Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: bb2lJrc9VoryiovxxRa5zQeBfNq2pDwoIrH+e/SLs2U=
Subject key identifier: C7:4B:22:FE:C4:AE:E4:84:42:C3:87:A6:92:BF:C6:56:C2:56:AC:F3
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 0194BD4E542E9B0DDCA75B807908D9093B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0B71
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: dzB7lVG1bOXT++2K9C76I7G0IZDGZERJ28LgdDcgbmM=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:54:2e:9b:0d:dc:a7:5b:80:79:08:d9:09:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=c74b22fec4aee48442c387a692bfc656c256acf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:6f:b0:e9:76:2c:f9:fe:17:55:1d:57:98:
6a:0d:32:aa:46:00:f3:f7:99:ef:58:dd:9b:ad:25:
a7:84:fb:29:e4:97:1f:ae:98:6b:ea:9a:26:6d:28:
bf:e8:33:5c:cf:30:0b:02:a0:94:e6:02:a2:4e:9e:
2c:a8:d1:d9:e5:0b:30:b8:fb:36:11:62:2c:1e:94:
e4:d5:c2:3d:f0:4c:cd:40:d9:90:95:84:82:03:d3:
18:c8:2f:56:51:c6:f2:e5:ff:0b:f0:2a:91:db:4b:
8a:9d:0e:6f:f8:c0:6a:d1:ef:5b:f7:e1:68:0e:1a:
ad:40:69:c4:a6:bc:cb:2d:cd:b7:c4:23:93:87:30:
e3:78:3a:1b:87:e8:47:9d:c4:d4:e4:18:b2:42:3d:
03:ee:20:a9:0f:28:a3:aa:25:58:2f:e4:bc:24:50:
92:62:e3:58:90:10:2d:cd:db:85:5f:2b:1b:e2:bb:
5f:13:7e:67:62:1c:9d:59:c7:b0:59:57:fc:bb:8f:
da:b5:a7:aa:5c:8b:e2:bb:12:ac:00:87:93:32:90:
23:30:a3:c1:02:d7:73:fd:09:e6:c1:53:c4:f5:97:
90:4e:a6:f4:d0:e9:f5:92:e9:79:57:65:72:d8:2f:
ed:46:18:e9:a0:18:28:aa:36:39:ef:fc:7b:f3:0b:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4B:22:FE:C4:AE:E4:84:42:C3:87:A6:92:BF:C6:56:C2:56:AC:F3
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:77:73:48:a8:88:13:d2:d2:9a:e9:6f:87:5c:30:18:38:38:
c6:53:be:5c:3f:99:d4:a7:da:2b:07:bb:8c:73:67:7c:6e:ff:
e9:0f:09:45:9c:79:c9:9f:6c:74:14:fa:fc:e6:21:af:f7:b3:
42:d6:f4:c5:62:04:88:7c:aa:74:85:6f:5d:c2:89:ae:8b:47:
f0:46:8a:0f:21:b0:00:15:54:8d:7c:7a:b5:17:34:4a:bf:7c:
54:ef:61:be:27:64:7e:ef:53:18:45:5d:c1:9d:d7:6b:da:56:
50:45:1d:c1:6c:10:78:73:d3:bf:1d:17:c1:89:73:01:dd:7e:
ce:17:56:dc:bc:90:64:e1:ff:7f:42:ba:72:2d:21:d8:5a:e6:
d4:c3:43:83:85:b2:d2:d8:8b:7d:34:87:9e:33:53:f8:03:05:
89:e1:52:d4:45:d2:65:b5:e3:c8:07:90:fd:97:e4:e8:cf:6a:
73:63:1e:a3:be:2f:40:6a:51:a0:4d:db:e5:b8:a1:09:3a:68:
0a:28:a5:f6:ac:78:05:81:f9:91:81:9a:f4:95:46:f7:89:c2:
05:e4:b8:3f:e2:05:02:7d:11:cd:15:f7:88:8c:eb:20:9b:ab:
4c:be:c2:d7:c6:4b:e9:41:60:ce:3e:c2:fa:5e:6a:36:dc:a5:
be:ab:35:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlQumw3cp1uAeQjZCTsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWM3OTYyNDMzYzJmZTBiZjYyYjhjMzg4MzkyOTk1Zjk0
MmIxNGMwHhcNMjUwMTMxMTcwMDE0WhcNMjUwMjAxMTcwMDE0WjAzMTEwLwYDVQQD
EyhjNzRiMjJmZWM0YWVlNDg0NDJjMzg3YTY5MmJmYzY1NmMyNTZhY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxZvsOl2LPn+F1UdV5hqDTKqRgDz
95nvWN2brSWnhPsp5Jcfrphr6pombSi/6DNczzALAqCU5gKiTp4sqNHZ5QswuPs2
EWIsHpTk1cI98EzNQNmQlYSCA9MYyC9WUcby5f8L8CqR20uKnQ5v+MBq0e9b9+Fo
DhqtQGnEprzLLc23xCOThzDjeDobh+hHncTU5BiyQj0D7iCpDyijqiVYL+S8JFCS
YuNYkBAtzduFXysb4rtfE35nYhydWcewWVf8u4/ataeqXIviuxKsAIeTMpAjMKPB
Atdz/QnmwVPE9ZeQTqb00On1kul5V2Vy2C/tRhjpoBgoqjY57/x78wucFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdLIv7EruSEQsOHppK/xlbCVqzzMB8GA1UdIwQY
MBaAFNgceWJDPC/gv2K4w4g5KZX5QrFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2Et
M2QzNDRjOWMyNmI2LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2EtM2QzNDRjOWMyNmI2
LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFndzSKiI
E9LSmulvh1wwGDg4xlO+XD+Z1KfaKwe7jHNnfG7/6Q8JRZx5yZ9sdBT6/OYhr/ez
Qtb0xWIEiHyqdIVvXcKJrotH8EaKDyGwABVUjXx6tRc0Sr98VO9hvidkfu9TGEVd
wZ3Xa9pWUEUdwWwQeHPTvx0XwYlzAd1+zhdW3LyQZOH/f0K6ci0h2Frm1MNDg4Wy
0tiLfTSHnjNT+AMFieFS1EXSZbXjyAeQ/Zfk6M9qc2Meo74vQGpRoE3b5bihCTpo
Ciil9qx4BYH5kYGa9JVG94nCBeS4P+IFAn0RzRX3iIzrIJurTL7C18ZL6UFgzj7C
+l5qNtylvqs16g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:46 2025 by rpki-client