Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
File: 2rsdAWAvFSERMu1IGFqZs2IlEX8.mft (raw, json)
Hash identifier: 2HzsBxNQJVcmSfU8n7VSSWwKAd0UfCIV9/RJbT85H5A=
Subject key identifier: F4:49:E3:8E:BE:7B:FC:18:6F:21:2C:C0:6D:4B:ED:66:3F:CD:3E:74
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 0194BC72EA33B8C3CD9C5D8956C868051B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
Manifest number: 0C95
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 2rsdAWAvFSERMu1IGFqZs2IlEX8.crl (hash: QNYMGLVKIUpz41EjBrO0Ve3hQq/ThuLbhngCRv/Ydx8=)
2: 787WsGeG_PtOH4NifJLvSRcdjKE.roa (hash: LXK7T54I67xPwZvLYoiPIC1z9h7T9ebkz0cAqwvP0HU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ea:33:b8:c3:cd:9c:5d:89:56:c8:68:05:1b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=f449e38ebe7bfc186f212cc06d4bed663fcd3e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:5e:27:77:eb:b6:5c:3b:51:58:4f:1f:16:
a7:b1:80:d5:d7:5f:55:46:6e:be:cb:88:e0:85:f9:
7b:d8:e0:e2:1f:35:f3:94:13:d2:8f:98:06:98:d3:
1c:43:5b:1c:b7:00:c5:fb:30:89:1b:bf:ce:63:1a:
f9:e4:35:95:f1:e3:c8:37:5d:63:8c:46:a6:cb:cd:
4c:4b:57:0e:4a:16:33:a0:0d:7f:44:75:5a:4d:39:
30:51:bb:9d:4c:31:be:51:5f:ec:42:e7:bb:72:d1:
25:f5:44:41:d7:e9:8f:2e:f4:b1:a4:e0:6a:d8:b7:
51:6a:d0:35:94:6f:b2:46:c0:a6:c5:f4:6c:f4:0b:
f7:de:b3:8f:c4:6f:23:80:bc:24:a7:20:71:e9:5c:
ca:06:fe:b8:60:a4:b9:1c:0f:f3:9a:86:1b:96:f9:
1e:a9:a3:87:68:6d:07:27:29:bf:ca:aa:f6:7e:e3:
24:58:23:2c:67:c9:d3:d6:4c:d0:40:3b:e8:27:e4:
4a:c0:42:ac:fb:4e:a8:cb:99:cf:c1:b1:da:01:6f:
c0:76:7e:ca:77:17:5b:03:57:a9:95:fd:0f:a5:f5:
1a:fc:fa:d3:8e:c0:5d:37:f3:33:53:c0:48:d7:a1:
f8:b5:52:97:5a:73:4a:dc:46:65:76:b1:24:6d:34:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:49:E3:8E:BE:7B:FC:18:6F:21:2C:C0:6D:4B:ED:66:3F:CD:3E:74
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:69:8a:c9:29:3c:13:9b:1c:c5:da:63:01:66:5a:77:59:
48:ed:d7:0a:d9:29:0b:72:37:24:53:a6:00:74:ad:a5:30:fd:
4f:07:8e:71:17:96:c2:97:d5:b9:c6:0a:86:69:0f:9e:fe:4a:
87:62:1b:88:97:a9:8c:7b:ee:2b:98:5f:c2:de:75:a6:7b:ec:
3c:b6:95:c5:cd:fd:ea:ec:c1:5a:ee:39:51:08:02:93:8d:65:
36:0f:26:4e:69:0d:49:0f:f2:3c:b7:f1:fd:f7:cb:d4:7c:a8:
1e:72:bc:d7:69:28:e3:14:a5:0a:82:9d:a4:df:11:11:23:45:
a6:07:53:31:a0:41:fa:b5:23:92:3d:c1:7e:5e:54:49:b7:71:
38:0f:c9:5b:13:16:3e:d3:04:f0:1e:5b:37:e5:33:a7:c6:0b:
87:91:8a:63:f9:54:88:11:30:4c:89:da:22:cc:15:c6:e0:33:
b4:44:32:98:78:79:19:1e:f5:9e:0f:b6:bf:08:5f:31:1e:51:
07:cd:01:4e:e8:73:42:83:8d:01:cc:1e:d8:69:b8:5a:19:fe:
e4:62:5f:01:2c:de:48:cf:43:c9:2e:c8:0a:4d:51:d1:ae:7f:
6c:cd:ac:5e:f8:9c:a3:71:84:25:62:06:83:06:b0:60:9d:10:
6b:ab:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:00 2025 by rpki-client