Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: I3eRrcqyHx7e9mjfEqrOJzLvjmguz/l0kjM2lkF6694=
Subject key identifier: 68:F8:95:12:7E:1E:3F:F1:AE:7E:3C:0B:08:27:D6:5F:70:13:F7:C8
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 0194BC72BACC0CA55DC8E620510344DA6A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0589
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: THb6FdRNFECSNzFFPT0N5UUCiJ1vHzceGBa5npf6414=)
2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=)
3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ba:cc:0c:a5:5d:c8:e6:20:51:03:44:da:6a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=68f895127e1e3ff1ae7e3c0b0827d65f7013f7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:3b:19:f5:bc:67:a2:67:0d:dc:ca:a0:d5:
8e:c3:8e:2d:c3:e7:ce:a8:e9:76:ed:85:fa:60:a8:
c3:c4:5d:a6:25:e2:0d:1a:3e:fd:72:84:35:b9:e4:
99:c9:c1:18:c0:b6:9d:c1:86:03:bd:cf:d5:d7:b7:
49:b3:82:a0:2f:51:d0:d1:ba:98:56:8c:75:9d:3d:
ae:5d:0e:1b:f0:24:c5:47:b5:99:cd:fc:d6:25:77:
1e:3b:f6:cd:1a:60:a7:55:c9:c1:b2:4f:e4:e4:53:
ca:59:d5:4d:23:05:c7:50:5c:8b:f9:39:d0:57:ea:
ba:1c:76:77:86:1c:56:34:a7:f3:3e:32:3a:80:1b:
05:4b:b3:5b:f6:d2:37:06:04:d2:fb:95:bf:7a:20:
ed:8b:c4:90:d4:6d:68:14:0b:6d:ce:60:d7:71:d8:
bb:78:1a:b8:60:d1:61:0d:b7:7e:1f:90:ce:d9:ca:
6d:d2:9a:50:b2:c1:b3:e8:24:08:33:dd:60:d2:93:
35:2b:cb:d1:97:1a:4a:18:93:cf:16:36:7b:d3:1f:
d3:86:c3:f6:a1:06:eb:bd:14:c9:0d:83:fe:9a:4b:
a9:db:21:e3:45:c7:d5:3f:b2:49:d4:74:7f:d7:e1:
b6:4e:2e:89:f1:07:2c:f3:8d:a1:30:95:c9:48:7b:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:95:12:7E:1E:3F:F1:AE:7E:3C:0B:08:27:D6:5F:70:13:F7:C8
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ed:ba:a9:38:17:24:05:cb:29:42:8b:4e:72:fe:e5:04:8a:
0f:d8:d2:d0:51:98:6b:d0:52:44:bf:3e:c9:05:36:03:c8:fe:
9c:d2:5c:cd:7f:fa:d3:ad:de:c2:c6:c1:61:e1:6c:f3:5e:ab:
ba:df:95:b1:64:b4:31:e8:50:38:dc:52:6d:8f:d9:76:40:d7:
92:dd:12:4e:d6:11:fd:dc:d8:11:50:d8:e9:01:58:98:54:ee:
37:af:c7:ef:57:ff:1c:ff:82:29:b9:2f:c4:30:f6:6c:22:65:
37:cf:3b:73:54:1a:f2:a9:d6:ce:f3:e6:8c:ca:39:fa:3f:35:
e0:a3:07:b0:76:5e:2a:76:c5:d9:92:c2:7d:8a:5a:14:25:18:
c0:cc:4f:e9:fd:bc:1e:56:05:3b:8b:1d:c8:5c:1d:31:5c:61:
a0:e1:fe:29:b8:cd:ee:47:21:57:e5:bf:aa:85:48:cb:0b:29:
cc:56:eb:ce:80:6c:1e:e0:f6:fa:05:45:60:f2:ff:34:c5:62:
76:ec:58:9e:f1:76:df:cc:68:39:2a:77:7e:8e:8f:b6:0c:e4:
ca:10:11:a1:72:4c:49:64:11:2e:2e:19:48:37:17:4b:8c:7f:
20:84:60:b2:94:62:e4:ef:8a:03:d6:15:ea:01:b9:92:19:5e:
ac:f1:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:01 2025 by rpki-client