Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: LaVMQQ4uJ6qSZBiDEM+tBmoaRq+7DU9ANPXszcy3hso=
Subject key identifier: 3F:79:7B:42:93:1B:CE:C2:AC:F0:2D:4F:68:FE:0C:82:1F:13:56:D4
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 0194BD859549C95DF9FCDA5394151E5EFF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 02F1
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: hKjHT3ogEOTYWlJiExTsw2cBsr1uT5GOtCpKtaw/7CE=)
2: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:95:49:c9:5d:f9:fc:da:53:94:15:1e:5e:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=3f797b42931bcec2acf02d4f68fe0c821f1356d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:d8:6c:a2:5e:2d:d5:d7:fa:b7:40:1b:77:
38:dd:a0:4c:fa:11:0a:68:61:03:16:9b:16:8b:40:
fc:0a:67:d1:30:ed:ec:b5:4b:a9:53:d5:53:83:26:
78:9e:60:07:63:4d:b8:88:10:11:5c:6f:cf:7d:be:
d3:16:8f:d8:50:4b:43:e5:01:6d:63:45:4d:be:d1:
c8:c0:c8:0c:85:f7:a3:1e:c4:fe:2c:00:fd:05:7f:
27:d6:be:3c:27:83:68:b8:27:a8:27:d8:e9:bd:18:
87:28:a1:b1:5d:c2:b4:2c:8b:6f:8c:45:38:d1:21:
ad:0b:54:47:cc:8d:69:78:87:b0:54:b0:6f:b4:03:
d9:8f:59:18:fc:a6:50:7b:2e:60:ac:78:57:9e:ae:
b5:bb:6a:53:be:55:9b:f8:8a:1a:f9:aa:36:1a:59:
2c:3a:5d:78:f3:50:5f:77:0b:4c:30:41:d0:3e:e7:
82:fe:99:d0:18:b3:54:0c:a8:67:c2:97:d5:9f:9f:
44:9a:7e:4e:8f:a0:2e:f5:f9:ab:ee:25:3f:94:e4:
43:0b:ae:4e:df:56:8f:01:44:23:51:6c:ea:08:83:
5b:55:7f:1d:2d:4c:fa:27:5f:28:a5:9a:4f:dd:ca:
bd:5f:9e:0c:1e:d8:11:f4:9c:f1:be:e0:4b:fa:25:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:79:7B:42:93:1B:CE:C2:AC:F0:2D:4F:68:FE:0C:82:1F:13:56:D4
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c7:d5:a0:d6:26:bc:74:82:44:a1:b7:1e:93:99:28:02:6d:
e1:9d:2a:d9:e1:a2:65:1c:24:84:c2:40:eb:1d:45:22:f4:64:
f8:b3:fa:bb:a3:d6:2d:bc:0f:56:56:09:72:66:f8:2b:e9:fd:
2d:ec:a0:7f:61:5e:e0:ff:5c:ac:82:7a:96:fe:9f:98:e4:04:
31:25:79:90:7f:a8:2d:73:ae:eb:fd:4b:1b:41:b5:10:fb:b0:
c5:f1:74:ad:20:21:c6:ed:6f:82:ed:45:ce:06:1c:2f:d2:d4:
b5:98:32:eb:5b:7f:2e:dd:85:44:c1:08:79:b1:30:47:58:34:
aa:b8:dd:b9:02:0f:9c:2c:5e:cf:9b:12:14:54:0e:be:43:17:
77:ce:14:1b:cf:1d:a9:67:9b:1f:9a:b4:e9:f1:c3:7e:00:fc:
16:a9:f3:1b:a3:ce:82:8e:2c:33:8d:2a:6e:d8:43:38:61:01:
0f:7d:c1:c0:5b:31:1a:54:79:0f:ce:36:a0:56:2d:5f:7e:ae:
3e:cb:ae:56:06:70:4f:bc:09:79:22:0f:9a:05:a2:46:d0:13:
75:e8:88:7f:ac:1e:20:06:78:7f:6f:2c:0d:0a:3a:69:64:f4:
be:b1:d8:48:72:da:f8:86:3d:18:86:27:22:ec:58:f8:3d:ba:
7a:d6:dd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:26 2025 by rpki-client