Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: cI3ki9+H7Ok4G9AKR096/H2MEcP2vIjzTeUcL0eGUvY=
Subject key identifier: 0B:71:DB:BC:FF:09:FC:D1:BD:38:B8:FD:C6:20:F4:FF:F6:12:9D:98
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 0194BC04DBB8E281F27A0E7A974D37DF1BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 07AC
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: PovQJIJibmha1TnfTjUupdTMlSvvnG6cViJkqeGLsCE=)
2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
3: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
4: qETAb5lD2BrwBYgFKn4sRpjJsG8.roa (hash: Em0GPd0fn0KOq831hF45Qbt3KIaRXBZcA1yb4F500Ec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:db:b8:e2:81:f2:7a:0e:7a:97:4d:37:df:1b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=0b71dbbcff09fcd1bd38b8fdc620f4fff6129d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:e0:10:67:2a:e1:91:72:2d:a5:c6:dd:06:
50:b7:b0:4a:22:7c:b1:91:7a:4a:02:64:2c:53:24:
f0:09:82:bf:2e:5f:cf:ca:61:38:69:5f:ec:41:44:
12:e4:cc:96:1b:58:1f:e6:1e:bc:b3:f2:54:79:02:
98:99:a5:bc:f8:83:cd:92:11:11:20:1f:df:92:01:
1e:0f:64:b8:e4:30:47:23:d1:bf:9c:da:f5:8f:95:
23:09:75:02:9d:17:5e:be:4a:25:93:06:60:52:7c:
6a:10:55:b0:a7:09:69:83:38:40:9a:1e:08:95:06:
5a:75:ef:06:10:ee:b6:84:4b:f6:e5:60:40:43:21:
7f:12:9a:e6:7b:47:2a:44:7b:3e:74:3f:ef:b9:35:
a5:d0:e2:99:2b:b4:19:b8:ac:52:3f:cf:d8:f0:96:
4c:02:c2:d8:bd:44:26:2e:2a:16:49:8d:4e:b3:fa:
ab:2e:3e:b0:31:e6:57:0b:eb:ad:da:18:09:78:36:
d8:22:2c:fe:a0:28:40:c1:f9:69:a6:21:12:0c:e6:
4b:c0:e6:e6:db:3c:09:8b:fd:7a:62:82:7c:48:71:
04:9c:78:15:c3:3e:72:d7:dc:2d:23:40:b4:66:ea:
22:3f:65:dc:0d:ab:c5:3a:72:5c:3a:bf:a1:87:7d:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:DB:BC:FF:09:FC:D1:BD:38:B8:FD:C6:20:F4:FF:F6:12:9D:98
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a7:cf:04:a9:80:2d:18:b8:e3:a1:d1:4d:63:b5:c4:db:dc:
84:35:2a:83:a9:cc:c2:0a:f2:5a:ec:3d:6c:c1:6b:6e:ad:50:
ea:13:25:38:0b:ed:d9:31:0b:53:4b:c0:f4:62:42:93:ae:2a:
63:0e:2f:14:34:d1:d9:62:39:ce:0d:3c:05:78:71:e6:99:73:
92:2a:a2:7f:46:a5:df:de:10:d8:d2:5c:49:4b:e5:7b:d4:1a:
6c:a4:ae:df:b4:94:5e:a6:dd:e7:82:be:78:c7:bb:b5:1c:ca:
bd:13:05:df:b9:6a:5d:ab:12:4f:8c:af:46:41:ba:57:74:73:
5a:8a:53:a8:0a:54:b9:81:2c:94:70:55:4c:75:32:e3:24:52:
c0:8f:24:cc:e0:96:76:a9:23:7e:2a:7b:34:44:5f:2d:f6:a1:
09:77:b5:79:3d:d3:d6:fe:86:c0:ba:0e:61:7d:26:13:44:f9:
f1:d2:ac:9d:b3:06:af:5c:d7:b7:48:77:7a:f9:04:fa:8e:ca:
91:d6:42:81:18:8d:19:11:6a:be:ff:fd:08:73:f6:5f:cd:9d:
99:f0:d3:f3:6a:7a:34:85:93:1d:7d:72:44:36:41:e0:3f:5c:
78:7f:36:bc:db:4c:28:76:9b:da:30:3b:8d:cd:e7:97:4c:bb:
c0:75:d5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:54 2025 by rpki-client