Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: tWaueOO8FSfgO+wB2lC0PyGnaDSPba1E2baI0/8lt/E=
Subject key identifier: 1E:FC:7B:92:AB:A2:6C:24:30:A5:21:1B:50:D5:78:E3:DF:3F:35:C1
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 0194BD8597567883FEA5B36BE3B189E3B0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 0C0A
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: UKuw0HpMAk7HFaVHlx1Lk01P6ID9pfxOFOqHzinPSyQ=)
2: rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa (hash: b1uXDovLrtEkVyA+DIE0O5ACHvWcfbWlFzT0S+Ih5Jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:97:56:78:83:fe:a5:b3:6b:e3:b1:89:e3:b0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=1efc7b92aba26c2430a5211b50d578e3df3f35c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:24:be:af:31:18:c1:8d:2b:89:3a:e6:19:
e4:7c:03:05:ae:b7:c1:83:77:f3:8e:5c:23:4f:88:
2f:0d:91:6e:18:16:0a:6b:1c:09:97:8f:7f:3e:3f:
9a:25:94:28:4c:b1:47:fe:f9:67:33:04:bb:f6:42:
f5:b6:3a:9d:38:f7:df:4b:06:0b:7c:fc:0d:4d:d4:
25:ef:21:75:25:29:82:6b:3d:92:1e:fc:5b:6a:fc:
f3:69:82:31:5b:34:db:92:f7:dd:b8:dd:12:59:f1:
17:1d:d5:85:cc:f0:b6:e1:e9:e4:44:ad:12:bc:83:
d0:fd:29:22:ea:22:2d:2a:34:4b:f4:b6:ff:cc:0f:
3b:43:cc:35:a3:84:8d:cb:fd:7f:8d:b4:5b:7b:23:
bb:c6:24:43:18:bc:1c:01:f8:71:41:f9:5a:eb:47:
36:b8:4f:3c:99:9d:fc:f3:18:ff:34:c3:98:1c:b6:
58:8d:28:12:17:a4:a1:6c:7f:4b:95:04:e8:90:c6:
6b:38:d9:17:e2:59:78:31:f6:b9:c5:b3:b9:41:61:
a2:ad:a9:90:33:82:31:62:2b:97:60:0c:b6:6c:c6:
aa:98:6a:10:09:e8:d8:77:16:bb:9c:c2:db:b1:d3:
0b:ab:59:cc:fe:bd:c3:52:2d:c9:b0:cc:94:05:5f:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:7B:92:AB:A2:6C:24:30:A5:21:1B:50:D5:78:E3:DF:3F:35:C1
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3e:62:b3:a6:15:37:8f:f1:a7:9d:2d:41:38:0d:da:f8:9f:
09:a2:fa:80:9d:84:4b:df:33:2e:95:96:fd:ea:23:6b:fc:c4:
e8:f5:90:90:e0:e8:d9:61:3b:91:e8:1d:b9:ff:24:94:a3:d5:
f5:d5:51:0a:cd:5b:09:77:ef:a1:be:84:65:ce:db:f4:38:3b:
d3:0c:09:e3:25:3c:79:08:18:a1:7e:77:61:89:ae:7a:0a:1b:
43:a8:7c:61:6f:af:a2:d0:9b:75:4c:b3:49:f7:5d:1f:f6:51:
ab:1c:92:a3:d1:29:f2:e3:dc:9f:63:32:a1:1c:fc:02:25:e8:
10:0e:b4:49:42:fb:b9:09:e5:9c:fb:ed:fa:64:a8:7c:c9:49:
57:dc:a4:4f:67:2b:5c:35:c8:27:ca:c9:b6:90:39:17:f3:66:
6d:6e:db:02:9e:0b:2a:57:d7:5a:18:1a:84:d4:63:dd:ca:a3:
74:1b:f6:0a:4a:1a:2d:4e:44:f4:44:7f:33:ee:94:e2:7e:73:
58:34:25:75:3f:bf:61:2b:aa:fb:78:da:d1:0f:35:ab:9c:4e:
7a:a4:55:0e:e3:b9:11:5f:79:fe:c4:12:1f:33:14:d8:99:6c:
4f:77:a8:60:56:fe:dc:d2:6b:a7:a0:7f:ad:9e:8a:c3:66:40:
24:74:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:52 2025 by rpki-client