Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
File: 2KVuLWOsXam-012gHL-tIl8EvrA.mft (raw, json)
Hash identifier: cXQBoo30zkeCtbJB/FQxMXORTtU/KhV8biVvEAs27qs=
Subject key identifier: 49:94:92:82:84:51:B6:F8:99:08:37:70:FC:A9:DB:7D:18:DC:1B:8B
Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Certificate serial: 0194BC72ED7E112F6ED0B1BD3CFBE19A3211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 2KVuLWOsXam-012gHL-tIl8EvrA.crl (hash: tjVRNw7Aushz9tuoU0PducDapbv/7aV7Ho6Ew48WydU=)
2: RCebozhiTcCblvotMpWCdCJ1ob8.roa (hash: ZFZoBEoVJHz2x12TIIxXed5WibUd/7/bBstI8X2ocJo=)
3: nQS504JwOxjiWHwncxw2UXqZAyw.roa (hash: 3N4RSXWIhF3ipth4gfwK0f71CjoGPMdi4/hqfhot2X4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ed:7e:11:2f:6e:d0:b1:bd:3c:fb:e1:9a:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=499492828451b6f899083770fca9db7d18dc1b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8e:55:0c:93:ac:c6:db:95:00:68:8c:61:bb:
98:8c:6c:db:53:8e:8a:f4:1b:30:c6:f9:e4:b1:01:
0a:16:61:bc:8a:6b:f5:de:83:ce:c4:7c:0a:e9:45:
b1:89:f8:ce:cb:e3:13:d8:e9:b7:41:ea:d6:05:fb:
cf:11:0f:8c:98:70:cc:a8:fa:98:a8:4c:e6:e1:66:
45:01:3f:5b:ab:4b:bb:b5:2a:71:e5:1c:c1:91:aa:
9a:51:ae:57:2a:90:8e:e7:95:6e:b7:27:d6:ba:57:
08:86:49:85:cd:7a:c3:af:a4:6f:2b:6a:c6:ad:10:
fb:dc:a8:c2:39:19:20:23:34:f5:e5:cc:29:ff:5f:
cf:ba:7f:89:d6:a9:cb:39:c9:a5:55:65:e2:7a:a2:
f4:a2:7e:5f:0f:b8:f9:77:07:75:31:75:97:46:3e:
b9:0e:6b:7f:30:83:db:23:44:7f:96:55:20:fb:73:
6a:cd:3a:f7:53:5f:c6:46:b1:45:7e:be:ae:9b:c6:
ca:a7:ec:34:94:47:0c:84:c2:34:2e:3a:87:45:7e:
20:44:39:1c:d5:a1:6c:46:0c:5a:2c:b4:96:2c:f8:
3b:19:8d:7f:88:27:e2:6d:cf:1c:bf:dd:49:51:a9:
20:2d:d0:50:30:5c:65:ef:c9:76:c1:10:2e:bd:bb:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:92:82:84:51:B6:F8:99:08:37:70:FC:A9:DB:7D:18:DC:1B:8B
X509v3 Authority Key Identifier:
keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7c:30:39:cb:eb:13:dd:b5:13:0a:b8:ff:ca:e9:f3:b3:a1:
f9:33:15:e9:62:e4:7c:99:dc:aa:b6:e0:cb:03:2a:cf:9a:24:
5c:65:5a:1d:e0:34:96:d0:ef:a5:1d:0c:a4:f1:fb:3a:56:b1:
6a:8b:d1:62:f3:18:4f:56:21:ce:79:a7:e8:a4:10:2e:5c:36:
2d:43:40:b8:51:03:e2:31:70:a3:28:34:bf:89:9a:24:ce:df:
b9:54:51:fd:34:54:b4:e6:b9:71:dd:73:10:fe:7f:9e:06:2d:
cc:1b:46:99:71:2e:c7:ad:38:6b:d8:7d:d5:bd:dd:21:9d:52:
54:4d:45:0a:a2:82:eb:74:f5:8c:bc:b4:0e:2e:b9:78:7e:af:
57:95:b0:51:2b:ac:64:ed:50:02:e2:4d:f3:c7:e7:3b:3a:c1:
ee:1b:7d:d6:2b:f9:fc:0b:55:ae:40:97:a6:80:10:d8:48:53:
9e:53:19:6b:6c:3e:a6:3a:86:33:30:bf:50:dd:87:1f:7b:17:
bd:f5:de:98:e4:2d:a7:7f:fa:19:f6:84:7c:d5:e2:e8:f4:f5:
e7:aa:cb:17:d0:d2:29:3a:8d:ff:76:2b:a5:e8:f4:e9:57:c8:
74:ab:74:ff:13:15:f0:10:9e:b0:02:05:b8:80:6c:94:b0:19:
25:a1:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:03 2025 by rpki-client