Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: xE7QHvSco/GQZMztduJn3b4AOgyRiv37FoY8GM54iws=
Subject key identifier: 37:6C:1D:D5:EB:10:4E:02:D2:34:C6:5E:43:03:35:19:C7:CB:71:B6
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 0194BCA9C0511880E3FF6914F5A73802CBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 07F3
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: ITnsheekAMWAM0S0j/cxDR2wZSZSY9NO82nEFgxoajA=)
2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c0:51:18:80:e3:ff:69:14:f5:a7:38:02:cb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=376c1dd5eb104e02d234c65e43033519c7cb71b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:00:f2:c6:06:ff:17:5a:b6:5c:07:f1:8d:
6b:69:1d:19:e0:4f:50:1f:3c:9d:e5:b2:42:a9:b8:
8d:0e:04:dc:71:28:61:aa:30:11:8f:88:4b:48:bb:
14:ba:bb:7c:a6:1e:ce:b0:69:07:a9:66:b3:39:ad:
9b:ca:c1:47:dd:4f:b3:09:30:31:fc:98:a0:a2:91:
d3:df:c8:6a:dd:33:7f:16:83:65:f3:3a:18:a2:ed:
09:c9:d6:10:30:59:a5:5b:b0:ce:dd:57:67:80:9a:
83:6a:c6:6e:f4:42:8d:06:96:64:4e:68:06:5d:fb:
ea:e9:23:27:b7:fa:b4:8c:c9:4b:06:58:fd:c4:13:
b1:0d:fa:b4:5a:55:f4:91:50:63:ec:72:39:18:d0:
11:46:b3:11:d2:12:05:03:75:41:6f:8e:9b:93:2e:
58:72:9b:7a:06:ac:e3:07:eb:1e:fc:f3:f5:3d:0c:
aa:bf:92:8d:76:d2:ad:b6:73:65:3c:f2:64:c9:96:
1a:14:c5:ea:5a:bd:a5:0b:db:18:c6:6c:34:2e:05:
1e:14:66:db:83:db:58:8b:1c:a7:b5:02:55:6d:12:
b3:de:bf:6c:0f:a8:6a:21:af:c0:c9:df:60:f1:d7:
7b:49:96:dd:61:ca:a1:7b:d0:59:66:ab:0f:b6:09:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6C:1D:D5:EB:10:4E:02:D2:34:C6:5E:43:03:35:19:C7:CB:71:B6
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7e:68:0a:2c:16:20:a4:0c:2c:91:02:c7:72:21:f1:46:7d:
ab:4b:9f:52:08:d7:a5:9c:0b:83:20:e3:ab:01:86:1d:b2:c6:
24:14:31:e2:02:cf:24:a0:9a:76:e6:23:cd:1f:11:fc:7a:90:
6c:a1:92:85:63:4a:f3:2a:d5:3c:46:2d:b0:ef:20:79:cc:09:
d3:7e:98:2b:da:70:d5:20:a8:be:07:8b:ac:3e:1a:4d:e9:73:
b1:34:e3:ce:5c:00:c6:63:42:55:9a:15:3a:f4:30:65:2c:2f:
5b:cc:ea:f9:90:75:83:9a:65:cb:f1:55:e0:72:4c:1e:9b:23:
a7:16:fa:1a:2a:ec:52:dd:17:30:0b:29:22:2a:7f:e4:ec:df:
ac:c4:ef:51:bd:dc:85:b5:48:6f:9d:a6:86:51:da:d0:60:71:
a4:b1:47:49:e2:d7:94:58:ab:58:b0:12:36:10:c4:62:78:79:
c0:63:01:ec:6e:af:d0:9a:d5:b4:a2:2c:ca:e1:d2:81:a8:f1:
6b:1f:2d:01:f0:81:8d:f9:2d:1a:44:8c:ba:35:c8:a7:5f:5f:
3f:b6:fe:ac:e0:c8:66:02:fe:7e:59:1f:8c:8c:39:32:e9:53:
63:38:2a:26:d2:af:5f:3e:1a:7a:06:3f:3b:c6:d5:42:81:3e:
7c:83:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:15 2025 by rpki-client