Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: mGfqOCgRHg5DnkaER2iZ2meu5X7/5rhzLLDlo9s0rWE=
Subject key identifier: CB:F8:99:0D:4F:D6:88:76:97:F3:97:04:43:A5:F4:6C:85:5A:70:3F
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 0194BBCEBECAB9E64838706E99FEE9AAABE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 0666
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: c38WEH2PAv49ZN7B9MHXGAA7+QXW1UnMKKZ3Sz8M2VI=)
2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:be:ca:b9:e6:48:38:70:6e:99:fe:e9:aa:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=cbf8990d4fd6887697f3970443a5f46c855a703f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:c8:b9:ea:a5:dd:a9:07:0d:0c:83:ac:01:
95:e2:82:97:91:4b:ef:0f:a9:5c:2d:62:e9:e3:3e:
ed:a1:b0:16:76:92:da:4a:ac:8b:99:eb:f1:22:c0:
ce:f3:50:b9:03:e4:46:11:ba:f0:51:55:8d:55:23:
6f:53:ef:ff:4d:c1:a9:04:74:9d:19:37:7c:53:5d:
67:9b:d6:92:a5:89:f1:a1:29:89:18:56:f5:81:d4:
d0:4c:9b:f4:75:b8:1e:1a:31:c9:ed:23:19:0f:9c:
b1:c7:9d:65:0e:81:64:28:a9:5c:4f:89:36:be:7e:
00:92:59:ea:ee:c5:26:6b:c8:92:47:b2:0b:a1:ff:
7f:fe:4f:b9:3d:11:03:ec:67:64:52:fe:a6:90:e7:
e5:45:3b:36:f3:b7:76:8a:e5:5b:4b:39:5a:10:5f:
27:e7:4e:7f:36:00:8f:a0:d2:6a:85:e7:1e:75:a0:
9f:c6:13:21:c6:d8:47:6f:30:80:a1:c8:5f:84:72:
c4:f8:f8:f6:8f:03:46:26:b9:4e:b2:c1:dd:33:d4:
b9:0c:0f:41:13:c0:9a:15:06:c3:91:0d:04:54:b5:
e9:e0:c6:24:02:7a:08:1f:59:ae:5f:b7:33:70:7a:
b0:df:5b:f6:82:7d:e4:ff:88:c5:ac:a8:c8:df:20:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:99:0D:4F:D6:88:76:97:F3:97:04:43:A5:F4:6C:85:5A:70:3F
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bd:86:3b:a2:2d:86:92:26:89:80:b7:03:a0:17:1f:29:91:
b4:62:6b:a7:6f:8e:46:49:80:23:79:8d:42:11:71:f3:21:3b:
80:a4:b5:97:cc:f0:46:ff:27:18:f6:ad:c4:43:16:48:1a:c4:
29:a6:53:4a:31:5c:cd:ac:43:36:05:f7:8d:3d:23:85:87:ea:
5d:89:9f:89:9c:1e:8b:e8:d1:23:87:c0:8d:a8:90:75:c9:cd:
45:71:19:9a:41:61:7a:b5:75:b0:17:4a:24:1a:a8:19:66:5d:
d2:7b:32:36:c3:4d:7a:a2:91:57:1f:34:e7:65:bf:7c:23:ef:
99:77:eb:a0:70:42:f9:4e:27:3b:56:fd:1c:0f:c4:c9:b6:57:
41:ce:39:7b:a2:9c:ae:8a:39:f6:46:61:99:ea:a7:53:ca:3d:
61:e3:48:f7:5b:16:14:9b:1a:47:39:26:d3:d5:ee:5c:84:b8:
78:9f:bc:6a:c7:45:9a:0b:c8:77:eb:5f:c8:03:d4:94:dc:d8:
98:75:85:05:0b:dd:e3:6b:4f:cb:a4:2b:05:59:99:83:53:a2:
b0:42:2c:e0:b4:47:8a:68:7f:ee:ff:82:57:a2:8a:d0:fd:aa:
4f:2a:c4:4f:7b:1d:60:10:ae:2b:ca:5c:08:1d:89:e7:9c:09:
a3:83:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:06 2025 by rpki-client