Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.mft
File: 2eJ2DXCg1regRxMO29mW0EHp0wA.mft (raw, json)
Hash identifier: vreO+v0jOQPElo+dofpUgGk4tNY3LZ2w3V0FsBjps44=
Subject key identifier: 99:50:E3:B0:15:D0:B4:6C:A6:A0:71:E3:38:42:3D:AF:6F:49:01:11
Authority key identifier: D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
Certificate issuer: /CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Certificate serial: 018D76FEA62FF62E220F4A04C0A1F90A5894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.mft
Manifest number: 0859
Signing time: Mon 05 Feb 2024 02:00:16 +0000
Manifest this update: Mon 05 Feb 2024 02:00:16 +0000
Manifest next update: Tue 06 Feb 2024 02:00:16 +0000
Files and hashes: 1: 2eJ2DXCg1regRxMO29mW0EHp0wA.crl (hash: X+w2U8lM295m4eOiudjIdS8sv+VqMU4QdVXbA5XNoyo=)
2: BfiaPd6e2ZF_ou8-Y9FB8dT2GWs.roa (hash: gN+gtOZ1sO9qEVx2V/WYK+gPOJEbOfVcgv2ODnlqnOI=)
3: ldplkmZqPVZkNeL1HZlkLwwWkII.roa (hash: l7dExVL31RrReJRMwFdULHTuoIHeraJZ/fSckBTI4UU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:76:fe:a6:2f:f6:2e:22:0f:4a:04:c0:a1:f9:0a:58:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Validity
Not Before: Feb 5 02:00:16 2024 GMT
Not After : Feb 6 02:00:16 2024 GMT
Subject: CN=9950e3b015d0b46ca6a071e338423daf6f490111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:63:92:6b:c8:0d:16:8b:7e:cf:13:eb:ba:
9a:32:68:a2:7d:6c:7b:cf:a9:38:ef:0b:68:26:51:
97:9b:bc:a8:fe:3c:18:09:fe:9b:41:b7:a6:25:3b:
cd:9b:24:1c:bc:05:a0:6a:eb:c1:e8:51:43:2a:f7:
2b:b5:cf:8e:59:83:26:33:6d:2f:01:de:0d:6a:f0:
9d:bc:08:cf:7d:3c:2d:26:46:c6:c9:64:fd:1d:82:
5f:0c:a2:4d:e6:c8:28:ec:c5:87:c0:59:11:06:ae:
a4:72:cb:01:a0:59:a9:1f:b2:b7:4e:6e:b0:71:19:
ff:df:31:6e:9a:44:87:0d:e1:cc:9b:59:bb:03:0c:
a9:1e:ac:f1:d5:39:6b:bb:b0:3d:99:64:80:39:f4:
fc:29:03:1e:62:7e:c0:f6:83:59:5c:1f:f2:09:4e:
a7:7d:f9:cb:1e:ab:ee:52:76:e6:7c:2c:77:91:0a:
9a:b5:ec:ae:91:5f:b7:db:a7:6e:e4:ba:89:05:2e:
30:0b:1d:16:57:24:08:cf:a0:ff:29:10:66:df:3c:
ba:1e:5d:c5:69:c7:07:19:98:1f:67:2b:6a:6f:59:
32:d5:54:f6:09:b0:fd:6e:d4:b0:51:49:c6:a0:f6:
e5:a5:19:c2:72:88:f5:5e:43:b6:14:0f:68:4e:3c:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:50:E3:B0:15:D0:B4:6C:A6:A0:71:E3:38:42:3D:AF:6F:49:01:11
X509v3 Authority Key Identifier:
keyid:D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:37:4f:a3:21:00:a7:3a:8d:9e:26:fa:3a:48:b4:2c:c2:2a:
