Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: aI530ePBfBN6mso7rk1yj2rcJLxdxmsfOGnLXgBJPc4=
Subject key identifier: F4:3A:F7:BB:E0:48:92:85:20:5D:6B:3F:AF:A5:3E:8A:F4:B7:BD:DA
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 0194BD85385E4B7B821DB67AEEF0B2B2FC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 08B8
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: Cfkw5ZOdpeHw0fDXPEzjEjSqRkq5ljUw0Eiacap+6K4=)
2: jIeL0Ff1YswP2z65Y_1AGOy9fmw.roa (hash: OwVjmKWjz0aDaa4mX/kuMdsef7BkmTlqjQTaGRRWwQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:5e:4b:7b:82:1d:b6:7a:ee:f0:b2:b2:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=f43af7bbe0489285205d6b3fafa53e8af4b7bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:fa:d5:f3:e1:58:19:0c:33:f5:82:b4:b9:
2f:a9:66:a8:04:b9:75:9c:d1:03:9b:9a:10:e9:89:
19:8b:9d:20:a5:25:93:c8:a2:5f:f3:85:32:48:34:
14:65:d4:09:d6:40:a4:4d:33:74:d6:2e:8b:20:b9:
14:a5:a3:dd:30:cd:9a:7b:86:d5:5f:24:29:95:c8:
56:c7:5a:0d:5d:29:90:ac:89:27:66:37:8f:8b:0e:
3c:97:20:f8:16:ea:12:ac:4e:3f:41:eb:5e:9c:aa:
ab:ec:30:27:d0:a0:80:a5:30:26:58:3b:42:53:89:
1c:5b:89:92:b6:da:f0:60:6f:9d:b8:32:e6:f9:27:
ed:10:cc:de:f1:7b:23:a9:c0:40:64:07:61:04:e3:
74:3a:70:8d:89:92:12:ef:73:22:1d:01:a4:86:69:
db:29:0c:73:e3:97:47:e8:27:59:ad:48:e0:32:1e:
0b:c1:64:44:1c:ba:87:1f:05:4d:d4:16:e9:f5:1d:
d7:8f:13:be:d3:5a:02:b2:0c:35:a6:1e:87:a0:00:
f4:86:5c:d3:a6:6c:6f:bd:d5:aa:9d:2b:e5:e1:be:
23:4a:18:42:61:24:af:ac:ba:76:63:85:1e:15:af:
c9:78:5f:37:03:f4:04:39:bb:b5:8f:75:b6:d6:e7:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:F7:BB:E0:48:92:85:20:5D:6B:3F:AF:A5:3E:8A:F4:B7:BD:DA
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:e4:ab:01:af:1d:67:e2:58:ed:f6:ce:a9:b7:dc:1d:ee:
c1:bc:54:33:7b:ba:f0:8b:14:e1:84:b9:b3:c4:74:c7:9b:10:
b8:9e:df:75:e0:62:d3:89:4e:71:aa:02:c1:1f:67:14:e4:f0:
e9:f1:c9:9b:6f:88:93:74:1e:29:b3:d4:9f:42:a8:5c:ef:63:
31:f1:3d:2e:e4:32:75:2d:6b:81:8c:16:a0:a2:d3:75:6b:d4:
3c:d7:cc:56:a7:35:6d:96:c1:e3:89:4a:0b:80:02:c1:f6:2a:
4f:e6:f7:45:99:21:0a:d8:2d:b8:b2:3c:a2:e7:69:1c:b6:eb:
4c:d9:51:57:0e:d6:c8:53:1f:8f:31:78:96:08:77:f5:36:bf:
ef:9e:f1:a1:2a:28:a7:ae:ce:56:a8:e9:e0:9d:24:1b:4c:1c:
aa:a1:af:e1:fe:b8:af:86:4f:f9:dd:04:21:0d:5d:e3:e5:71:
46:4b:a9:9f:3c:bd:48:11:ec:96:f5:cc:60:38:fa:cc:06:b2:
f0:2b:c7:e5:b7:e6:ad:30:b0:fc:df:28:be:1e:40:69:f1:7a:
db:b5:b9:79:07:de:b8:9c:be:48:dc:e6:02:28:93:0c:f5:4a:
f8:0a:ec:eb:14:1c:cc:4f:10:cc:56:2e:05:98:db:d0:e3:f0:
66:5e:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:04 2025 by rpki-client