Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: ETgFpIbzTw2kjjRe2geaQo+mlKLHjdRq4B0fMj+Ulbw=
Subject key identifier: 49:48:4E:FB:5A:6D:A5:E9:7E:DE:DD:AE:6D:FD:04:D1:A8:BC:74:B1
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 0195E00F5EDE71E77705E07BD418F59847AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 11DA
Signing time: Sat 29 Mar 2025 04:00:58 +0000
Manifest this update: Sat 29 Mar 2025 04:00:58 +0000
Manifest next update: Sun 30 Mar 2025 04:00:58 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: qxFk7USh5zLHK2k3ZDl7V0LgAe2S2CZXoBTsbiihXp4=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:5e:de:71:e7:77:05:e0:7b:d4:18:f5:98:47:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Mar 29 04:00:58 2025 GMT
Not After : Mar 30 04:00:58 2025 GMT
Subject: CN=49484efb5a6da5e97ededdae6dfd04d1a8bc74b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:52:79:6d:9c:79:c9:b2:18:88:b7:01:ca:e9:
f5:d1:27:63:11:01:ae:7b:60:56:21:46:43:0f:d3:
bc:17:0d:07:9f:a5:2a:4e:45:fa:f3:9e:4d:ef:c1:
0c:55:3f:36:23:fe:eb:d0:fd:af:93:3f:0c:ed:20:
a3:72:ec:68:fa:c3:5e:26:3d:96:65:95:ce:19:87:
a9:10:a6:95:8b:07:f2:6c:f2:89:22:27:38:e5:f9:
fd:08:1b:9b:76:b5:4b:7c:16:69:54:aa:32:c2:cf:
f6:5e:83:a2:dc:d5:1a:10:2a:94:16:95:ae:5d:be:
9d:ba:f5:01:69:3e:df:a5:64:ea:8a:cb:9e:e0:7d:
5c:c8:c9:d8:44:0a:af:98:ea:71:2f:ad:ed:f9:94:
3c:ba:1a:8b:7f:0c:73:5a:db:dc:01:b5:38:ec:75:
fc:2d:bd:b9:2b:f4:b5:e1:6c:b9:b4:2b:86:73:06:
fa:67:29:6e:a6:91:e2:14:9a:89:e6:a5:cd:b8:f5:
97:b5:cd:75:84:3b:0c:4d:06:64:83:86:29:31:e4:
5d:46:64:6c:e3:ae:24:b1:c3:96:69:4a:1b:60:7f:
88:f3:7f:ed:07:92:0c:b7:02:3b:c1:2e:ce:5f:40:
bf:45:29:89:38:95:a7:bd:8b:ff:68:b6:db:86:9b:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:48:4E:FB:5A:6D:A5:E9:7E:DE:DD:AE:6D:FD:04:D1:A8:BC:74:B1
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ff:b4:04:63:83:9a:56:39:46:96:e3:ee:ee:a8:c5:23:39:
31:f1:cf:e0:82:5d:96:85:44:a3:be:e3:3e:a9:ee:68:cc:b2:
11:38:9a:a3:7b:94:01:b7:5e:54:3b:bc:f3:c9:47:9b:b0:8e:
48:7a:b3:5e:22:44:4e:6e:31:5c:b0:10:f7:f3:c6:35:f2:92:
95:98:32:d5:82:a9:57:6b:56:32:9e:c4:dd:9d:c0:00:be:0e:
45:c8:2a:72:90:0b:4b:12:c6:0c:50:ee:4a:db:e3:6f:04:bb:
8e:be:de:8d:d8:bb:b2:ee:35:a3:aa:08:f8:32:62:40:86:8b:
1b:5c:b3:b2:39:88:36:41:92:00:33:31:ad:58:71:62:ed:aa:
32:b8:5e:9d:1e:04:e7:67:ba:b6:c2:a0:e5:6f:0a:46:07:40:
1c:57:62:2e:3f:7a:25:b3:a2:08:bd:47:ee:d4:65:b4:b6:41:
3f:28:6e:08:fa:2f:64:3c:8d:32:e4:ac:0a:20:66:97:16:1c:
bd:28:6b:47:f9:bf:d0:0a:f9:7f:6c:ed:9e:bf:01:c6:6a:2f:
a3:44:dd:ef:2c:4e:60:a9:9e:0a:6c:15:6d:f4:ee:97:b1:ff:
1b:18:d9:bd:c5:5f:62:41:6e:0a:6b:d3:7c:c1:22:4a:13:20:
99:cb:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:50 2025 by rpki-client