1e:4a:61:bb:5e:96:e9:9d:4d:a6:96:7a:49:3c:74:1a:45:2c:
81:3b:31:89:be:c6:82:c9:b2:54:e9:85:d5:f9:d7:a0:85:d4:
a3:46:37:5a:6b:b8:d3:bf:23:ec:18:4a:0b:c0:da:06:85:77:
38:7f:83:63:96:25:6a:ca:45:7f:30:5c:fa:62:c5:d4:9d:f2:
77:d4:62:5d:88:01:b0:c8:31:3c:36:8b:4f:bf:f9:02:ab:21:
84:0c:0a:f1:4e:6a:79:41:35:f7:69:70:0a:aa:3b:58:b3:5f:
1b:79:12:79:25:e2:59:cd:ee:01:d8:7e:fe:c6:79:29:a5:41:
bc:df:b3:c4:a7:8c:30:f3:25:2c:31:47:ef:08:40:0f:41:ac:
7a:6c:b2:a6:46:5a:ff:da:24:e8:56:87:86:31:2f:84:a8:8b:
d3:80:dd:6f:ac:e4:c8:1a:31:32:8d:12:81:81:54:ab:34:af:
cb:1c:58:16:88:0b:1a:21:d9:09:44:e9:c1:11:6d:72:f0:65:
a6:c2:a3:cb:5b:63:bb:46:b5:bf:a4:6a:2d:3c:b9:d5:d6:4a:
00:a6:d2:b9:5a:47:46:7c:79:af:19:18:1a:dd:ba:c1:ed:38:
97:17:ab:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY12/qYv9i4iD0oEwKH5CliUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTI3NjBkNzBhMGQ2YjdhMDQ3MTMwZWRiZDk5NmQwNDFl
OWQzMDAwHhcNMjQwMjA1MDIwMDE2WhcNMjQwMjA2MDIwMDE2WjAzMTEwLwYDVQQD
Eyg5OTUwZTNiMDE1ZDBiNDZjYTZhMDcxZTMzODQyM2RhZjZmNDkwMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji1jkmvIDRaLfs8T67qaMmiifWx7
z6k47wtoJlGXm7yo/jwYCf6bQbemJTvNmyQcvAWgauvB6FFDKvcrtc+OWYMmM20v
Ad4NavCdvAjPfTwtJkbGyWT9HYJfDKJN5sgo7MWHwFkRBq6kcssBoFmpH7K3Tm6w
cRn/3zFumkSHDeHMm1m7AwypHqzx1Tlru7A9mWSAOfT8KQMeYn7A9oNZXB/yCU6n
ffnLHqvuUnbmfCx3kQqateyukV+326du5LqJBS4wCx0WVyQIz6D/KRBm3zy6Hl3F
accHGZgfZytqb1ky1VT2CbD9btSwUUnGoPblpRnCcoj1XkO2FA9oTjx6HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlQ47AV0LRspqBx4zhCPa9vSQERMB8GA1UdIwQY
MBaAFNnidg1woNa3oEcTDtvZltBB6dMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVKMkRYQ2cxcmVnUnhNTzI5bVcwRUhwMHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81NTI1YWUtNDQwMS00MGE2LTkwNTkt
YzYzMDUwMjU3MDY2LzEvMmVKMkRYQ2cxcmVnUnhNTzI5bVcwRUhwMHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81NTI1YWUtNDQwMS00MGE2LTkwNTktYzYzMDUwMjU3MDY2
LzEvMmVKMkRYQ2cxcmVnUnhNTzI5bVcwRUhwMHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTdPoyEA
pzqNnib6Oki0LMIqHkphu16W6Z1NppZ6STx0GkUsgTsxib7GgsmyVOmF1fnXoIXU
o0Y3Wmu4078j7BhKC8DaBoV3OH+DY5YlaspFfzBc+mLF1J3yd9RiXYgBsMgxPDaL
T7/5AqshhAwK8U5qeUE192lwCqo7WLNfG3kSeSXiWc3uAdh+/sZ5KaVBvN+zxKeM
MPMlLDFH7whAD0GsemyypkZa/9ok6FaHhjEvhKiL04Ddb6zkyBoxMo0SgYFUqzSv
yxxYFogLGiHZCUTpwRFtcvBlpsKjy1tju0a1v6RqLTy51dZKAKbSuVpHRnx5rxkY
Gt26we04lxeruQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:37:05 2025 by rpki-client