Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: rlGVl6j5B/UX+DDRRcLve5yO+JMeX42KTDWVuY6hT20=
Subject key identifier: E7:FE:68:4B:E8:DC:75:56:96:41:6D:70:7A:8C:5F:22:FB:33:C7:81
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 0194BCE06338128ADCDAD25E49679911221D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 04D6
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: xx6gnI+pGGUFSIraXblA8ZeFrM8qSvAlUFO03MeVJwg=)
2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:63:38:12:8a:dc:da:d2:5e:49:67:99:11:22:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=e7fe684be8dc755696416d707a8c5f22fb33c781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:a5:e5:e8:e4:46:b8:40:ed:1e:fe:99:7d:
d5:58:b1:a2:cb:1d:17:ef:2f:05:b0:ee:d0:d4:47:
66:96:1e:24:d3:b4:43:5e:2b:0a:6c:15:58:90:17:
9f:42:e8:99:c5:8c:4d:b3:7f:c2:63:0c:77:b6:a2:
2e:0a:0c:36:8e:bc:53:ff:14:cb:30:37:4f:f1:2a:
81:5d:b0:1a:e5:f3:6a:e2:8e:71:46:61:f4:e1:3f:
72:db:49:7b:bb:a6:4b:92:da:e5:49:58:f6:6d:37:
87:3e:0a:06:bc:22:a0:38:10:aa:67:b6:99:3c:f2:
93:4f:07:68:33:a4:77:08:36:be:5a:4e:10:49:80:
ec:52:59:7a:b2:3c:fe:c2:f7:a6:03:1c:38:cf:80:
49:2f:07:c4:32:64:2d:b1:c3:2a:dd:f0:91:be:b9:
f4:ef:67:3c:6a:c5:ee:4b:7a:0a:74:04:13:f2:04:
fd:c9:29:d0:75:03:af:c6:6a:7a:bc:9c:59:e8:cc:
f2:d9:cf:e7:1d:a7:af:42:8e:77:3a:f8:70:d4:88:
56:db:23:69:61:9a:f0:93:cc:0c:22:4a:14:a5:7c:
b4:6e:f6:0f:07:3d:15:ab:e6:59:26:27:f7:06:9e:
2d:69:4d:a8:21:df:74:87:65:69:04:f6:7d:e3:6b:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:68:4B:E8:DC:75:56:96:41:6D:70:7A:8C:5F:22:FB:33:C7:81
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:21:7e:72:d6:43:d7:ea:76:d6:a2:55:6e:bc:64:10:f6:ea:
42:0d:a7:a2:e7:97:6a:48:42:9b:e6:79:d6:f4:e2:70:a7:f1:
95:e3:1f:cd:b2:5a:e5:a2:3e:23:00:55:af:0e:68:0f:2a:ab:
3c:c5:24:8b:f4:b5:97:61:61:dc:1d:a0:87:8d:f6:d9:09:b2:
b7:cd:32:c7:5e:2f:e8:b9:a2:d2:4f:3b:9c:d2:95:c3:c9:05:
89:53:09:d6:1e:16:6e:a8:77:63:f7:6c:ca:7b:21:56:24:d3:
de:51:40:af:83:10:a1:35:0c:28:a1:c3:7d:db:fa:da:2d:3e:
de:cf:10:fe:37:fe:74:ea:36:5e:9e:27:c9:ff:8f:d2:ea:1c:
a0:44:3d:b2:a9:b9:ce:88:c9:cb:a8:c1:37:65:c5:57:03:01:
e7:e3:a9:a7:fa:5f:11:d4:4c:c9:e1:30:0e:be:67:70:d9:55:
05:83:6b:42:62:ae:08:7e:34:5c:1d:a9:e2:70:66:2d:f1:26:
04:8e:e7:65:20:8a:04:b1:b1:ec:8d:bd:94:5a:ad:2c:ff:66:
8c:df:50:69:c6:51:86:90:93:ed:07:c6:58:6b:a5:03:85:5a:
13:5c:35:c5:f6:1e:f6:45:3e:b5:96:a1:e6:6e:11:db:b2:58:
e2:af:2c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:00 2025 by rpki-client