Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: BH73+6WntKB9mLgLNloDZgNrVQCNWbvutZE4plEvQto=
Subject key identifier: 82:0A:8B:7A:69:69:45:D8:07:44:A6:D4:8E:D3:C4:2B:9B:14:3C:D3
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 0194BC730FB55E976117FE18274CC03CBF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 0382
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: K0XdRXOu2rkrdlfUdSyOuljEcJeqa56WUSFCsoqKgso=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:b5:5e:97:61:17:fe:18:27:4c:c0:3c:bf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=820a8b7a696945d80744a6d48ed3c42b9b143cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:3a:8c:32:4b:73:ab:9f:bd:ef:99:80:1c:
05:e5:bf:37:53:04:d5:65:48:75:0d:01:77:75:a3:
10:12:8a:cb:9e:1c:a7:21:08:ec:bb:4d:00:30:bc:
e9:d4:a3:50:9b:5d:69:87:98:41:cf:9f:cc:85:fe:
f2:8a:51:3a:09:11:93:8f:22:c9:85:71:9e:4f:f3:
ca:f6:52:48:cb:59:fa:b2:16:bb:59:6b:9c:4d:64:
35:89:c0:85:bd:26:55:f6:f0:69:7f:a5:78:ce:9b:
b6:0f:20:58:a8:e1:a5:f8:2b:7a:9e:55:e0:8d:65:
e2:63:89:05:b6:e6:bb:6b:b9:53:8a:43:ba:e8:22:
82:0a:77:36:48:f4:4c:5a:4c:4f:6b:fb:21:4f:8d:
ed:95:23:1d:fd:e9:e4:2c:84:00:f8:54:7f:44:5d:
47:c5:19:dd:39:4b:1a:93:4f:de:8a:48:62:fb:88:
86:42:ea:97:94:a2:d1:cf:8a:cc:05:7e:c2:73:74:
51:ff:5e:10:bc:9e:6e:1e:a4:97:00:86:24:5b:e8:
62:d9:1e:29:3a:40:61:09:a7:0d:ca:dd:0a:7a:b2:
2d:b0:6d:9b:58:93:72:97:f9:79:50:38:04:89:5d:
de:bf:c1:aa:6c:47:c0:40:3e:01:b0:0b:7a:9c:7e:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:8B:7A:69:69:45:D8:07:44:A6:D4:8E:D3:C4:2B:9B:14:3C:D3
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b9:14:43:92:c1:ff:fe:25:85:47:32:b5:54:53:09:9c:74:
1a:e3:4d:ca:93:bc:c3:40:66:57:56:f6:01:0b:13:db:90:8a:
ed:a5:15:4e:0e:6c:5d:d2:2f:cb:00:b1:50:95:59:c9:f5:79:
62:e5:70:6e:e3:52:e6:09:7c:3a:a2:5b:a1:d2:28:72:1e:ad:
4b:ee:20:b4:13:24:b6:93:eb:07:08:27:e1:75:df:e0:4e:1c:
ce:a1:50:7e:20:da:e7:23:71:4b:6a:d0:08:0f:93:92:c6:58:
75:3f:8d:da:99:49:d1:f8:65:10:7b:5a:09:2e:41:17:1a:bb:
49:31:fb:6f:45:8a:c8:01:a0:e4:6d:ff:e7:b9:53:67:75:43:
ea:7e:a8:7a:3b:83:a9:6b:c6:19:c6:ef:28:20:de:8c:34:e9:
bd:5e:aa:fc:6c:7a:51:d3:1e:2e:18:d6:0d:42:af:41:97:25:
9d:a6:5e:19:eb:5a:36:f8:35:fa:37:58:3e:69:7c:5b:e0:36:
a4:5b:07:63:5d:ab:d6:75:55:3e:0e:d2:a8:0f:e6:ed:00:86:
ef:0a:70:ba:fd:5b:92:2d:b0:8d:1a:eb:00:cd:3b:ae:94:d0:
b1:56:74:15:4d:b2:fa:37:95:13:4c:90:d5:98:94:41:66:c2:
77:e9:9e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:55 2025 by rpki-client