Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: b7082Irckh2HOjIfOvSh97vmVoPMkTZNcUcLug78oc8=
Subject key identifier: C4:9A:F3:C5:E5:1B:70:15:C6:4C:C6:CD:86:6F:DA:16:8C:7C:CB:70
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 0194BD8547DE5CAD846A9B384DB5C8369E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0882
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: 70TYu33zd45HxkMf39qPwraBwM7qZ+lMARGU68raAZQ=)
2: empYwKrx4ABahFY0k2CZXZft5Pg.roa (hash: lQyRrUFjZRPH9Yib0Mwz+z/3ALSf5u0tcJRbBn2hjqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:47:de:5c:ad:84:6a:9b:38:4d:b5:c8:36:9e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=c49af3c5e51b7015c64cc6cd866fda168c7ccb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:84:26:3e:1a:52:a6:23:af:ba:e3:f4:5b:
48:b0:3a:d9:5a:74:47:96:b5:30:7e:24:6e:df:c3:
3f:1a:ba:71:8e:fc:f7:7c:c5:d5:7f:79:0d:ce:53:
dc:dc:74:3a:81:4c:93:8f:a2:d6:8d:b6:77:0e:5f:
34:85:b4:42:02:2d:11:9b:c7:df:c3:c9:e5:92:e1:
15:38:97:3f:4e:bb:64:7d:48:2e:b1:6f:0f:d2:11:
6d:c1:54:3c:0f:ce:af:86:eb:68:3f:d5:6a:84:4b:
a1:e0:e0:ec:72:d5:8c:85:fa:06:e7:a6:68:62:6f:
f0:a6:f3:15:43:3d:1d:81:a2:b4:5b:8c:94:cd:16:
31:b9:43:d9:f9:ed:98:21:73:da:3d:2c:c9:d6:51:
cb:cc:6a:9e:70:99:d0:60:29:0d:bb:3d:31:3e:9c:
c7:32:dd:1d:dd:16:8a:3b:29:1c:73:44:d6:0b:0c:
b7:d1:26:21:7e:2c:21:6a:9b:9a:6b:85:f3:51:eb:
68:6b:bb:9a:de:14:a7:66:b4:74:28:79:0a:df:c5:
08:d3:b5:d0:50:0e:24:ab:f7:b3:01:2e:e8:e3:70:
d0:ee:be:e9:f5:10:36:90:79:41:f1:52:01:33:1c:
c5:24:18:fd:5d:0a:2c:bf:18:e8:34:ca:a1:c0:1c:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:F3:C5:E5:1B:70:15:C6:4C:C6:CD:86:6F:DA:16:8C:7C:CB:70
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f3:de:0d:24:c9:98:49:31:6d:b6:05:ef:d4:a4:a0:5d:a1:
b7:a5:d3:62:e5:af:e5:f8:87:9b:bd:f4:61:30:26:df:73:3a:
34:cf:f0:21:c0:99:b2:cf:26:2c:cb:41:05:f5:ad:6b:93:26:
e5:c0:0f:6a:59:a4:5d:17:67:0d:d8:db:82:c7:84:8f:e2:cd:
21:45:19:c1:2b:7d:dc:ca:38:4a:3c:82:e3:4b:fa:57:ae:c7:
bc:28:c1:0f:17:b9:58:03:ea:71:a0:7b:bc:1d:db:7f:97:d9:
ab:5e:d8:02:fa:44:05:dc:12:f1:5e:77:6e:70:93:ac:ef:96:
50:94:e2:ae:9f:92:cc:2d:50:84:b8:6d:4b:68:bb:fc:ba:1e:
5f:c3:26:6e:01:69:65:97:c2:8f:1b:d4:98:5a:eb:a4:40:82:
ae:01:21:2d:75:f6:26:4d:e4:8a:fa:e6:97:7f:f7:39:5a:7e:
95:92:81:b0:7c:69:ef:bb:0f:54:ee:04:2e:d4:8a:4c:c7:40:
de:07:c1:7f:e5:eb:70:2b:55:35:d9:95:67:b7:57:a7:a3:c9:
49:32:ec:b6:a5:f9:e5:37:94:70:95:27:91:1a:44:d1:8c:86:
a5:3e:1c:c4:d0:47:f9:d6:f3:5e:af:37:71:f6:fc:d4:ac:6e:
21:66:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:09:57 2025 by rpki-client