Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: 5hdC/KLgdRwMdORsBqcZZ0eGQRc0X7Xn5TVFCBVq8nA=
Subject key identifier: D7:96:FC:15:2B:2F:2D:5A:24:99:5A:4D:3F:37:C8:86:2D:BB:14:3F
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 0194BBCE7D04412CCB23FF2106E5C00D75B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0678
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: RGlhC9UFkMssdh5QcaawTCV5dntTD4miLsmXQoO/zIA=)
2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=)
3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7d:04:41:2c:cb:23:ff:21:06:e5:c0:0d:75:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=d796fc152b2f2d5a24995a4d3f37c8862dbb143f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:33:e4:12:97:15:d1:8d:8b:d9:a7:6e:e3:
67:e5:66:c7:58:05:ba:28:e1:93:be:18:00:07:d3:
4a:b5:41:00:2a:3c:e4:de:a7:d3:c5:96:3a:39:17:
1c:58:c0:6e:0b:ea:33:6f:d7:6b:05:de:14:8c:d4:
0d:b0:d9:47:63:42:fc:68:0a:9a:1d:29:7d:ed:1f:
ff:4b:2d:bd:79:1d:bb:94:68:9e:4d:c6:de:4b:2c:
37:5e:b9:a4:31:b5:7f:07:75:25:ec:36:13:6a:dc:
d7:18:a4:d6:78:ef:ff:ea:17:78:aa:3f:17:80:f3:
b9:da:54:b1:35:80:a4:2a:be:17:96:8b:27:23:19:
8f:b0:a9:fe:5b:2b:60:e0:5e:1a:51:c5:51:c2:5e:
bc:1e:29:59:04:bb:f0:d5:8c:b3:33:66:97:95:73:
e9:2f:7e:98:22:f1:f6:8c:1b:7c:62:91:60:26:e2:
0f:6a:88:05:0b:a5:ee:a4:f8:47:01:26:1c:7f:24:
23:07:99:2a:99:0c:6f:da:87:48:f8:b6:c8:40:cc:
f3:78:75:47:fd:95:d1:4f:ab:60:5f:7e:b5:2d:44:
6d:58:90:74:32:15:c2:77:5e:c3:68:5b:be:e4:f5:
82:8e:a4:7a:f1:30:ad:90:73:b7:9a:76:a9:86:f0:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:FC:15:2B:2F:2D:5A:24:99:5A:4D:3F:37:C8:86:2D:BB:14:3F
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:44:c1:ad:97:b5:33:df:cc:a6:ce:02:78:fa:f6:45:45:b3:
a0:ea:61:e4:49:4d:a1:55:36:e2:28:c4:a4:15:76:55:46:ad:
af:6f:39:9d:9d:d1:4d:d3:4e:fd:b5:fb:63:db:ab:a1:69:f7:
1c:6e:16:d0:fe:12:b2:ff:ee:c7:55:a6:b7:ea:b6:03:3d:eb:
20:a8:7e:e3:cd:67:36:34:1e:20:da:30:6a:50:a9:90:08:5a:
38:48:b1:d9:9a:2a:f2:27:32:89:02:f3:20:7c:9d:33:7d:40:
a8:60:0a:7e:d3:a2:c5:16:d3:f6:f4:74:0e:7e:ec:6d:1a:e5:
75:9d:db:dc:9a:f4:d3:b3:6d:09:14:12:da:ea:70:83:fe:49:
d1:27:d7:73:3e:dc:d2:82:3d:2c:9b:1b:65:6d:4c:7f:c8:3b:
f7:11:06:ac:a9:23:94:1c:d3:69:13:13:e1:ee:e7:0d:07:23:
b3:2c:07:89:2c:82:56:95:38:be:0f:dd:6f:b9:34:68:91:b9:
a0:89:39:80:0f:e6:3c:ae:20:47:ca:e3:55:8f:e9:b4:2b:00:
7c:b4:d7:76:40:8d:40:f4:4a:b1:0b:f8:a9:61:8c:f3:52:d6:
c9:e2:7d:b1:f1:c7:c2:c3:4f:d9:11:31:87:22:6b:80:d4:2b:
7f:c4:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:51 2025 by rpki-client