Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
File: e2YUJAvA92sC-eOj9AYKtJNv9GY.mft (raw, json)
Hash identifier: TO3tDjMjQab+5dGhOfiSFVmP7p1T1pY6eNhQSP3j8ec=
Subject key identifier: 52:1F:0C:E4:5B:78:F7:39:08:99:63:88:A5:9E:24:46:02:BF:E6:15
Authority key identifier: 7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66
Certificate issuer: /CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
Certificate serial: 0194BD17876A9B781215006909E74A3B55C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
Manifest number: 2D
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: e2YUJAvA92sC-eOj9AYKtJNv9GY.crl (hash: zzz3sMT6Gjrv95r0ENBb4r1s9B5oKWgdnjpup6j60uo=)
2: ywZPNdm-QKZpeMwj8NoEFpCbBVU.roa (hash: P+ldS5mV1bes3QVxJQ8BBR4t28oMMRfexpRbrRRe40E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:87:6a:9b:78:12:15:00:69:09:e7:4a:3b:55:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=521f0ce45b78f73908996388a59e244602bfe615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:e4:b3:35:eb:24:0b:b0:0e:71:96:a7:7a:
0f:6c:fd:fb:06:0b:82:a9:c7:a3:fa:46:d1:04:f5:
ff:2f:05:16:7c:e0:db:bb:37:22:78:7c:a2:5e:8d:
d7:37:01:40:a0:d6:61:66:b9:12:30:d3:5c:20:2b:
91:0c:0c:f1:2b:67:08:6b:2c:72:fe:16:1e:3f:24:
3d:61:02:89:47:2d:fa:fe:74:6b:ec:63:bf:a5:42:
91:d1:95:ad:1a:45:bc:4d:7b:7e:86:b9:f3:30:f4:
5c:b2:0f:91:61:fd:76:79:38:1a:fa:a3:94:50:8b:
0a:0b:ed:68:b0:cc:4c:12:9d:38:e2:24:c6:e4:89:
78:b5:9d:2b:9b:82:47:39:fc:01:20:de:1d:6c:6e:
56:05:a5:a2:b3:a6:14:8a:9b:86:a2:e1:a4:11:b2:
f2:2a:6e:e8:25:c2:a3:f6:12:6c:35:93:cf:aa:9f:
f8:bb:18:30:7a:20:29:ff:00:ce:16:d5:78:d0:b8:
6a:f3:43:59:ac:b8:11:89:da:52:c8:ef:e2:79:28:
db:22:65:ac:88:98:5d:cb:fc:9d:4e:a5:ed:70:06:
6d:d0:47:87:c4:88:38:3f:68:79:b4:57:f0:16:08:
2d:3f:1e:d8:43:29:c7:a6:c6:41:b8:66:cc:4a:d3:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:0C:E4:5B:78:F7:39:08:99:63:88:A5:9E:24:46:02:BF:E6:15
X509v3 Authority Key Identifier:
keyid:7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1f:18:96:0b:ba:8c:65:e1:d0:8a:7f:a8:17:38:0b:cb:3f:
8f:b4:30:d5:8d:67:b8:0f:b8:94:88:3e:b9:96:47:37:5f:3d:
18:5b:a2:a0:30:a7:a0:a9:01:79:a1:3f:71:7b:2f:01:d1:63:
55:81:94:cb:a4:bf:c9:18:fa:3a:9f:55:e6:e1:42:cc:fd:05:
21:c8:d1:70:16:81:fa:2c:22:c6:0f:99:d0:40:0b:e2:06:b6:
9b:11:23:29:f9:a4:92:26:52:85:c0:fa:0a:9f:7d:2b:07:82:
f0:ee:ba:6d:57:9f:a9:70:5c:8b:f4:60:83:0a:28:7f:85:82:
c7:92:4d:1f:f8:d8:40:63:f8:9a:e7:3d:5d:8f:67:c3:62:45:
6d:1c:f0:fb:b7:a9:2d:1b:97:ac:22:fc:83:71:fb:63:27:1f:
37:2f:6b:21:7f:47:38:76:0a:28:b1:fe:30:d6:7b:8e:f5:cc:
dc:e5:d5:71:c9:ba:b8:36:7b:78:8e:df:1b:ab:b0:cc:08:73:
df:09:d0:de:38:38:1a:22:b0:25:7f:88:fe:85:7e:0f:a6:3f:
39:1a:e7:6b:e6:a7:3c:3f:05:8a:fe:a1:d1:f9:d0:4c:e9:e1:
fa:08:fc:50:67:ca:59:15:88:dd:10:c8:9d:b3:e6:38:cd:64:
4a:37:a5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:09 2025 by rpki-client