Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: G3iwx6FJVsqEOrAcY5QKw3h7NMLO4WqGTLiTuS6LVhc=
Subject key identifier: 6D:C0:76:7A:DD:27:52:34:51:E7:A4:74:DC:F2:E5:0B:4C:44:41:36
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 0194BCA98603289FA86E54B6E2CA36B54C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 0BF5
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: RAcdqx+Ke4QvzjFa1PdZbugmptBUgd7DrySm9jtN1Yo=)
2: OJ0Ea8MAtm0vkDi2FG3lo9X6cRI.roa (hash: q8ux1iCf0KA9SrdmsvdA7tcm8bgtmy+qQYHD92uVeqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:03:28:9f:a8:6e:54:b6:e2:ca:36:b5:4c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=6dc0767add27523451e7a474dcf2e50b4c444136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:c4:5d:b8:55:4e:3f:e9:cb:50:23:dc:4e:
4b:c5:11:f6:ef:36:5d:93:2e:98:f8:c3:88:33:b6:
81:ad:4f:e7:49:43:ea:f4:89:a8:5a:b0:4b:c4:7e:
1b:a0:a4:f1:2a:2d:ff:10:77:ef:81:f5:10:28:97:
36:55:cd:87:a4:d6:3c:03:e6:96:4a:cd:83:37:22:
b2:24:fe:16:92:f3:30:16:23:cb:ec:63:7a:33:2c:
a8:19:78:4c:4f:4f:d8:bb:34:1d:ea:e9:27:f1:35:
87:07:f4:a2:f6:d6:13:12:e9:62:d7:b2:62:d0:dd:
df:59:87:63:11:d2:82:99:c2:bb:3e:5b:0d:13:c9:
1f:37:07:80:fd:0e:c6:51:e8:40:2f:a7:35:17:aa:
9f:30:5a:f3:92:42:14:de:b9:1a:8f:00:c0:df:b3:
09:f1:fd:0d:f5:13:d8:b5:1a:74:a0:be:8e:47:ab:
9c:c4:7e:a1:94:b1:40:12:c7:31:25:87:5e:bf:71:
e5:fe:f7:2e:88:58:db:23:f7:02:a7:90:56:45:41:
a7:d5:71:b4:85:c3:89:c2:14:6c:31:46:80:e2:4b:
0a:54:b5:d5:26:ff:be:2e:0b:9d:42:ab:5e:df:3d:
35:9c:17:51:f0:7d:55:26:05:37:59:98:49:4d:a3:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:76:7A:DD:27:52:34:51:E7:A4:74:DC:F2:E5:0B:4C:44:41:36
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:56:d7:60:4d:48:a6:63:bf:c9:58:35:b5:0b:c5:a0:ce:52:
ef:4e:7d:a9:05:58:ca:77:2d:16:7a:8c:dc:0e:f9:46:92:e7:
f9:b7:c8:3f:61:d8:b9:5c:77:d0:18:0c:e3:73:b8:dd:25:ff:
a2:44:4b:33:86:a9:01:cd:40:f0:21:dd:0b:63:06:40:f2:58:
d1:64:5a:3f:81:59:cb:de:7f:a2:0d:32:de:2c:8e:4b:f8:ae:
e5:e9:09:d9:af:88:c6:aa:5d:53:fa:05:97:5f:4a:85:e4:eb:
43:be:bc:34:22:fb:1c:b2:e3:76:e6:10:a1:ed:ef:34:f8:83:
47:4b:a2:75:f8:a3:be:25:a9:fa:fe:8d:68:65:08:52:1e:3f:
e4:bc:34:5b:53:9d:a2:49:5b:53:37:ce:5f:b9:91:a0:e0:74:
40:78:9c:64:29:ab:d7:70:25:82:8e:d7:79:b5:a3:68:ac:7e:
33:6b:fa:46:12:3e:bc:7b:69:6d:25:1f:99:74:3c:97:e3:ee:
4a:ae:90:d6:f6:ea:06:6d:06:7c:3d:29:12:16:8d:bf:53:83:
56:22:7b:ab:66:6c:85:26:64:af:79:88:81:53:83:47:82:4b:
cc:76:29:ca:d1:84:6c:4b:7f:8b:79:01:bb:00:a6:f1:97:9d:
67:85:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:56 2025 by rpki-client