Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: 5wXw/k1e2NqW/8KXJxT796DfwB/Y2SRI82MeFC8GMYM=
Subject key identifier: 7E:88:AA:18:D8:47:71:DA:64:AB:9E:E6:8C:FC:63:FC:0A:21:CA:FA
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 0194BCAA1C09B8B16C082CF7D8E9E9216781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0770
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: iJ8f2IqAta+ZHSdUZHlxFfQqmoZD9EiyPuEgUHrcgwU=)
2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1c:09:b8:b1:6c:08:2c:f7:d8:e9:e9:21:67:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=7e88aa18d84771da64ab9ee68cfc63fc0a21cafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8a:29:ca:24:22:d6:10:42:bd:36:21:fc:01:
54:8d:b6:87:3f:e7:62:3b:ca:ae:cb:f7:1f:19:6d:
3a:b0:88:72:e7:65:f9:27:e5:56:af:70:e2:a9:96:
4a:81:fa:5c:30:81:db:2f:dc:2b:bc:34:ae:b2:7e:
81:f7:67:96:bc:1b:39:2b:ef:36:92:16:63:80:60:
56:96:97:bf:73:85:ad:7b:d6:d7:77:a2:16:fc:88:
2a:30:96:5f:4d:e6:16:39:27:fa:71:a2:6b:b7:d7:
b1:72:31:85:12:3a:45:ad:bc:af:62:9a:57:05:dd:
8c:f7:89:ac:70:a9:74:2c:f0:c0:48:ce:d5:67:96:
1b:96:66:0b:44:4e:0e:f4:0a:9d:cd:5b:28:36:fd:
8d:14:5d:c8:b5:6f:80:0c:3a:96:5f:a2:a5:4f:ec:
8f:30:a8:92:d1:ae:f8:d2:8c:5e:6d:8c:e4:a6:cd:
bb:88:df:08:51:a0:ad:de:d5:32:8a:95:3a:a7:28:
55:95:5f:15:d4:96:a1:88:de:49:8d:cd:92:bc:f7:
c2:ae:88:40:26:9e:d7:4d:a2:9c:92:f8:83:7c:13:
b9:04:06:ee:0d:d6:ed:ac:7f:d5:64:b3:b4:6b:c4:
2e:2d:95:a4:5b:06:38:3f:90:49:47:14:42:20:95:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:AA:18:D8:47:71:DA:64:AB:9E:E6:8C:FC:63:FC:0A:21:CA:FA
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6e:25:c7:2c:c7:e4:09:50:ee:cd:7b:e6:9b:d5:c1:2a:1d:
c9:f4:69:96:5b:20:80:02:b2:a3:f3:26:1c:47:f5:ce:1f:d8:
66:45:bc:48:85:42:d9:bd:5f:9b:d6:63:8d:55:6e:39:b8:05:
51:75:e1:0a:68:db:3f:5b:2e:e9:ad:8b:8f:6d:c4:cf:74:c2:
53:2c:cb:3b:06:aa:89:75:b7:4b:3e:5d:42:41:36:d0:d4:8b:
7d:61:42:47:9c:34:d1:d4:a7:2f:59:50:5e:7e:27:54:4f:ef:
59:00:84:30:5d:60:7e:8b:88:74:82:40:5b:07:d0:07:32:4f:
db:24:2f:63:9f:74:08:33:f8:fa:da:a9:a3:69:61:5d:7f:85:
5d:c5:a3:07:16:8f:e8:7e:1a:c1:84:27:0e:31:74:8d:c9:c2:
3b:1c:e2:5d:4c:aa:c9:00:47:a7:5c:98:3b:ea:e8:ae:a3:3c:
07:71:af:12:f1:9c:6c:98:f3:3f:4e:8e:be:f2:70:5b:1a:82:
a2:0a:be:4b:21:07:ad:6f:71:5f:57:2b:c8:17:b3:a5:dd:44:
22:e2:d7:bb:34:2f:c4:04:ad:ed:8b:6e:38:c1:72:d1:8d:2c:
aa:80:9b:39:68:14:b4:01:93:77:56:42:f7:c3:e8:f6:13:66:
2b:94:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:24:15 2025 by rpki-client