Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: 0pErKhz3yDJGQ7Xf2StoOrENjZpn1gi36eQdTerYqfg=
Subject key identifier: 68:44:72:A7:C5:E6:44:94:0B:2D:E3:F2:BC:EB:30:FE:90:95:78:33
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 0194BCE08FDF584679436ADCE02B24DD3741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: 0E
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: AnSXckoBa6JgnB4G4pQZFs08B7VWKzjdwBa+Z3cmqfo=)
2: yYyiNsgvxodzcWtsJth3gtqP74s.roa (hash: h9GU418V8HLDeWxchLf1ERx3rIBgo7WWOa5d5upmucg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8f:df:58:46:79:43:6a:dc:e0:2b:24:dd:37:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=684472a7c5e644940b2de3f2bceb30fe90957833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:35:95:91:8a:8a:7f:b6:1a:30:87:71:f8:
6c:f4:e8:b9:fb:2b:dc:09:d5:21:78:e4:81:0f:81:
69:72:f8:5b:6d:2b:55:0e:e9:5f:cd:7f:a4:32:5a:
d0:3e:cd:24:9d:b3:71:23:4c:82:c2:6f:e0:c5:d9:
fe:78:aa:8d:bd:f8:df:1a:17:9f:50:88:54:f1:07:
b2:be:90:ac:cb:22:42:bd:86:6a:8f:b1:31:d4:d7:
57:a8:35:76:86:e7:9e:f5:ba:8d:45:42:53:d3:44:
71:34:b0:04:aa:44:7f:67:3b:06:d1:3b:0f:10:be:
5b:e0:4a:2f:12:90:b0:8a:80:d3:9e:6d:51:1f:39:
fd:62:45:4a:4c:5c:aa:2c:a6:2d:af:fc:54:7f:01:
92:ce:78:3a:e3:2f:51:54:89:2f:05:7f:1d:e9:92:
c1:d2:b5:3d:93:de:b8:33:06:15:e7:6a:0f:e1:d7:
d3:55:bc:84:b6:31:8e:fa:d6:c3:44:80:ab:f7:d2:
4b:ec:64:64:80:57:70:f9:13:08:fb:b2:da:e2:ae:
b6:97:b4:5e:03:12:24:06:a4:50:d4:f1:b4:b1:5c:
5f:a5:49:f8:ee:1f:65:3c:d1:17:d1:73:94:7b:1f:
bc:b6:39:11:26:7b:c1:8b:9c:d8:2e:57:65:10:19:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:44:72:A7:C5:E6:44:94:0B:2D:E3:F2:BC:EB:30:FE:90:95:78:33
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a2:04:18:de:46:91:6e:45:d8:ef:94:b9:e0:85:c0:d9:bd:
aa:93:0b:3f:df:cc:f7:cd:2d:71:08:1d:7c:8f:b1:5b:fe:58:
11:a3:e6:9c:cb:fe:37:1b:17:2a:91:7a:a3:25:2d:91:76:5d:
0e:67:d0:ee:f5:e2:9a:10:58:c3:c7:b0:4a:84:d9:2a:8f:0b:
7b:e5:37:00:70:77:86:82:85:b2:d9:cc:60:0d:dd:2a:c0:ed:
06:03:7a:ec:6d:85:50:6a:3f:89:74:5c:f2:b0:4d:46:50:61:
15:75:0a:87:1c:fb:a8:fc:0c:88:53:13:b6:81:c8:90:ad:fc:
c8:61:6b:1b:03:bf:be:37:0c:d8:e8:81:ba:cc:dc:92:d4:24:
de:4d:24:c2:b9:76:40:43:5b:c6:2c:b5:be:b9:55:4d:ec:f0:
83:53:08:9f:7b:15:b7:7d:5f:24:d0:0f:ad:7f:a9:8e:e5:4a:
c8:b2:32:b7:a4:49:da:96:27:55:b8:b1:86:bd:20:5f:20:79:
aa:09:89:a3:33:60:1d:21:1b:e5:93:00:d6:53:16:03:c0:18:
a3:4c:d5:4a:50:11:c0:1b:e1:34:2d:f0:21:c9:e3:df:bc:8b:
00:0b:ad:47:ee:a7:93:7c:ce:4b:2e:6c:8c:18:9d:64:1c:66:
55:e5:f6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:49 2025 by rpki-client