Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: EYYBXtZI5MQLVPtZgXMz1hBIy3ay5k9Y9U091Ajvzq4=
Subject key identifier: C1:04:DE:6A:41:74:98:D3:5F:05:8C:8A:56:F9:4D:30:D3:C1:A2:8C
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 0194BCE0B5E8036B0B26411EC43495B76652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0AB8
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: Pi3QzBFkTULFSoTQeTNc3bqApDhDBIhC+vJpfKEnFOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b5:e8:03:6b:0b:26:41:1e:c4:34:95:b7:66:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=c104de6a417498d35f058c8a56f94d30d3c1a28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:51:bf:37:68:8e:c7:55:a4:e3:f0:51:b7:
f4:82:9d:6c:c7:07:37:d4:99:02:9b:cf:50:db:82:
9f:ae:7f:94:b8:66:5c:d5:b0:d2:dd:4c:e1:28:77:
ce:14:15:6c:a4:cd:52:cd:02:a5:9f:4c:7f:29:fe:
a4:cd:38:3d:e4:62:a0:8a:39:2e:ec:24:7b:08:ac:
ee:54:be:67:b4:de:ac:83:24:d5:73:71:ef:09:1a:
56:a1:4e:b8:0b:73:9d:74:9d:14:74:fd:f7:ad:20:
c9:a7:96:7d:e6:3c:87:76:48:bd:1c:56:75:8c:87:
83:83:b6:6a:28:49:6b:0d:a9:60:47:04:a6:34:97:
d2:60:84:87:d3:cc:24:42:a1:c9:44:c3:78:a8:fb:
94:83:ff:33:11:13:2f:4d:61:39:15:d2:1f:dd:7f:
24:35:e4:15:22:e1:83:d4:18:47:53:b7:cc:41:99:
b6:e6:2d:aa:e4:33:35:03:48:08:7a:bf:38:63:cc:
3a:e5:08:89:0e:0c:2d:66:b6:ec:8c:4b:24:5b:d8:
83:f4:bc:58:4a:e6:d6:06:b1:7a:c0:8a:f0:9b:5f:
08:ad:9b:13:08:b8:22:09:30:ef:92:4a:f0:a8:8d:
46:0b:08:de:be:88:62:df:93:00:23:23:39:d7:2b:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:DE:6A:41:74:98:D3:5F:05:8C:8A:56:F9:4D:30:D3:C1:A2:8C
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f5:38:6c:9c:ee:03:5f:d5:d7:99:30:15:4c:8e:4a:85:9d:
75:a4:d3:56:2d:d4:0e:6d:fa:4b:3b:40:42:da:96:19:6d:e8:
cd:d0:73:9e:b2:1e:52:ed:54:df:86:e6:6d:b3:2c:f1:cd:e7:
c4:76:c4:b6:5c:4d:6d:56:83:29:1f:1a:ba:85:ec:ab:f1:6c:
57:cd:e2:1d:aa:86:3a:6b:eb:db:51:ad:99:d8:25:90:d0:bf:
9f:81:3a:fd:71:fb:32:b6:53:0b:64:8e:c9:a6:89:64:ab:91:
15:7d:52:39:44:5e:b2:cb:50:58:aa:52:de:fb:e6:d4:2b:0e:
65:c7:e9:f6:83:52:9a:9c:b8:b9:fd:24:17:d9:90:8f:f2:2b:
54:d7:3f:4d:42:51:62:36:54:42:b5:dc:5c:d2:f6:69:e9:b7:
11:2e:16:01:a9:0e:77:ce:6a:b3:e2:30:26:dc:df:8f:b9:3a:
51:0c:07:0e:08:62:3f:ff:89:07:d3:4f:73:14:60:12:56:9a:
61:f6:32:f0:29:40:fd:6b:88:ef:f4:4a:7c:10:00:a4:11:20:
cc:85:04:ce:23:15:35:95:15:a1:b9:34:0c:24:9f:c0:6f:a5:
4d:0d:4f:4e:19:2b:8a:f1:69:9e:21:a7:a9:f3:e9:ac:84:e3:
b4:03:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:35 2025 by rpki-client