Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier: YOSGX3T76FEVt3T2tZXYJGEPbNcURHjgNyhU/lrW5Vk=
Subject key identifier: F0:0C:E6:BD:04:2E:1B:6D:F0:C6:A9:B5:2D:3D:6E:58:4A:59:75:AE
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial: 0194BD4E4D2884867B0CEC0DF6350D6CDEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number: 05D2
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: 1tdaIrt9xypJtReKdxeXXdM964s.roa (hash: 2jF3CjF80ww6ITNBk+zVZgXhV0QGg1umOnc7I4ePaOY=)
2: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: AfoEmE9UYJ76kbvO9d4xsqSJhpgs1ZDvh6Uh9oAA9pA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4d:28:84:86:7b:0c:ec:0d:f6:35:0d:6c:de:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=f00ce6bd042e1b6df0c6a9b52d3d6e584a5975ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:b6:5f:28:d9:9e:81:73:44:99:f1:27:97:
bc:20:a9:bd:8d:fd:97:89:2f:a2:a4:1e:34:fb:23:
50:81:ec:77:e8:63:8e:1d:7d:83:98:5d:d5:fc:5f:
cf:df:11:8e:84:98:1c:ab:e5:5b:49:30:56:63:f5:
93:35:17:ca:1b:67:9f:b8:fd:9f:01:04:00:b7:fe:
ac:0c:eb:24:cc:83:03:87:48:03:83:3c:c2:07:b5:
4a:21:f9:a7:56:a8:a5:15:d0:e0:cc:fe:72:c1:8a:
a9:50:2f:ae:ea:04:d4:54:7d:68:af:ea:06:63:3b:
6e:39:ef:49:72:4e:51:06:9b:22:13:9e:6e:e4:c4:
b1:20:cb:71:0a:0d:37:69:2b:e4:ef:62:cb:9a:07:
f6:72:f8:99:6f:4c:48:9f:42:57:4b:7c:91:9d:47:
dc:3d:aa:f9:de:1f:c4:31:da:eb:ec:5a:cf:cc:0a:
6c:5f:76:51:32:08:53:88:98:4e:9e:9d:07:3c:8b:
dc:5a:49:19:3d:d0:1c:13:94:b5:86:34:44:22:b2:
81:12:e5:eb:d3:6e:69:d6:42:6d:91:8d:d1:b5:3b:
41:11:6a:80:b9:84:bd:5a:cf:38:24:39:92:2a:b7:
bc:d1:75:6c:16:9a:8e:d8:15:d0:66:18:50:36:16:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:E6:BD:04:2E:1B:6D:F0:C6:A9:B5:2D:3D:6E:58:4A:59:75:AE
X509v3 Authority Key Identifier:
keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:67:87:a7:3a:46:af:b2:12:c5:77:9d:08:cd:25:a7:05:
9c:1f:0c:30:20:dc:b4:d8:e8:6f:22:2f:ce:82:7c:fe:da:09:
32:bd:95:7a:5d:38:5b:fd:d0:bc:7d:40:51:94:f6:5f:96:7e:
b6:30:c5:ae:c4:09:c7:27:1d:63:21:68:a4:4a:fa:80:33:1d:
3e:a4:84:3c:78:07:7b:f5:08:c7:9c:e4:8d:7b:b4:70:c8:4a:
ab:c9:c7:1b:9b:64:56:89:98:75:50:9f:74:7b:bd:32:ab:e6:
67:40:f2:28:1c:54:6d:49:2a:8f:1c:90:2b:d4:18:ef:1a:0c:
8c:14:7b:97:e8:f4:b9:0b:60:97:7f:ae:ec:c8:11:fb:de:34:
58:ea:a0:4e:f5:1a:ce:f7:fd:c8:65:d4:02:e4:d3:1b:e5:9d:
09:6c:87:83:06:39:d7:61:88:48:d8:93:55:25:52:c2:d8:53:
b1:4b:62:6b:2c:3b:0e:aa:56:ed:b9:d4:a0:d9:88:ef:ff:77:
ab:c6:02:08:d3:82:27:f0:c5:62:8f:0a:a7:d1:36:d1:e0:be:
f8:00:7f:2f:56:dd:01:0c:23:65:a1:6b:5a:b4:5c:a4:76:20:
57:a5:1f:11:aa:d5:c2:62:0b:c6:ec:d3:82:04:c1:ac:80:de:
dd:1f:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:23 2025 by rpki-client