Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: jdjFQUe4i1Vg9QtCYw9P2bqs97FwypW3Y1xvdZhiMXk=
Subject key identifier: 6F:EF:54:B8:81:85:F1:2B:11:56:BA:C8:4B:F6:36:D1:2B:90:1B:9F
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 0194BCA96C6C15C94CF1555CA56110C6A74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 12F0
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: T7KJ6TORBCB6nX+GQ3zQzJwUDIh1CNmdOcJXXRsAhkE=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6c:6c:15:c9:4c:f1:55:5c:a5:61:10:c6:a7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=6fef54b88185f12b1156bac84bf636d12b901b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:dd:81:4e:e0:30:6c:a2:65:25:1d:c5:78:
66:ca:0f:aa:fa:0c:64:86:f3:04:b8:52:e7:2b:9d:
c8:cc:a3:df:1c:d1:50:34:28:47:8f:a6:f8:d9:92:
c3:3f:31:36:d8:8f:52:12:6e:e2:de:d1:9b:6b:fe:
3f:55:5d:e3:49:9e:aa:69:67:cb:67:37:f3:48:89:
78:f4:a6:29:e8:fc:3b:be:17:bf:66:8e:b0:30:61:
e6:35:e4:98:77:b6:ba:9a:b5:a2:9b:d1:61:62:3c:
a7:8c:ae:61:d4:de:ad:41:0a:67:61:48:db:56:49:
d7:09:46:07:ef:ff:cc:fa:ac:d1:ea:ec:52:7f:94:
12:f7:48:56:38:9f:c1:84:07:f3:a6:75:0f:72:bd:
34:8a:1b:ce:c8:fb:cb:b0:b1:da:4e:89:3a:51:4f:
7e:98:3d:b1:77:b4:f1:6c:75:91:8d:03:b7:e2:7b:
b5:42:62:6d:90:3f:4f:e2:97:8e:08:ee:65:2c:53:
59:a6:cf:53:3f:15:d2:18:ac:6e:ef:6d:6c:c3:5c:
da:d9:ed:4a:d2:11:62:54:fe:6b:2e:11:db:fe:46:
ed:81:ae:14:24:f8:59:f3:b4:94:b6:a3:36:44:01:
02:3f:a6:2b:fe:82:85:1d:ba:e9:27:4f:50:48:7f:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EF:54:B8:81:85:F1:2B:11:56:BA:C8:4B:F6:36:D1:2B:90:1B:9F
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:21:3f:c7:9b:c2:49:d0:5a:3e:07:b1:34:14:0e:10:c3:72:
89:45:97:71:69:89:1b:dc:56:de:17:46:58:cf:22:5f:3f:db:
2b:20:c8:64:c3:3f:13:87:90:75:d7:12:ab:22:43:42:36:31:
24:7c:d2:b6:79:1f:b7:a7:74:f2:9c:b8:fa:4f:f0:83:61:43:
2a:69:04:fb:29:8e:aa:10:f3:32:3e:cd:f2:08:0c:49:5b:85:
28:e4:f5:2d:1d:b6:ba:fa:61:8f:38:de:4c:2c:0d:1d:38:8d:
5b:f9:4a:8b:96:4b:53:f0:fa:d4:06:1c:74:d4:89:2c:a7:ef:
ee:b0:6d:1f:a6:a5:5c:63:2d:5f:f4:07:ad:73:9f:52:af:73:
56:fe:e5:80:90:bd:96:ad:4b:3e:17:2a:40:70:3c:9d:b0:d2:
2e:2f:04:94:49:97:34:cd:c1:32:1a:95:64:c2:dc:16:ea:5b:
06:b5:1b:c0:68:3d:c6:5f:83:5b:61:2a:ee:c3:44:a8:fa:95:
a8:5e:5c:b9:47:13:a6:74:13:f5:b7:38:e1:a5:59:b2:4e:f5:
c4:70:d1:a8:56:64:73:2b:f6:f7:da:14:d9:b6:f9:0c:df:e2:
57:d2:3d:02:0b:db:c5:8e:45:10:a2:0c:80:20:84:14:ac:53:
1c:0c:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:06 2025 by rpki-client