Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: +1nxX8AIbLEl7ktva9S1eiH2YLGHNwb/uqdveVi81MY=
Subject key identifier: 79:12:49:B2:C7:98:FD:AD:C4:B7:92:BE:D6:62:4E:B8:16:38:14:05
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 0194BCE07D7C10C0E12F4C525C4B3B430E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 0585
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: 9TY2K1T7FE0vBCdwqOV55ECxayTme3UMl27nb5kF3p4=)
2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7d:7c:10:c0:e1:2f:4c:52:5c:4b:3b:43:0e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=791249b2c798fdadc4b792bed6624eb816381405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:6e:78:61:7c:5a:0e:ab:f5:ca:12:c5:31:
9d:21:83:54:77:5c:66:39:d9:75:84:49:66:33:b1:
6c:1f:44:e7:6e:32:b6:d9:df:fc:20:62:fb:3a:e1:
b1:a5:a3:97:33:86:07:a5:10:87:d0:cb:1a:9f:64:
65:7e:21:63:ca:16:85:13:b7:d9:ac:c2:50:e8:70:
49:7d:19:72:f8:11:df:6f:5f:31:b7:9c:6e:b3:ec:
ee:d7:bf:4e:63:60:fa:74:f1:b8:a3:bc:eb:db:6f:
dd:b1:9f:24:e8:13:dd:86:99:c5:30:39:5c:b9:cd:
fe:08:3a:75:a2:23:eb:fd:47:19:c8:dc:49:89:d1:
c4:4d:0b:e3:ea:72:71:ae:d8:8e:13:af:3c:ec:b3:
0e:db:2d:85:39:e6:1f:8f:3f:49:fe:ea:12:ac:c6:
17:b8:74:78:6f:5e:6e:91:23:71:94:ad:2e:89:c6:
92:4b:6e:c7:b1:e4:2f:57:26:ee:e2:de:ab:fa:79:
6b:8d:ad:21:ed:a6:95:5a:1d:62:94:1d:49:1f:cd:
a9:5c:ff:da:13:a9:8e:ea:4b:17:de:5c:76:05:3f:
7a:5a:81:d0:30:9e:3c:7b:fd:c6:7a:64:03:e9:03:
cc:d5:4f:43:06:50:c4:79:01:be:b2:94:d6:11:90:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:12:49:B2:C7:98:FD:AD:C4:B7:92:BE:D6:62:4E:B8:16:38:14:05
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:33:6a:1c:54:62:10:76:bf:36:e9:f7:35:a1:5e:b8:b8:
43:8a:0e:ac:07:ce:54:c3:39:92:f0:eb:3c:1b:28:35:f3:d1:
3e:20:f6:37:db:8d:e6:e7:c8:d7:03:ad:47:f1:0c:4c:1e:8a:
13:17:7f:e0:fc:5a:6d:6a:4f:79:3d:58:8a:a9:15:8a:78:ad:
9e:a2:2f:d4:27:cd:35:24:9b:5c:71:69:a8:1f:bd:28:9e:1f:
30:42:8e:c3:42:e7:99:8f:1c:ce:ea:1a:59:6a:0b:44:1d:a2:
c3:ef:e7:6a:e2:a2:fe:cd:30:17:91:cd:a2:b7:d4:b6:d1:9b:
0a:12:17:c1:47:07:a8:ab:5b:6f:2f:8a:03:d6:f8:2c:c2:ca:
3c:ff:29:10:e1:e4:fb:a9:72:cb:00:b4:b1:cf:0b:4a:52:45:
e9:89:c1:9d:0b:1b:93:a0:60:3d:16:f1:bc:1f:01:92:ed:61:
0b:44:fd:39:01:51:10:05:6e:00:bf:3a:d3:f5:73:66:77:9e:
0e:30:3c:c9:57:7f:5c:7c:4e:cc:6b:29:d1:0f:e8:d5:c0:18:
55:23:97:68:54:e0:15:44:23:7d:1f:2b:3e:e8:75:00:c9:62:
17:d4:d0:c4:01:96:fa:af:ae:64:06:5d:1c:fc:0e:f5:b0:57:
7f:34:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:22 2025 by rpki-client