Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: pl/Zhz44YxYQtiAIyls1rRVFlSXeV0HmK4EuQ9nxnTc=
Subject key identifier: AB:A4:EA:DF:7D:E5:2F:6C:F9:AC:74:30:1F:71:53:FA:CC:EC:83:FC
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 0194BD854727DB6C328DD9E4F7EE978DBA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 0F07
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: k9P/tF1jwNET+/IhjtSFuL+qIY3dGA+Ur8zetxSpLA8=)
2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:47:27:db:6c:32:8d:d9:e4:f7:ee:97:8d:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=aba4eadf7de52f6cf9ac74301f7153faccec83fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:9d:00:31:3f:d1:38:aa:c1:cf:fe:70:48:
5e:59:de:dd:0d:83:bc:66:80:ae:52:2d:1f:a2:c2:
75:6c:eb:50:e5:ef:5f:93:21:f4:29:ff:f1:f6:57:
66:07:41:d7:00:bc:09:71:40:5a:9a:ba:96:a2:e7:
09:d1:b8:01:f7:b7:c2:66:ee:b5:02:e8:5e:79:ee:
8f:52:08:3d:3f:11:b0:f6:7a:30:a3:b2:cf:20:d0:
f6:9f:a5:d7:e8:6b:c6:c4:9b:57:4c:37:d2:c9:a8:
02:25:06:1d:0b:63:92:9c:72:81:c7:30:9a:0b:a2:
6d:7c:22:d9:47:ec:c3:16:ab:ee:78:16:c7:fe:cb:
5b:54:c9:11:0a:05:dd:58:6d:ea:bc:37:80:50:75:
ca:0f:15:51:38:4a:61:20:74:45:a3:83:29:49:70:
ae:dd:ff:23:06:b0:ed:aa:84:4e:1b:c8:6e:4c:96:
a9:44:df:fc:36:bc:a0:b3:60:b2:a3:53:c3:ab:df:
11:5d:0e:55:96:5e:d2:6e:5b:b1:8e:a0:2b:1a:08:
3b:d2:4b:fe:09:74:3e:9a:43:48:95:26:5d:32:b9:
cf:0d:24:66:46:b2:af:c7:4b:be:8b:5e:91:8a:17:
e5:cf:55:21:6c:c0:85:37:4f:44:29:fc:5e:d2:42:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A4:EA:DF:7D:E5:2F:6C:F9:AC:74:30:1F:71:53:FA:CC:EC:83:FC
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:59:eb:3f:e4:c2:7b:93:1e:66:e6:e0:da:50:0e:06:70:8b:
a0:bc:c5:f1:9a:ea:1c:a5:ec:20:0e:82:25:17:00:f8:fe:88:
6d:a8:51:89:2f:dd:0c:a6:77:36:96:8a:5e:60:ad:45:7c:32:
0b:c2:0d:32:06:b8:98:dc:1c:55:1d:1d:d7:e2:f2:4a:5c:ef:
84:c2:5c:4e:00:d3:42:51:08:1f:35:94:fb:cd:f2:78:03:e4:
0f:f9:a3:6a:4d:8d:46:bd:f4:fa:a1:1b:af:d7:3d:56:c0:6d:
a5:24:ff:ac:15:66:e3:ff:82:dc:ae:7d:e4:19:91:5b:ed:ea:
18:c5:8b:33:2e:61:59:64:aa:98:d4:4d:22:1f:e1:c0:d2:f5:
f4:a9:9a:2f:19:9b:4b:70:3f:ae:91:15:95:58:37:63:10:44:
39:9a:41:24:f0:bf:2f:77:08:2e:fb:5b:96:f0:72:e0:6c:84:
f5:4d:b9:dc:9e:21:96:29:dd:c3:82:b2:f3:82:3d:67:91:45:
56:bf:16:fd:ac:e2:5d:41:ab:8c:13:aa:37:2d:fc:27:26:04:
70:89:b1:98:73:f7:7f:62:b0:3b:54:ca:a2:29:b2:85:80:c2:
0c:82:90:b6:67:d4:85:65:ea:4f:03:62:4a:44:c1:30:dc:33:
b5:64:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:38 2025 by rpki-client