Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: 3BiO340StL8x9Rptre7IPrr+LuK+jzASKUtQVJyd+4c=
Subject key identifier: 95:D7:52:95:15:3A:6F:03:5D:B8:1D:96:42:F5:1F:3C:79:04:84:36
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 0194BCA99AF36355DC2BD55C00D3E9453AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 0F01
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: vMCHP+XY7nxjomgZEzFYi+62VftJKqTKS1EmT84Dz7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9a:f3:63:55:dc:2b:d5:5c:00:d3:e9:45:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=95d75295153a6f035db81d9642f51f3c79048436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:33:88:55:02:b2:33:65:11:81:87:6b:23:
06:b8:00:4b:08:78:d4:e0:22:44:a5:cf:ea:78:af:
b8:ab:b2:00:11:93:b3:6b:19:73:8e:c7:da:4a:da:
a2:bb:72:ec:ae:98:79:5c:a4:bb:07:39:f3:6f:46:
26:58:36:65:76:7f:de:e6:90:47:90:c6:35:2b:8e:
a4:b9:b8:bc:b7:83:3a:c0:c0:62:a1:f9:ef:be:e5:
c0:0a:8c:8b:32:65:2a:06:d2:2f:6f:0b:9c:3c:61:
f5:85:a1:72:1c:85:73:df:bb:83:19:fa:bd:c4:ce:
01:0e:2b:bc:d1:4b:68:a8:17:42:6b:10:72:0f:49:
47:37:55:05:87:6b:a4:b8:f0:11:72:64:f3:52:d6:
df:9e:d2:08:bb:11:96:8a:db:a4:2f:6b:0c:1f:b1:
85:a8:67:e6:2a:3e:43:ef:d8:90:87:9b:31:82:27:
04:aa:7b:bf:71:97:5e:d2:f4:55:52:e0:e7:21:18:
54:54:2c:d8:96:02:78:80:f8:c8:15:7e:c4:b6:63:
3a:8d:b4:c2:bc:6e:7b:4e:17:fe:ed:c6:4f:09:e0:
3e:7c:dd:a8:58:fa:02:40:82:69:88:28:f0:eb:65:
7e:6c:cc:5f:dc:ab:b3:9f:23:fd:1f:d3:1d:41:89:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:52:95:15:3A:6F:03:5D:B8:1D:96:42:F5:1F:3C:79:04:84:36
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:52:ea:a0:32:73:c1:a7:c1:67:b1:1f:64:70:14:4e:73:77:
35:5f:fe:fd:c1:f9:6b:27:ab:9d:3f:86:83:c5:a3:87:f0:1e:
7d:c6:85:b5:05:f7:8f:80:ef:51:48:43:52:c6:f6:90:45:17:
2b:e2:e6:75:43:b3:d2:d4:8e:e9:c4:27:8f:56:ce:98:4f:ce:
7f:28:53:03:e4:f1:8a:74:fc:4f:89:de:ec:d3:d5:c6:20:95:
ab:96:9b:f0:cd:b7:01:3c:66:92:b0:18:ba:59:86:51:bd:d9:
d4:22:67:0d:a7:45:b0:ca:23:9b:95:8e:68:79:e0:19:18:cd:
e6:e9:98:fa:46:d1:87:1a:fd:be:60:27:f4:f5:6d:0e:5c:39:
0b:07:b0:fe:92:1c:78:09:05:ee:7c:0c:df:b7:19:3b:83:b2:
0d:6f:26:0d:b1:b9:ab:53:99:f5:27:53:82:58:5a:0d:1b:77:
a7:03:3b:6a:49:b3:9a:c6:b7:86:4d:31:7e:d5:33:3d:e9:02:
f0:6a:88:cd:8d:49:e1:d1:f2:c5:79:3e:c5:03:54:8b:1b:a8:
3f:eb:9a:de:62:b8:9a:2b:03:83:c0:90:22:5c:73:04:a4:57:
84:ac:9e:73:7e:e4:9d:aa:51:7e:cc:56:7a:d6:bb:82:24:26:
f4:c4:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:33 2025 by rpki-client