Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: TPvbqvZX/1ZfCTBtajUZQX5foBebxH0rYWnsw4uuQpQ=
Subject key identifier: 7E:96:D5:4A:BF:44:4F:EB:6B:E6:5A:0D:86:10:36:0A:86:CC:90:DD
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 0194BD175EA43A01F78D6833DADBEF105CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 0EA1
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: AXbzu0dNWCHj/ieCkdLbDUEXvDM5ncg0Y9fphDm9LME=)
2: 30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa (hash: TTYewcef5lOn0EHzwdEkvaED9fy4qKHbWldg8iBnGRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5e:a4:3a:01:f7:8d:68:33:da:db:ef:10:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=7e96d54abf444feb6be65a0d8610360a86cc90dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:cd:df:1b:6f:c3:3c:f7:1e:da:34:bf:1e:
d3:48:4f:a9:98:f0:d7:15:04:1b:c3:1f:9f:dc:d7:
46:4b:7f:07:a7:f8:04:81:cf:aa:00:95:c0:92:e0:
f3:8e:58:b2:c4:cd:0a:3f:20:38:cf:45:f3:8f:0a:
07:7a:5f:d8:c8:89:c4:a6:9d:20:17:6b:cb:15:9f:
f8:82:3b:f8:e3:17:f8:9a:bc:9c:c5:25:b5:98:e0:
31:62:48:35:fc:f4:71:1e:cc:db:62:ce:10:fd:05:
ea:51:88:6f:e2:eb:26:82:95:1a:e3:52:aa:63:4a:
b0:45:f0:1f:91:b0:94:03:52:a7:5a:bf:58:e1:46:
50:c1:6c:a8:14:fa:e6:16:b5:a3:8d:0c:d9:7c:03:
3e:62:ab:f6:57:5e:9f:1c:c5:69:04:bf:8b:52:b8:
ee:b9:0b:c6:f4:bc:ff:5f:20:31:94:a0:33:3b:b1:
d5:d1:ea:1d:b7:a0:75:61:bd:ef:5b:38:66:9b:4a:
39:bf:df:2b:ad:fc:d2:7a:de:18:f1:c3:42:79:d0:
04:18:57:a8:3c:5b:2c:3e:a1:ad:58:1f:50:2c:ab:
d1:0e:9d:ff:d5:3a:d5:2b:5d:ce:1c:d8:da:a3:f6:
38:e3:d0:39:1f:c7:90:dc:d5:c9:22:2b:2e:60:fd:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:D5:4A:BF:44:4F:EB:6B:E6:5A:0D:86:10:36:0A:86:CC:90:DD
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:74:9f:c8:3d:a4:44:24:cf:0c:09:80:c3:9a:96:dd:5d:f2:
a5:c6:04:48:38:33:14:c7:09:8d:19:7e:9f:34:3a:42:8f:84:
35:bb:12:e7:96:5f:f7:c7:60:fe:a4:19:63:c6:14:02:34:d7:
83:2c:6a:36:ca:ff:e7:21:33:39:9f:63:5a:b6:90:fe:b5:eb:
2d:57:29:fd:dd:63:6f:a1:54:ee:7f:97:85:2d:8c:42:93:fb:
d0:b7:2c:25:f0:87:54:af:3d:74:3d:4f:a9:df:ff:45:8a:54:
92:da:ff:61:e3:81:5e:ae:5d:ac:33:f2:60:84:51:04:63:1b:
58:25:02:7c:53:bb:1c:28:37:15:b0:d8:88:2b:1b:e5:d9:b7:
b0:00:c4:17:e9:8a:8a:59:28:15:11:86:54:a4:77:e0:01:5c:
09:62:83:5c:72:be:33:10:7f:d5:d7:5e:4e:16:44:ae:bd:18:
b6:de:09:51:bc:47:3b:31:a7:b2:8b:ab:84:02:64:41:05:39:
13:6d:43:2f:75:f5:f8:3c:5c:60:54:aa:05:cf:a6:5b:46:bb:
b6:90:aa:5f:8e:9b:2d:13:27:a3:d3:f6:ea:57:bb:e3:cd:a2:
06:23:87:5d:1e:6b:18:93:c6:8e:8d:c4:aa:8b:ac:78:03:02:
e8:21:c7:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F16kOgH3jWgz2tvvEFzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTgyYTk4ZDZlZjgwZmZiMjkxODI3ZGE4YWNjYTc0NDkx
MDgwYjQwHhcNMjUwMTMxMTYwMDEyWhcNMjUwMjAxMTYwMDEyWjAzMTEwLwYDVQQD
Eyg3ZTk2ZDU0YWJmNDQ0ZmViNmJlNjVhMGQ4NjEwMzYwYTg2Y2M5MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QnN3xtvwzz3Hto0vx7TSE+pmPDX
FQQbwx+f3NdGS38Hp/gEgc+qAJXAkuDzjliyxM0KPyA4z0XzjwoHel/YyInEpp0g
F2vLFZ/4gjv44xf4mrycxSW1mOAxYkg1/PRxHszbYs4Q/QXqUYhv4usmgpUa41Kq
Y0qwRfAfkbCUA1KnWr9Y4UZQwWyoFPrmFrWjjQzZfAM+Yqv2V16fHMVpBL+LUrju
uQvG9Lz/XyAxlKAzO7HV0eodt6B1Yb3vWzhmm0o5v98rrfzSet4Y8cNCedAEGFeo
PFssPqGtWB9QLKvRDp3/1TrVK13OHNjao/Y449A5H8eQ3NXJIisuYP0Q/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6W1Uq/RE/ra+ZaDYYQNgqGzJDdMB8GA1UdIwQY
MBaAFNgYKpjW74D/spGCfaisynRJEIC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTct
OWIzNjBlMWJhMzIxLzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTctOWIzNjBlMWJhMzIx
LzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3SfyD2k
RCTPDAmAw5qW3V3ypcYESDgzFMcJjRl+nzQ6Qo+ENbsS55Zf98dg/qQZY8YUAjTX
gyxqNsr/5yEzOZ9jWraQ/rXrLVcp/d1jb6FU7n+XhS2MQpP70LcsJfCHVK89dD1P
qd//RYpUktr/YeOBXq5drDPyYIRRBGMbWCUCfFO7HCg3FbDYiCsb5dm3sADEF+mK
ilkoFRGGVKR34AFcCWKDXHK+MxB/1ddeThZErr0Ytt4JUbxHOzGnsourhAJkQQU5
E21DL3X1+DxcYFSqBc+mW0a7tpCqX46bLRMno9P26le7482iBiOHXR5rGJPGjo3E
qouseAMC6CHHDg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:26 2025 by rpki-client