90:77:c2:19:ee:9b:a8:40:b0:12:18:
67:c5:25:5a:42:5d:0a:60:7a:13:69:57:41:28:d4:
dc:c5:4c:f9:5d:d9:62:c5:c8:9e:67:e2:22:6f:6f:
d4:93:a1:5f:05:43:1d:51:ea:6d:41:ae:4b:66:6a:
41:ff:e5:be:cb:5c:9d:92:75:9f:c4:fc:76:0e:f6:
60:6e:82:d8:03:c9:90:65:38:2d:0b:9b:31:e7:9d:
0b:6d:9a:a4:e6:39:21:00:d9:eb:9a:4c:ca:ce:a6:
d9:bc:6e:ec:4a:a0:55:38:ea:1a:e6:08:b7:7f:57:
09:01:ea:9c:94:3c:2e:0d:36:e4:25:c6:3c:37:96:
e5:f1:b5:4e:8a:92:74:e4:cb:2f:d8:7a:99:f8:7d:
e0:37:6f:06:70:dd:0b:95:ec:93:f1:c8:a6:66:48:
75:c2:4b:c9:51:ca:c6:01:41:93:ea:87:92:5c:13:
49:7e:bd:8a:f0:29:54:bc:a0:ab:a2:bf:37:ec:ec:
39:bb:99:db:ac:60:3d:71:bc:6a:e9:7d:96:1d:59:
dc:ab:14:35:68:70:32:dc:b7:ff:9d:61:17:fc:a9:
75:fa:33:50:34:e4:aa:6f:8b:9b:85:a2:4d:42:98:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4D:FD:B2:9C:FC:F8:5D:0A:A3:DF:B8:6F:74:E3:CE:F2:B3:FF:E9
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:7f:e2:f9:d3:7a:60:0b:87:22:d1:3e:e6:5d:a6:0c:04:0b:
99:74:6f:41:8d:71:68:db:ef:48:48:86:d1:78:36:61:36:05:
d6:21:f1:98:91:bf:15:a8:6b:10:c7:b4:e5:5c:00:51:8a:6c:
f0:03:4e:7d:ef:59:e2:c6:bb:72:f4:a7:74:87:cb:b7:45:79:
03:fc:45:0f:10:6b:c7:3e:21:38:13:3d:27:57:47:1a:c5:84:
8a:59:84:5c:83:d6:c1:a7:86:17:56:18:8d:f1:33:cb:ee:0c:
b7:07:e1:25:2b:ef:ad:d7:83:f2:9b:b3:32:de:7a:b4:ec:67:
8c:12:bf:28:20:8e:a7:70:f3:71:90:35:b1:4f:87:65:6e:8d:
ef:bc:57:0b:b6:c4:21:22:2c:6b:68:21:db:b0:a9:88:5f:45:
08:79:c5:90:58:18:d4:a0:28:1d:92:36:67:23:cd:e5:fd:c8:
19:4e:4d:93:80:c0:c0:a8:7c:81:bb:d3:a4:29:d6:79:cd:56:
f3:f7:6c:65:84:0c:58:32:f8:e4:34:04:12:00:38:ca:81:df:
eb:7f:d0:16:fa:cd:47:5e:fd:b5:eb:5e:03:a0:e9:ef:79:1d:
31:84:be:e6:2b:e1:73:68:0f:84:2a:bb:1d:7e:88:87:9f:98:
b3:b5:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:38 2025 by rpki-client