Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File: 2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier: vrkemLXJ63pWhgHJ9S/0HHiw3lIZg5Toa6XxoNUuYWw=
Subject key identifier: A3:86:EF:28:74:F6:BC:D6:99:C6:9A:EC:F4:96:C5:EE:C1:60:0A:6F
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 0194BD859A8410C6C16CA6627E33E0CA0CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number: 01ED
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: /YAU8WR+PzQGt8SYk8V8JIhQdjQM0HPdfel5hCO+e6o=)
2: MnAFAkCtgzLcYcNFwN10QWcGsK8.roa (hash: 6b6kNF5nIgi+BcUotmCWsx7IX4qtT26omA/Wf9SJHJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:84:10:c6:c1:6c:a6:62:7e:33:e0:ca:0c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=a386ef2874f6bcd699c69aecf496c5eec1600a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:f5:f2:6f:70:e0:59:57:e4:e5:7a:fa:05:
b4:f7:51:40:cc:4c:61:6b:ac:27:c3:18:45:5d:76:
78:c7:5d:61:c2:a6:fb:3a:d7:8c:95:9b:31:c0:89:
b0:ab:9b:ba:06:63:7a:bb:c7:5b:a5:85:7e:cf:03:
38:a5:14:4a:f1:0c:e4:45:c1:cd:cb:02:f9:9c:70:
8f:da:d6:bd:0b:ed:70:f1:75:c9:09:d6:3a:ae:ad:
7e:e2:26:3a:12:53:a9:dd:ea:90:c3:8f:e3:ae:59:
21:bd:1d:87:80:d8:f9:92:ca:22:fa:42:98:c4:71:
d5:e3:a5:36:6e:9b:36:99:f8:ec:b0:89:2f:d3:e0:
58:4e:50:03:c1:a6:42:46:6c:56:4d:2f:f5:36:02:
06:8a:de:d4:7b:9d:eb:11:4e:be:3a:9a:ab:5a:fb:
21:41:78:85:99:6a:d5:e4:67:44:65:e1:fc:8b:cb:
ef:5e:02:10:90:88:45:0b:f4:bb:77:8a:c2:77:ae:
d2:95:44:7b:61:b9:16:fa:d5:28:a6:b2:e4:e9:95:
83:2a:9b:cb:85:21:e5:25:6f:4e:1e:04:c3:43:33:
26:3a:2c:f3:44:55:74:09:31:e8:60:55:24:a7:bd:
d7:01:96:d1:23:42:eb:b9:70:49:64:9a:e7:f7:e5:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:86:EF:28:74:F6:BC:D6:99:C6:9A:EC:F4:96:C5:EE:C1:60:0A:6F
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f4:ba:3d:6e:a3:fa:96:24:76:1f:49:02:dc:ad:37:94:f8:
8c:d3:53:ed:78:a2:72:06:f8:73:8a:6c:63:46:ad:b3:99:d2:
1b:39:67:6d:29:cf:ec:36:cf:27:76:b3:fe:98:5f:88:fa:4b:
b9:cf:ac:b5:73:8e:9e:4c:8b:23:2f:8f:29:0b:33:34:f8:f5:
71:49:c0:07:92:62:3e:7b:cd:2d:ad:d6:72:5b:aa:6d:f2:a9:
d9:7b:03:a0:8d:57:3b:a8:83:b6:e3:ef:40:b9:45:5c:45:3a:
4c:eb:89:d1:0d:07:ef:d1:3b:ad:33:c0:ed:a7:52:6e:55:b0:
14:b6:97:9c:a6:a0:ac:d4:59:4d:e8:cc:43:d7:27:49:e5:4a:
e1:ff:94:8d:b4:c7:68:38:84:43:0d:58:ac:36:30:7e:9e:c5:
fd:8a:de:19:e6:0c:e6:a8:fa:2e:da:71:8f:68:1c:a1:4a:be:
69:44:f6:b8:26:b6:37:6e:1d:a9:d3:69:75:34:a1:cf:fc:41:
de:72:0b:8e:e9:2f:f6:5e:0c:8f:45:e7:80:a6:f7:13:44:66:
5e:d9:55:79:b7:04:24:95:8d:74:78:07:f9:fe:09:89:cf:11:
eb:47:a2:aa:40:bf:ce:f7:d2:74:f8:fd:72:6f:dd:38:bb:fd:
f8:db:3f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:07 2025 by rpki-client