Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: G+k5SzE7k+DScESPcT3Xw3l1lidrhVZWgZxeTczOWiA=
Subject key identifier: EF:0C:95:71:5A:7A:BA:45:F5:13:79:60:0F:9E:4C:93:21:DD:2A:BD
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 0194BD85A8477274335F209A586EA1B847DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 0D86
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: +KH2HwvKj5XMtEVf6987skBWAsjpnIlcCS839HjhUt8=)
2: wpUZVReQHXzsn_DPk2ck08lBo6E.roa (hash: uqt9xMeCs/4H5VzlZsIDbAr0gO/Vsft4k85bkU/+qVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a8:47:72:74:33:5f:20:9a:58:6e:a1:b8:47:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=ef0c95715a7aba45f51379600f9e4c9321dd2abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:1d:50:9e:01:ad:15:ef:30:9d:d4:d2:23:
e5:5a:91:d3:5e:9b:87:a1:96:7d:34:6c:41:b9:ce:
dd:02:78:90:04:8b:f6:1b:44:bc:bf:bd:1d:07:90:
8d:08:63:ae:14:11:cc:32:0e:99:76:48:a5:f2:fc:
61:62:94:53:b4:08:ed:49:f6:03:99:05:8d:d5:c5:
e8:a6:87:4e:82:f1:0d:ce:c9:6e:12:d3:a7:ed:e6:
6c:b1:75:27:4f:27:f0:69:d7:0d:ef:a0:b4:09:2c:
8d:c7:27:90:c3:fe:7d:79:f6:7c:9f:70:2e:59:fc:
38:c1:eb:58:99:27:9f:ee:85:3d:48:06:5b:68:e8:
c0:90:ca:c8:01:85:c7:45:e4:3d:ed:0a:fa:21:e2:
15:77:8a:54:b3:0c:8e:8d:9b:2a:d7:a1:be:7a:50:
b2:14:cd:2b:35:f4:26:ef:1b:44:5d:b5:83:31:13:
b9:b0:53:3e:e6:ba:8b:91:04:bc:ee:cc:48:3c:74:
d1:fc:11:d6:49:e6:8d:d3:82:41:91:34:49:cf:26:
4e:fd:48:d5:a0:3a:f3:5b:ff:8b:1d:1f:b1:f9:6e:
14:ca:06:6b:c9:c6:49:07:6c:04:21:3d:bd:24:e0:
8e:d8:29:2c:4a:0e:06:9e:c6:b8:08:4d:5a:86:70:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0C:95:71:5A:7A:BA:45:F5:13:79:60:0F:9E:4C:93:21:DD:2A:BD
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:68:e4:b3:a7:93:46:46:42:bc:25:43:0a:24:98:4f:a2:af:
82:ba:f7:e4:9b:7e:e1:d5:89:da:d3:26:8a:f4:7e:5f:75:e6:
02:a1:82:2e:04:4f:e5:9f:a4:d2:5b:3b:36:b2:c3:01:aa:18:
11:36:fc:cb:3a:3a:73:44:e3:a4:7e:b6:13:39:18:90:a7:8c:
bd:a8:7e:d1:8c:fc:11:5c:5d:aa:f8:87:15:99:7e:7c:f5:45:
19:da:19:b2:93:26:0a:8a:28:48:91:fd:1f:c1:28:e9:ec:be:
bd:a7:25:4d:af:19:83:b9:ce:59:c7:80:6e:c9:ae:c9:78:8f:
b2:77:89:28:b9:cd:14:8c:01:bf:dd:ae:ab:ae:bc:16:4e:18:
f3:7b:0b:ce:75:92:e0:d4:37:03:c4:8f:71:bb:bb:a9:7c:39:
36:f1:e9:6a:92:5c:94:ac:e3:56:d8:e8:30:14:27:76:7c:0e:
82:bb:ac:1a:3e:cd:f0:e0:b6:64:86:7f:c2:fd:e0:19:8c:88:
3a:b0:c3:2b:cd:e3:27:ec:3e:91:e5:1c:15:34:04:90:88:50:
fe:c3:e4:e9:6c:39:27:a8:d2:58:6d:cf:11:83:a7:f2:ce:be:
f9:c6:17:c6:2e:e8:43:64:d7:46:9d:87:28:a2:90:b2:46:f6:
7f:fc:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:50 2025 by rpki-client