Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: csj8PjTMl3ZejpkDqI+Jdbc49xLaKuhWt/zYfnrUvLM=
Subject key identifier: 20:07:68:A9:89:84:30:3C:C8:09:96:7C:79:BB:29:38:C1:1B:45:E4
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 0194BBCE8256BB589FEDBF1F114B9E76897E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 0530
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: B2a1+3Mj6ASXaOqYoTBl4M7q+cU8AnthKxNI2QGLz1Q=)
2: VyRcdQegnHw4kuW58Uqx25GobPA.roa (hash: lC++tHS3x+n6tHU4vit/ETgEcE0Z4ZJ+bg8pO+7AhEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:82:56:bb:58:9f:ed:bf:1f:11:4b:9e:76:89:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=200768a98984303cc809967c79bb2938c11b45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:54:bb:ce:7f:85:7c:4b:de:8c:25:fc:a8:
75:e3:ec:e8:60:4f:d2:2f:05:db:3d:36:39:29:fb:
c0:e9:a9:76:e5:e9:0b:82:47:ee:15:c7:18:23:2b:
d6:0f:1a:68:86:f4:05:e1:c7:3e:d4:ea:ac:35:66:
9f:58:ab:c1:3b:e0:a5:0e:a8:5b:79:8d:12:be:49:
7c:b2:b9:e9:12:21:da:14:a0:66:91:9c:3d:6d:53:
9a:f2:64:7a:d9:f2:27:63:70:cf:db:b5:42:69:da:
6c:63:77:ac:f5:b8:fe:8c:02:56:6c:db:39:93:29:
82:e6:83:aa:ad:7f:f8:20:bb:f1:dd:30:e3:69:ad:
70:aa:62:52:11:3c:c9:a8:27:f4:8f:c8:e2:15:f1:
3d:e3:27:5c:83:a9:25:3b:15:54:6d:a7:f6:54:37:
5a:af:fb:1a:64:45:12:a4:f6:29:43:6e:7d:bc:21:
90:25:70:34:05:aa:a0:7c:a4:d1:10:6d:0e:50:68:
92:9a:83:e8:b1:d7:90:51:67:c6:15:56:77:a0:45:
07:cb:42:96:18:86:9c:b3:59:47:85:de:c8:59:3f:
b2:69:81:65:9c:fd:28:5d:89:6e:90:ab:ae:32:cf:
fc:23:7b:fd:ac:a2:81:72:f7:1d:d7:31:18:a2:68:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:07:68:A9:89:84:30:3C:C8:09:96:7C:79:BB:29:38:C1:1B:45:E4
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9b:54:8c:69:bd:6e:9a:9e:9e:e2:0e:aa:96:9d:56:1e:ad:
9b:43:4e:81:58:e2:01:48:15:ba:9f:65:66:8b:a2:db:88:c8:
14:4b:3d:a1:3c:7e:03:50:25:e8:f5:c7:be:3f:2c:18:e6:6b:
38:76:93:94:db:05:dc:80:2e:96:1d:ee:88:08:71:a8:a9:90:
d6:c3:13:70:96:b4:e7:1f:3a:6f:b8:e2:f0:ef:79:09:07:e9:
3d:dd:72:63:6e:57:da:03:59:cb:97:00:98:fe:1b:b4:d9:00:
c7:0f:b3:7a:8e:3b:d7:62:f4:0e:50:41:15:30:20:b1:3b:c2:
8e:51:8b:50:2a:56:4c:c9:cc:7e:01:14:28:5f:13:cb:aa:55:
a1:b9:97:51:71:22:bb:c4:9c:eb:be:2f:69:22:fb:bd:f1:67:
bd:4a:4e:d3:02:19:14:e9:80:48:3c:34:70:0a:4b:3e:ed:cd:
49:44:f6:53:94:c0:a4:39:87:12:e2:db:5e:9a:14:3d:3e:0e:
d3:06:eb:89:ff:bd:cc:ca:60:24:19:25:96:fc:40:72:79:e1:
9c:b4:cd:9f:38:2b:ec:98:8b:42:4e:dd:4b:0b:c4:e0:df:01:
50:98:50:31:c0:87:68:7d:6a:ed:fe:3c:94:df:02:92:9a:2e:
16:59:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:56 2025 by rpki-client