Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: yP0w0q42c8Gf7uxXhr7Sm1SyiUfkUiqojI07ku/uBBo=
Subject key identifier: BC:B5:75:71:AF:84:41:E8:96:6E:5A:14:6F:85:9D:12:2B:7E:CC:98
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 0194BCE08AF4152A5714426F9C07DEA95E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: Q3t9pAB91RtiZaQSWi/xkzlD98QL8AkwUz4qooVNWBo=)
2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:f4:15:2a:57:14:42:6f:9c:07:de:a9:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=bcb57571af8441e8966e5a146f859d122b7ecc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:46:6d:ae:58:93:7d:e3:7a:e8:4d:b0:db:
54:23:bb:b6:6f:92:ab:b7:ab:ff:97:38:5e:2a:d3:
be:b1:c0:fd:0a:b2:e5:8e:7a:43:19:ba:cc:de:1f:
6a:f5:4c:e1:c4:92:5c:38:1b:1e:dd:4c:f8:aa:33:
fe:e7:9e:b8:41:9d:86:7d:ea:68:5e:86:7b:30:0f:
8f:77:b3:8b:a6:69:44:9f:c2:ab:cb:34:c8:0e:53:
6d:92:93:6a:46:7e:fa:3b:84:93:4a:0a:30:65:55:
2b:d0:f5:0a:1d:b7:1a:11:48:a0:97:7f:91:ad:4f:
c3:b9:f5:c0:2f:19:63:96:c4:c7:00:28:90:a3:b0:
1f:b9:c6:58:16:12:73:d7:67:ec:77:5b:8f:58:41:
1e:3b:f4:54:ea:f8:d7:17:be:65:51:dd:9f:0b:f6:
5f:15:02:51:7c:a2:1d:4a:5f:ec:07:7b:1e:70:36:
1e:1b:64:c8:ee:64:cb:13:3a:b1:34:8b:9b:1a:9f:
ad:e0:7e:42:c5:f2:ad:bc:46:d5:39:a1:8f:f4:53:
bf:c2:b1:91:9c:9c:58:7a:f9:f2:10:cb:08:57:c6:
94:70:c9:8c:6b:ef:fd:58:e3:c4:e7:de:3f:19:f1:
c1:6b:2a:be:19:50:76:87:89:87:a0:d2:f8:2e:0f:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B5:75:71:AF:84:41:E8:96:6E:5A:14:6F:85:9D:12:2B:7E:CC:98
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:95:e6:b6:f7:4f:6e:f5:76:eb:ef:74:38:8a:a3:b0:10:45:
e0:f6:99:34:2a:af:cd:b0:a6:1c:89:53:c0:4b:0d:58:4f:bf:
3a:ff:f7:cc:3c:c9:2c:b0:71:19:35:d8:af:fa:bd:c0:a4:17:
83:7e:54:42:54:9a:c4:ec:73:c2:7c:e7:fc:8b:66:22:94:6b:
f3:2f:b9:51:ea:b1:7a:46:23:66:a8:d6:52:a0:54:1b:dd:f0:
bc:ee:8d:13:b5:e1:1b:cf:64:6d:10:76:b6:b9:e3:e5:38:e1:
3c:ce:a7:bf:53:d1:1b:4e:23:85:6d:c8:a2:03:8a:f9:a1:71:
57:82:a3:4a:3a:2d:19:cd:4c:68:45:e5:c2:41:65:c2:6a:61:
6c:a9:ff:01:4b:26:77:aa:fc:dd:31:56:67:7f:31:9f:4c:05:
f9:14:8e:ee:e5:37:b2:ae:49:67:9c:74:67:a1:e4:b0:cd:46:
6d:ac:0c:5e:8a:c2:de:2c:df:90:87:14:bb:01:4e:a6:9b:4b:
91:86:f6:af:8b:09:f7:ea:39:35:98:36:00:ab:ed:6b:66:51:
a6:76:36:ec:27:19:0e:f2:0e:08:95:8b:3a:87:40:5b:06:21:
6e:3d:5c:09:05:eb:f9:11:62:4b:70:91:98:d6:9d:90:bd:d2:
a2:0a:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:34 2025 by rpki-client