Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: +dwFzkWHd8Z5ToBqXP0YLw5KjlM2m4Sl0YGj3LjK0AA=
Subject key identifier: 5D:6B:0E:0C:17:5B:E6:21:0A:49:B8:3F:AE:1A:91:6F:B5:41:E6:DC
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 0194BCE0B0C32923833FBAC22DE0FE98671F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 0E88
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: Bv/OBD6bizIRLix8q14h97tWGyQ3vF3Sk+/9s0dpCIQ=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b0:c3:29:23:83:3f:ba:c2:2d:e0:fe:98:67:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=5d6b0e0c175be6210a49b83fae1a916fb541e6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:64:d9:03:79:5d:69:7b:b5:49:49:71:ba:
18:7d:ed:a5:c9:dd:99:5f:a2:ca:66:8c:e4:6d:d2:
5a:18:fb:8c:1b:00:1a:4f:9e:7d:aa:ee:fd:34:e9:
07:9c:30:c2:47:4e:68:a6:45:ef:5e:de:06:98:90:
d1:de:60:08:00:1d:24:52:95:ad:a8:5c:6c:c7:09:
97:52:7f:84:2b:2c:fa:df:41:7f:3e:07:d9:62:96:
d3:af:e9:f5:a2:ca:3c:de:00:92:00:eb:ce:cd:c9:
0c:4a:73:5d:38:ac:7e:40:96:db:91:b2:6a:b6:1d:
0d:25:e9:b2:5e:31:90:13:5f:07:01:3f:f9:ca:64:
53:56:be:4d:ae:98:d3:a8:bf:dc:a7:75:ca:3e:b3:
ba:74:ea:48:5c:8e:7f:06:43:9f:79:fb:7b:37:1e:
bd:8f:00:14:38:91:c5:6a:d2:1c:0b:fa:18:9a:ef:
e0:1f:a1:92:ea:05:77:34:49:b1:4a:b6:66:df:91:
be:ad:c8:0d:78:a3:a1:76:17:2b:f4:d7:47:6b:5d:
55:8e:ae:41:f4:67:5f:0a:9c:33:82:61:e8:22:d4:
88:a4:9b:a7:13:48:30:f8:1d:b3:2e:27:6e:00:66:
cf:13:ce:d6:d9:85:6e:de:e4:b0:75:72:85:1c:ba:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:0E:0C:17:5B:E6:21:0A:49:B8:3F:AE:1A:91:6F:B5:41:E6:DC
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4b:1f:89:e5:c3:e9:a4:8d:b7:94:c7:88:48:47:6a:db:03:
57:d0:e8:7c:09:42:5b:65:ab:3f:2c:0b:1b:9e:66:07:3b:98:
b7:49:65:ef:3c:1d:c4:89:b2:ee:e0:70:65:8c:93:2e:21:21:
fb:df:e5:0d:4e:0b:d0:96:2d:ee:28:b7:38:da:fb:ae:25:77:
07:86:b4:f0:0f:d3:65:86:68:78:b1:df:42:3c:eb:61:04:ff:
56:2d:a0:3b:01:c6:98:fe:dc:53:8e:b0:06:63:f4:b9:0c:ed:
05:2a:26:83:e3:80:9e:e4:1f:69:df:9f:7d:97:3c:21:2d:cd:
e7:da:09:57:c8:09:1c:f5:77:16:84:55:2a:da:53:65:a2:f8:
fb:ec:6e:ef:1e:00:be:f3:d1:b6:f7:f8:76:58:a1:ae:d6:6a:
8b:36:67:34:fb:ec:70:58:63:70:86:12:c9:d8:27:36:df:3a:
6c:3d:f0:4d:e9:9d:99:18:26:05:89:19:b7:36:8e:54:34:b7:
c9:ce:ac:ff:86:e9:06:a2:62:b0:03:ad:b1:d1:00:3c:c4:c0:
a8:27:98:54:14:5e:d3:c7:79:58:dd:2e:c8:25:1b:4d:4b:b7:
00:27:1e:b0:59:8c:cb:54:89:02:f0:31:ed:1e:6f:e3:ce:d5:
b2:24:45:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:01 2025 by rpki-client