Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
File: 2O6yCogM20lOnmLUOy7yjJDLnu8.mft (raw, json)
Hash identifier: pgC38hkiJ69996lk0F987LWZYQlDzUSWNObu28rYhFw=
Subject key identifier: 8D:06:0E:47:BC:87:E4:7D:A6:49:19:D2:B9:72:8F:6D:A6:FC:4D:7B
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 0194BD4EA91002E7988F691B5E599B6F9E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
Manifest number: 0328
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: 2O6yCogM20lOnmLUOy7yjJDLnu8.crl (hash: MKdJSPTR6dzedRlc/6piHhSZapuAKdQk1kmfvVUw6fU=)
2: vCMAQMWIPZtWaDRHudCKdYaPL5w.roa (hash: K6MAg/QPc/fQfWH2rJi0K6eyKZU04FRZSEew4e4aMTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a9:10:02:e7:98:8f:69:1b:5e:59:9b:6f:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=8d060e47bc87e47da64919d2b9728f6da6fc4d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:d4:38:0f:e2:3a:9a:d5:07:71:28:fe:9e:
d9:89:e7:22:19:1a:1d:7a:e6:8e:60:47:68:6f:6f:
01:85:6d:2a:e7:ac:7f:45:53:22:78:5e:33:a9:db:
56:1c:fb:d6:93:7a:04:e5:89:72:02:91:64:2a:74:
93:5f:f6:37:eb:93:ff:54:2b:8f:4e:6e:16:85:a9:
34:a4:81:c8:2e:45:86:a9:d1:b5:d4:8b:0c:70:db:
ca:cf:5b:0c:6f:b1:f6:2d:03:2a:c0:74:1c:c4:03:
ea:f3:d2:e5:38:b1:49:f0:b3:38:e1:2d:b7:d3:98:
8b:87:94:37:d7:06:1c:ed:36:97:4e:09:07:e7:89:
77:d0:dc:0a:36:0c:9f:0b:06:85:8f:56:64:d0:42:
70:65:fc:5c:c3:45:fe:80:85:90:c1:87:74:81:36:
fa:ce:b6:14:72:ea:6d:37:75:fd:ca:c9:c5:c3:59:
8f:72:fb:22:9e:be:4f:b4:06:3d:b5:4c:98:c6:9a:
ae:5c:b5:55:e5:5b:00:89:48:62:18:26:5a:31:8f:
23:43:a1:6d:52:15:f9:98:77:fc:0a:31:67:a5:84:
7f:9b:d3:48:ba:2f:81:d5:6b:12:1d:2d:63:e7:bd:
45:a8:13:c4:a0:f8:cc:1a:0c:a1:2d:bb:f6:df:23:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:06:0E:47:BC:87:E4:7D:A6:49:19:D2:B9:72:8F:6D:A6:FC:4D:7B
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0d:5a:12:79:0e:73:b7:6a:0b:19:76:c1:9c:3b:7e:51:e8:
35:37:8f:3e:14:66:af:60:70:74:cc:65:ab:5b:14:66:16:5c:
da:3b:96:2a:49:bc:52:bf:31:c3:05:6f:bd:93:ab:bd:34:4b:
90:be:c6:8a:9a:de:f2:c2:eb:74:2e:8c:99:55:8f:3d:df:e5:
c9:c6:35:b4:0f:61:1f:f4:1c:3f:fa:19:46:2a:ba:ed:e7:1b:
a0:88:ee:78:6f:3e:e1:2f:76:90:3d:c0:58:3e:31:88:7c:d9:
f5:71:6b:84:fe:ff:a2:4b:18:10:9b:71:ff:b6:5a:09:9c:e2:
e0:e3:53:b0:7e:2b:f0:4f:0e:53:ca:51:8f:d9:98:9c:5c:4c:
f1:8c:17:9a:45:9f:41:23:f8:7d:61:02:5a:07:b7:c3:33:79:
8e:a5:68:19:ff:7c:ea:67:9c:7b:58:fe:a7:75:f2:85:dc:f6:
bd:5e:8a:7e:0d:9a:b6:d6:9f:4f:79:33:bc:11:94:f7:ee:33:
29:d7:46:80:a1:41:28:e4:34:b7:f6:c3:26:f7:cb:35:86:2b:
30:88:d1:13:82:b2:e8:33:3e:a6:b9:29:7e:81:03:e9:5e:87:
ca:05:34:fe:b3:00:20:4f:49:17:7f:1a:64:5a:66:26:d9:f3:
bd:bf:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:52 2025 by rpki-client