Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
File: f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft (raw, json)
Hash identifier: xrDjxvMopDbEeIHhcVWc4sLGki4LITxkI1FyeOjIs0s=
Subject key identifier: 68:D7:E2:61:DB:9C:25:E9:AF:38:42:84:B3:9E:9A:B2:40:51:8A:7F
Authority key identifier: 7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
Certificate issuer: /CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Certificate serial: 0194BCA99AA587BB3BBF4EE0FBCD7073A961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
Manifest number: 0D2B
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl (hash: TfjJzQGZN0BZ5PQTVAZuvXIF5VAjaMCLUgPhRi9SmFg=)
2: uqH7vaJE3PXnQyRjphQi0vNIcTA.roa (hash: 43GuWr72hhzBtb+xvMSJfj29iARrwWk3XD88vNRHObQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9a:a5:87:bb:3b:bf:4e:e0:fb:cd:70:73:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=68d7e261db9c25e9af384284b39e9ab240518a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:37:1b:bd:19:71:77:a7:c8:bd:49:6e:3a:
e6:50:f8:17:34:bd:dd:4c:f3:15:b7:78:bb:18:2b:
c8:2d:ac:92:55:6d:24:7a:e3:3d:83:9a:05:99:67:
39:80:63:26:c2:d2:f8:6f:cd:33:d7:9d:16:c8:f5:
14:59:d8:ad:1d:17:7d:b6:00:83:55:ca:6c:58:62:
03:df:f8:88:83:e1:a1:28:99:72:cb:8f:b6:78:3d:
7c:00:ca:99:9a:12:d9:6e:e7:1b:be:4e:1b:7c:88:
8c:db:fc:dd:bc:94:f2:e1:d3:89:f7:f5:ae:f6:fd:
76:ed:8a:da:35:3d:c8:20:ce:82:69:44:7a:1f:a1:
5a:96:ca:0e:f6:59:08:fe:cf:16:25:2c:f8:77:77:
cc:a8:1a:f0:c2:5e:88:ca:f3:a2:c5:02:f6:db:3d:
b9:88:46:75:1e:ec:58:41:aa:59:14:ee:fe:91:5d:
7b:14:0d:49:3a:ef:e5:01:e4:7d:53:08:01:2d:4f:
7a:ea:91:7b:55:19:57:86:95:8a:c0:7e:fb:85:9f:
9c:c5:3c:48:27:7c:d1:9a:51:00:b0:d9:49:8c:e7:
18:c4:69:97:ac:31:75:62:ed:c7:14:37:af:7f:e2:
59:c7:a0:37:e0:a1:82:72:68:cc:3e:39:9c:ee:a8:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:E2:61:DB:9C:25:E9:AF:38:42:84:B3:9E:9A:B2:40:51:8A:7F
X509v3 Authority Key Identifier:
keyid:7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9e:bf:6d:99:8c:47:7c:88:4e:f8:1f:35:eb:c7:1e:90:25:
07:27:ca:01:c2:9c:40:e5:48:eb:74:b4:a8:15:41:aa:31:a1:
93:6f:62:9d:37:9e:50:9e:50:ae:07:d9:85:d0:d9:75:83:06:
f7:af:e5:30:a2:9a:4c:5a:1f:54:a0:f0:3e:7c:29:8b:bf:e0:
eb:f4:80:2b:92:2d:6d:5e:fb:11:e2:b4:7e:2f:74:53:06:8a:
a3:ce:86:9f:b2:3e:9e:77:44:46:cf:f6:1e:30:a9:b1:f7:71:
a5:90:11:4e:34:79:0b:be:4d:e5:33:db:2a:1e:74:45:39:4e:
72:1a:8f:d7:ed:19:fd:2e:b6:0f:b7:2d:88:78:da:19:d4:a4:
43:9d:bd:0b:6a:d9:1b:cf:bf:ff:c6:fa:14:5f:cc:1c:17:29:
e4:f1:f4:e7:d3:90:4a:23:0c:eb:6f:07:85:bc:d3:80:cf:06:
8f:e1:36:83:1e:c0:36:95:7a:77:01:57:d7:7c:64:ad:5a:3b:
6a:e8:e7:3b:aa:a0:91:12:d7:30:4e:ed:ee:ae:4e:5b:2e:54:
98:7f:25:3b:43:d6:4f:f1:ff:e8:2f:e0:8c:ad:1a:09:45:0d:
69:10:96:2b:6e:69:11:96:78:56:c0:cb:0a:b0:88:dd:25:3b:
6d:89:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:50 2025 by rpki-client