Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: 7SxxPVkKrnWfk/45lHiObSYLYgQD/FN4l1jCvcYKrss=
Subject key identifier: 0F:BA:25:BD:C4:0D:44:79:0F:D5:66:01:A0:F8:0D:21:72:45:27:06
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 0194BBCE22FAC79B5E50CFA8B17C89035C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0CA7
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: 44H/xovjxrQUJaJjFZ/DHOHgzO+osjP3wHUD5Qh3WzI=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:22:fa:c7:9b:5e:50:cf:a8:b1:7c:89:03:5c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=0fba25bdc40d44790fd56601a0f80d2172452706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:98:97:16:7d:40:11:96:33:50:59:1e:cd:
c7:dd:42:76:5b:e0:86:7d:59:56:a6:1c:c0:ea:94:
2a:98:86:a2:d7:7c:f4:dc:21:8f:ae:75:4a:38:00:
1d:bb:f4:23:bc:4e:51:7f:37:b8:7d:dd:af:ef:e5:
eb:7d:cc:02:fb:b3:90:ad:4a:b1:33:35:f4:7f:8c:
46:1b:a0:ba:d3:d5:73:de:15:e3:f1:03:b5:71:f2:
0e:fe:0e:74:04:60:1a:1d:6b:a9:13:65:ba:57:df:
95:e5:37:6e:62:a7:b9:e1:90:30:cc:45:6f:9d:84:
d2:2e:9e:31:87:da:31:23:a6:c9:ae:fc:af:aa:76:
e4:93:97:ef:52:40:7d:9e:43:db:7a:6b:92:84:0f:
48:48:40:10:00:d8:36:96:3a:9c:b9:fb:ee:6f:a6:
2e:14:a8:ad:01:f3:33:52:f1:b4:d4:41:5f:49:a7:
49:8b:56:ce:35:c4:c6:4b:8a:44:99:c3:18:04:ab:
f1:8e:4e:fc:34:0d:9e:75:2c:92:3b:31:ec:c9:d5:
fc:1b:e4:78:8f:63:b8:e0:7f:07:fd:b7:89:c4:5c:
80:41:86:36:c8:06:85:8e:23:cd:57:dd:d4:a0:71:
d8:d7:b9:75:1e:57:9a:9b:da:d4:cc:2b:2a:54:f4:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:25:BD:C4:0D:44:79:0F:D5:66:01:A0:F8:0D:21:72:45:27:06
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3b:5c:ec:15:83:2b:17:a8:b8:66:f9:4a:57:54:29:52:26:
cb:11:48:f8:e7:68:9d:c6:d0:d9:a4:2e:a9:c6:70:19:73:0f:
f4:b1:47:4e:06:ab:d4:5d:4d:1b:97:ed:bf:eb:c4:51:fd:50:
68:21:c6:91:3d:47:aa:f2:96:6d:ae:2c:19:8e:7f:03:0b:1f:
e8:93:bf:04:14:7c:d1:3a:09:7a:f6:ae:6d:58:f9:56:51:07:
69:87:eb:65:ac:f4:b9:18:8b:f5:3d:cf:7c:d8:39:7d:ac:21:
7f:56:06:50:1f:cb:87:f4:24:bc:cb:a9:3b:7c:a8:81:dc:0b:
e9:34:48:2f:c8:32:8b:71:08:05:4c:8d:5a:b6:cb:8e:52:18:
18:12:db:c7:8f:8c:00:dd:0b:6f:02:cc:ae:7e:ce:0c:45:cc:
3a:b2:04:03:3f:ac:39:d5:d1:98:a7:ff:5e:32:a4:1f:4c:85:
7b:d8:89:ac:56:a3:95:64:31:04:47:fb:43:03:d9:a8:79:4c:
c8:5f:f1:44:f4:95:44:5d:02:69:13:f1:f3:2e:eb:78:a1:db:
7e:65:9f:5e:3e:21:3b:ef:da:15:52:01:b3:2f:17:82:84:86:
12:88:b1:a9:c6:e9:3c:aa:44:4a:06:46:04:10:af:c0:5f:87:
71:75:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:17 2025 by rpki-client