Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: WqCSEbitU5+JbsysCLW4cu7T7EYedXtm/AbSyo4EXyI=
Subject key identifier: B5:A4:FE:0E:DE:22:EF:6A:1C:5C:36:05:A4:3A:D7:09:67:0B:4E:61
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 0194BC3BE6C39C6B19DAADCCFBA23DB5454D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 1081
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: 55CPmOnMUrnZtHjPTM4VDWnKHmYzu1V176/On5IW1CA=)
2: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (hash: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=)
3: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (hash: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e6:c3:9c:6b:19:da:ad:cc:fb:a2:3d:b5:45:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=b5a4fe0ede22ef6a1c5c3605a43ad709670b4e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:39:3e:41:30:83:74:8a:06:dd:01:91:5d:f4:
1d:68:52:32:b9:f5:1e:44:76:d6:e7:b3:0f:be:f3:
be:89:d6:01:56:2b:a8:16:03:88:ea:a4:97:14:41:
40:20:e8:c6:82:b4:33:1a:22:31:3c:b0:e0:b7:1e:
5d:c3:89:74:02:2c:ac:32:dd:45:77:c9:40:2d:69:
f0:f8:a9:8b:cd:83:93:17:58:36:1e:5d:50:82:84:
bd:ee:57:64:23:a2:39:b5:83:7e:5e:f3:e2:f7:d2:
15:c0:57:d6:47:b0:27:08:06:8e:b2:4b:99:92:34:
d9:4a:02:8c:77:52:b5:ae:be:a2:ce:82:8b:77:83:
be:aa:c0:4d:58:39:d1:d7:06:46:e2:77:96:33:b5:
ba:0d:95:1a:57:fd:89:6a:60:aa:05:df:50:52:d4:
a2:c5:ca:f0:b6:74:7c:b1:6e:4b:a0:b9:cf:c6:7c:
f8:04:d9:99:0d:ad:0d:00:24:b8:3c:b0:c6:ee:01:
8e:ee:59:14:f2:0a:05:0c:b1:5f:50:1a:27:c2:52:
32:91:c9:79:a1:e6:ce:3b:fb:2d:04:bd:e1:74:18:
97:0d:da:8f:9d:5a:b2:15:e7:22:08:b2:2a:58:f4:
b0:83:9a:ce:18:f2:7e:1a:42:ad:44:6c:9a:aa:01:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:FE:0E:DE:22:EF:6A:1C:5C:36:05:A4:3A:D7:09:67:0B:4E:61
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:1f:a5:9a:dd:77:37:94:28:6e:4e:fc:31:63:f3:22:ab:
ce:ba:26:a8:bf:f5:3a:4a:46:43:6a:88:4d:97:ae:a1:eb:76:
51:c3:05:3d:9d:32:45:68:67:32:c4:8e:4a:be:4f:48:b7:80:
ca:5f:b5:f7:46:8a:6c:0b:a8:c1:2e:41:0b:2f:ec:e0:7e:bb:
0d:a1:a9:99:3b:05:f4:a8:19:c2:03:cf:4a:ae:dd:c0:3a:20:
9f:35:1c:ab:6e:59:57:4d:68:e7:9c:29:bf:ff:7c:a6:ed:69:
04:3a:22:16:ee:42:e7:4d:85:0c:3a:c4:81:ce:41:9d:25:57:
00:55:cc:9c:b0:1d:af:81:15:0b:e6:cd:c2:71:48:c4:47:f7:
8a:08:50:3d:be:92:4f:b2:63:15:55:47:71:32:0b:b6:09:a3:
a0:d6:7e:af:01:8a:8a:fa:3a:5e:5b:62:37:a7:dd:cf:be:67:
bd:75:84:e4:ef:25:ba:d2:33:ed:a6:6e:b3:51:9f:e4:08:c0:
e5:bb:ed:46:e9:11:06:30:a0:54:44:d1:81:e7:44:60:d3:a6:
7d:87:64:18:98:56:1e:23:13:93:be:71:ed:86:c4:70:83:b5:
f7:d7:ec:cb:66:04:2b:19:8d:e5:e9:60:b2:63:14:03:48:9c:
6a:8a:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:01 2025 by rpki-client