Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
File: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft (raw, json)
Hash identifier: 6pC4V7/nezVS8AffenztWPfwR8ePqCf7lfr6vlW8IoI=
Subject key identifier: F9:66:E4:6F:07:32:E5:21:96:69:CE:02:30:7D:A9:DA:C1:35:15:90
Authority key identifier: 93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
Certificate issuer: /CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Certificate serial: 0194BCA9EE7EAAC10218CA22133F980C5CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
Manifest number: 05EA
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: 72kD6ayiwmeGoKhRrPZ__Tt9XCE.roa (hash: NSNmGWvd47OdXbtIhhCClOKph/GtDH8ixZuXdVjE5+w=)
2: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl (hash: KPjRMX3mw0IGvUrm+Awf20RIIcddIe87RwxjPknO8m4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ee:7e:aa:c1:02:18:ca:22:13:3f:98:0c:5c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=f966e46f0732e5219669ce02307da9dac1351590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:c2:5d:2c:34:8e:70:d9:60:14:f1:a4:cb:
3b:c7:b8:a4:11:dc:d1:d2:24:24:5f:56:9c:a3:6a:
26:a9:5c:de:f0:88:97:90:5d:aa:3f:ee:95:c3:19:
65:f8:ca:d2:e4:92:60:7a:7c:bd:43:2b:ad:f0:ba:
fd:a4:ce:9a:80:46:1e:df:61:e6:58:4d:7b:49:c8:
4f:44:6f:83:73:b1:68:10:05:b9:78:f5:c6:e8:46:
0d:85:45:79:e2:97:93:00:34:20:d0:2b:82:f6:95:
8a:3d:60:24:00:01:45:ec:7d:79:a0:64:dc:33:bd:
35:80:5f:ef:dd:fd:8b:9e:c9:67:b0:86:0b:3c:cb:
34:fb:8e:b6:c0:62:94:a7:e5:93:2a:ee:bf:87:a0:
c9:e6:ca:7c:9d:90:2b:05:88:33:48:06:d8:27:c9:
7b:4a:90:50:e0:81:32:65:55:5a:af:dc:66:2d:3e:
e2:94:af:80:bc:cb:30:73:20:9c:b0:c0:6f:47:fb:
25:a8:6e:fd:c1:ae:8d:c0:51:00:9b:2b:50:bc:5b:
ff:85:fd:55:a1:73:bb:5c:49:a5:b3:f3:81:30:c7:
65:82:25:11:49:23:f5:f3:90:76:3d:1f:e9:e9:75:
d6:e4:8a:f8:df:71:6c:cd:13:0f:9b:e2:6d:35:6c:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:E4:6F:07:32:E5:21:96:69:CE:02:30:7D:A9:DA:C1:35:15:90
X509v3 Authority Key Identifier:
keyid:93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:90:5a:c1:12:7d:84:bd:22:ef:9b:31:1f:67:d7:20:8e:2b:
ac:05:72:cf:31:ce:22:c8:c7:ab:78:1c:07:f4:a4:ae:5a:c7:
db:ae:62:b2:2d:81:2d:4a:cd:42:69:cc:24:22:fe:32:f6:74:
47:fd:d9:e5:5e:14:bd:dc:ed:65:5a:e2:1d:1b:9d:e5:f6:1e:
a4:73:28:fb:4a:ef:39:f5:b9:21:f1:dc:1d:53:47:9b:8d:dd:
4f:d7:f4:47:7e:fc:af:3e:66:1f:9c:7b:6b:84:46:62:5d:03:
6c:f9:fc:ce:c7:b4:98:fd:52:ee:bb:4d:a8:00:52:92:cb:64:
ee:b9:29:f7:78:33:09:84:5c:d3:8f:3a:0f:f2:23:0e:fb:7c:
c0:b0:e0:af:42:9c:f8:31:1e:fe:e6:fe:80:40:52:8d:02:4c:
bd:3e:72:e8:85:ee:37:8a:83:ac:c7:27:02:16:d5:25:f1:e9:
6f:98:a7:5d:97:c0:9c:b6:08:75:9e:f3:38:44:43:35:fb:60:
26:e0:b8:95:51:5a:31:1a:38:91:34:51:07:7f:df:73:2e:2d:
b7:50:08:d1:27:f7:82:46:ef:50:4e:e8:74:d2:19:0e:02:2c:
b7:91:0f:b7:a8:ca:d0:d6:15:3f:0c:ff:8a:75:28:3c:06:39:
cb:80:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:58:04 2025 by rpki-client