Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: ppGwEu17rya/eOVBI41IE26HrtjWkgMLN/jlOpKpA0w=
Subject key identifier: B1:42:59:FB:60:34:92:50:9D:6F:23:37:78:39:55:ED:28:CC:28:AD
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 0194BD4E368D53CCC265639CE11A78E1C8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 04F0
Signing time: Fri 31 Jan 2025 17:00:06 +0000
Manifest this update: Fri 31 Jan 2025 17:00:06 +0000
Manifest next update: Sat 01 Feb 2025 17:00:06 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: XIVh5Mum091D3sswx4JhvGwtygv/VB/nefmJVllSZUA=)
2: O5dwSGpy0OL0LjPB3wap3UtIwjM.roa (hash: cR4roCPU2uE8JstXy3PNObd3k08fMc1QAFzMuYnt3oU=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:36:8d:53:cc:c2:65:63:9c:e1:1a:78:e1:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Jan 31 17:00:06 2025 GMT
Not After : Feb 1 17:00:06 2025 GMT
Subject: CN=b14259fb603492509d6f2337783955ed28cc28ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:f1:66:22:53:a8:03:2f:a9:49:d9:a7:9f:
a7:31:20:e3:3f:ee:94:41:c6:7a:d2:f9:eb:13:02:
17:10:6c:96:49:2f:c7:dc:da:ea:2d:e8:e5:eb:20:
26:d5:9d:9c:02:3a:d2:36:81:45:f3:bc:8f:c2:02:
e9:87:bc:b5:4f:66:ab:a4:5a:02:f4:33:1b:19:f0:
2c:a2:e6:b0:d2:e7:ea:42:c4:87:f4:a4:ae:51:d9:
0e:7d:21:2b:a7:7d:1a:9e:39:a7:07:d8:a5:f9:8f:
09:6d:be:55:c1:06:47:17:e5:98:88:84:6b:cc:db:
52:d1:2b:f4:df:4d:dc:76:23:59:c9:bb:d8:be:55:
9e:b7:75:5d:e5:eb:aa:0a:82:72:33:fc:53:32:cd:
63:54:61:a5:44:0a:f1:a0:90:c5:d0:05:69:75:72:
87:0e:1e:40:fc:97:4c:0e:17:e0:a1:61:de:6c:17:
3f:cf:41:d1:97:99:56:f3:fe:c2:2d:09:78:a1:54:
a6:20:9b:66:03:65:89:d5:4f:31:2f:69:96:5c:29:
27:86:b7:58:a7:f5:0b:3d:3f:f8:e1:f0:d5:95:c6:
e7:7c:55:0c:1f:a5:b8:db:c8:42:b8:18:d3:13:7b:
50:50:91:aa:78:27:8e:ea:a9:84:1b:ab:aa:d9:6e:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:59:FB:60:34:92:50:9D:6F:23:37:78:39:55:ED:28:CC:28:AD
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:71:0f:bb:d9:27:2e:e0:e3:ff:99:9e:e6:b7:ca:00:2b:
ae:7b:8c:16:12:66:07:01:ed:31:8a:8f:69:16:a6:f9:00:88:
32:d8:b3:17:82:0b:d1:aa:97:84:d5:e6:24:16:93:58:7f:1d:
59:ed:10:c1:e3:d2:65:a4:61:9f:75:0e:d2:89:a9:e6:de:25:
87:98:c8:2f:f0:16:bc:69:5e:b2:71:d6:93:95:41:4d:82:02:
48:ff:1a:f3:b8:72:c3:1b:15:24:f6:7f:a1:61:1e:48:2a:50:
be:55:39:c1:94:df:0d:c2:45:89:49:47:57:08:9e:72:1b:e1:
b0:8d:a1:e5:97:89:98:a0:4c:6a:b3:18:c8:3b:b5:13:3e:6d:
1d:c9:84:d3:59:1f:52:04:25:4c:80:e3:21:15:82:02:17:ad:
bc:3e:5d:0d:29:e3:46:20:d2:96:1c:59:02:02:0b:cb:f9:28:
aa:e7:71:d2:bb:01:3e:38:15:a6:8e:54:85:21:39:07:97:e6:
92:18:38:08:f1:2b:48:8a:59:aa:9d:4a:ad:ab:78:14:af:45:
1f:14:c0:cb:a6:dd:b4:68:b0:84:d6:44:05:ba:dd:66:c4:cf:
a2:2d:6f:b4:81:10:58:4e:e0:2a:b7:f9:4d:b9:6a:f2:fc:c8:
8c:7c:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:20 2025 by rpki-client