Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: DpBGDMDrQSWWgqDxPby3W+ipHSPwMjJCWBPSpM7It+E=
Subject key identifier: 8D:CA:6B:37:BD:40:39:51:5E:BD:E8:DE:00:CB:1C:EC:82:EB:4D:6B
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0194BCA9F7BED03CF1E1D261666F7B5028C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 0F1B
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: MAQhMBIXLg908vGph/wMNpkOCwMrSd7RpyZmdezu5Fg=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:be:d0:3c:f1:e1:d2:61:66:6f:7b:50:28:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=8dca6b37bd4039515ebde8de00cb1cec82eb4d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:f5:df:94:51:f8:a7:ba:34:e7:57:b1:44:
23:79:46:82:29:f8:64:92:06:d7:72:4f:ae:19:45:
a9:a9:65:f6:32:81:aa:3f:6f:ed:5e:02:4f:8f:8e:
07:95:23:f2:33:4f:74:ee:56:f1:81:a2:bd:ab:0d:
b3:8e:1e:c5:f4:ae:66:5e:7e:cf:9c:a6:a0:3f:e1:
c3:49:13:e5:f3:89:bb:93:ca:4f:da:75:4d:fb:36:
28:74:de:fd:40:e0:a1:81:dc:93:b3:37:76:90:cf:
0a:d3:73:b8:62:9e:fe:38:7c:df:cc:8e:e6:66:ba:
7f:66:5b:5c:63:f8:6c:71:59:e9:09:8f:c0:5c:14:
ef:56:d8:ba:6c:d1:fc:0c:8a:68:8e:78:ac:42:32:
8c:2e:b1:dd:56:79:cd:40:9a:22:1b:d5:a8:a3:2f:
be:00:66:fd:90:5d:06:96:28:ca:76:82:f9:0c:18:
04:82:4d:1f:1d:d3:e3:7f:6c:50:22:0b:42:fe:9c:
c0:29:2d:ae:2c:18:5e:0d:fb:55:97:ba:2d:7e:71:
06:ad:d8:32:e2:58:0c:b6:8c:89:ea:a3:b1:f7:71:
5e:f8:d5:6e:8d:61:9a:d0:2b:14:18:34:91:13:63:
af:b3:a6:b5:bd:de:29:47:64:6a:54:6c:7d:03:00:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CA:6B:37:BD:40:39:51:5E:BD:E8:DE:00:CB:1C:EC:82:EB:4D:6B
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:15:98:d6:90:04:77:a5:db:ae:04:4a:7f:94:18:47:86:
c6:eb:58:94:04:47:48:ed:5c:f6:a4:0d:01:20:3e:3b:dd:40:
ac:cc:e7:ee:97:ad:c0:3c:11:6b:ea:2b:78:70:fd:6b:e6:50:
f7:ac:71:81:aa:0c:7d:59:b4:4b:81:2c:a9:53:03:bc:c0:e5:
8c:21:d4:99:34:58:12:cd:28:4c:98:1b:bb:b4:65:42:09:26:
67:17:3d:45:d7:69:95:4c:05:61:8c:56:37:46:91:c8:34:c1:
17:77:a7:12:ee:d4:22:a1:7b:9d:0f:57:02:8a:7e:37:1c:32:
83:2b:bd:2e:6d:29:d4:57:9e:1c:63:d6:36:b6:db:f3:51:49:
c8:b8:28:dc:32:59:5d:f2:e3:b1:bd:16:b1:b0:0e:51:9d:14:
ed:93:e0:8d:3e:df:9c:72:5f:0b:72:87:a2:77:9f:78:2d:5d:
e5:bb:ab:16:bf:60:84:79:a1:fc:55:ac:01:cf:0d:11:98:21:
b5:ad:7e:f0:c9:0e:64:18:10:44:ff:89:f2:c1:98:80:4d:d4:
89:fe:1a:36:a8:c4:73:08:76:53:6a:5d:8c:75:90:d5:f8:bf:
5c:f6:46:5f:2a:5c:c5:ea:f2:16:58:24:67:e0:f3:b5:6b:65:
c2:2a:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:30 2025 by rpki-client