
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
File: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft (raw, json)
Hash identifier: rBGLS35KL/ly5HUVfH8nE/n4N0rTIETRnbdisWm8Ihg=
Subject key identifier: 05:7B:63:F4:A0:53:40:3F:DD:53:C9:58:9A:DE:E7:F4:9A:25:AF:38
Authority key identifier: DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
Certificate issuer: /CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Certificate serial: 0194BD4EC6DF1A42FD39CE049AC61AB67A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl (hash: H7z6lTSLyamci4lAxqFsJ60aDLiqMOyJd7GoVroZl9o=)
2: aVrm11uPiyldKPviAWZVNw7mX_s.roa (hash: +aUpO78+V+9JLiQkkmCO8C80eoccRFxUM2jJ9r7mFkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c6:df:1a:42:fd:39:ce:04:9a:c6:1a:b6:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=057b63f4a053403fdd53c9589adee7f49a25af38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:f2:ac:10:c5:e8:9f:6d:35:5a:3f:8c:e1:
45:86:3c:53:a5:58:6e:71:b2:a9:03:b0:60:8d:f2:
d9:e7:4c:b6:06:6f:28:b1:7c:90:4d:2e:9d:8f:a5:
7a:f1:8b:4b:73:10:b0:fa:f5:a7:c5:61:16:05:14:
70:2c:17:4d:f9:d6:90:06:af:3d:a6:4e:f0:36:0b:
31:7d:d1:e6:33:7f:32:9b:09:f9:e9:e5:c3:bc:2d:
fe:70:bf:f8:77:23:70:5d:74:86:60:47:a8:c9:ea:
72:d8:d8:68:b4:25:ab:c1:11:dd:08:f9:85:93:d0:
08:a9:48:86:c6:cd:9c:b7:69:32:c5:cf:99:5f:d7:
61:2c:fc:90:fa:f5:de:8e:22:e5:a5:45:7a:14:59:
96:91:b8:5a:2c:b8:f9:c4:0a:06:df:65:21:43:7c:
f0:69:f6:6b:63:be:e2:9b:cb:50:a9:ac:36:d8:a7:
95:4d:45:d7:b6:a0:19:ed:d7:56:d8:36:58:99:ba:
80:15:f4:e0:33:ca:af:3a:5e:c6:11:98:e8:50:1a:
b9:d9:35:38:f5:aa:54:00:d9:1d:99:08:c7:53:a0:
81:9e:16:ab:d1:96:53:c7:3a:8a:26:32:c1:b3:ee:
5d:ab:6d:59:e0:dd:46:cd:88:8f:d2:c8:9f:e0:c5:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:63:F4:A0:53:40:3F:DD:53:C9:58:9A:DE:E7:F4:9A:25:AF:38
X509v3 Authority Key Identifier:
keyid:DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:23:ff:62:1a:c7:8e:66:83:0d:f1:b0:80:bf:ee:34:03:73:
35:1e:48:ff:49:e4:86:e4:31:4e:bf:5c:b2:6a:d1:11:6d:59:
0f:26:9e:8a:3c:3e:bf:5b:6f:92:bb:9f:82:1f:fc:b1:c5:77:
cb:86:95:a6:af:2c:c9:fe:b0:20:3f:8e:c7:2f:1d:fb:19:78:
2a:25:59:c6:21:fa:22:d9:91:3b:fa:e6:5b:71:e3:be:f9:c4:
d0:6f:35:3d:ab:0a:9f:1e:c5:d4:e8:11:f4:98:ca:de:d2:5c:
7a:f1:e1:a4:d3:6a:38:cb:41:a8:17:72:2a:58:64:aa:06:31:
7e:9b:fb:f2:b5:54:76:3b:a6:ea:c7:71:d4:0f:e7:03:33:0a:
ec:54:2c:04:d6:18:b3:fb:0b:55:4b:04:7a:42:6a:8c:10:53:
1e:de:de:e9:cf:fa:c4:95:5a:e9:ce:b9:82:9e:29:9d:33:c2:
46:28:19:eb:d2:38:80:72:c6:77:77:83:ec:69:12:55:cb:ee:
3c:0f:2d:42:c0:d1:33:bf:b1:31:5f:b7:9e:dd:a4:7e:63:18:
07:af:83:c7:da:51:75:d9:5c:28:e3:5e:31:d9:22:36:eb:fe:
fe:d8:b0:ce:2f:f5:0a:33:7b:42:84:0d:a0:5b:ba:de:c8:1d:
55:a2:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:17 2025 by rpki-client