Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: dQHZcorfBQ4QTiRrV46maVWv8vhcaEOD+i11GkpHMak=
Subject key identifier: DB:29:56:FF:2D:14:0E:AA:A9:F6:FD:37:03:BD:D9:E2:6B:8E:10:6F
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 0194BD8548018E4A122825082A7DA588892E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 0345
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: QE2PM7Npmr/YS+WlcNt0vnvC+6L7ujrVW+rHG8H2x5U=)
2: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
3: vjaYC5QF6rIZllWMVDm6c67Viv4.roa (hash: aqLWSry32Dj3VlqfXXySEidqvEjI8Fi4ZsxlYgK0OGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:48:01:8e:4a:12:28:25:08:2a:7d:a5:88:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=db2956ff2d140eaaa9f6fd3703bdd9e26b8e106f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:37:73:7f:c2:03:85:d4:1c:58:50:ef:bc:
6d:0f:ca:2f:a7:d3:35:16:56:54:bf:d9:c2:43:f2:
09:97:d9:52:0b:21:4a:0d:f6:e1:2b:98:60:e8:67:
be:35:ac:65:3d:43:88:06:07:ad:3a:9c:3f:95:ce:
0e:6b:42:be:2e:ba:f4:ed:59:1b:05:de:fa:58:8e:
87:ed:08:d1:38:0a:09:96:de:3f:87:b9:40:f8:a5:
81:14:40:31:dc:60:a8:d0:f6:6a:17:21:ad:56:28:
be:ca:57:34:a9:a5:2f:4c:04:ea:7a:a9:b2:a6:3f:
07:0b:0d:12:3e:a8:16:0c:38:0a:23:c3:9b:5a:b4:
7e:4f:5e:fe:f5:da:01:a9:9c:a5:b4:d5:0f:64:37:
88:b4:e6:42:b0:09:58:62:a1:91:2a:96:5a:d5:22:
12:40:a5:80:e1:ae:f6:d3:13:30:ac:8d:43:5a:49:
e1:24:35:c2:61:8e:f6:f0:83:24:97:cf:16:75:c6:
e7:28:76:39:9f:c8:6c:a2:c6:a8:53:37:78:73:c9:
83:57:0b:80:89:89:7b:41:ad:42:99:9f:42:58:10:
6b:00:4e:0e:b2:d2:af:e8:6f:26:9f:3d:a1:00:15:
12:c8:96:4c:5a:21:cd:1d:58:be:22:03:67:90:16:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:29:56:FF:2D:14:0E:AA:A9:F6:FD:37:03:BD:D9:E2:6B:8E:10:6F
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d6:79:06:40:c0:47:bc:25:02:be:ac:54:b7:eb:a5:b9:86:
e3:b8:39:3a:15:45:da:f5:f7:a7:d5:06:41:bd:c7:d5:9e:c3:
f0:1e:fa:2f:ab:ad:22:cb:9c:a3:ba:4c:b6:51:fd:f3:cd:b8:
8d:8f:9e:fe:eb:d1:51:8d:ae:ad:9f:4e:f4:9e:63:19:38:31:
99:40:ae:1a:9e:ea:9d:02:bb:30:23:db:66:05:0b:86:41:89:
b3:a9:2a:f6:20:61:66:7c:92:c9:97:64:7d:8c:8e:27:98:c5:
85:a7:fc:e0:ed:2f:ba:f6:0b:f4:fc:35:1a:47:25:d2:97:0d:
24:9d:91:6d:e9:e8:73:97:3c:f2:d6:8e:8d:10:88:3c:75:e2:
e9:66:02:4a:fb:60:5d:9e:23:67:3a:bf:bc:0b:74:3e:a5:f5:
d1:89:0d:97:4c:6a:74:d0:77:60:e9:19:d1:95:1d:6f:ed:79:
79:8c:45:6d:ca:05:a8:7a:7c:59:27:54:2c:9a:c4:8a:9d:63:
4d:cc:40:24:89:0e:e0:be:1d:a8:d4:a2:ab:00:59:b7:8b:6b:
0e:bc:86:c3:8b:76:69:fa:90:b0:85:f6:73:93:ae:3f:00:83:
16:9a:af:a2:78:ad:6b:34:93:0f:b5:91:1e:12:5a:fb:2d:38:
0b:9f:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:56 2025 by rpki-client