Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier: wX5RbcY1X5rL+3u4e55ptjciZjSbScfcNAr0Z/XAfHc=
Subject key identifier: 19:58:2B:39:EF:D0:91:7D:BB:95:53:10:28:22:52:B4:C3:C9:96:96
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial: 0194BC04CEEBCFB49FD326EDA0F132AE9A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number: 0EA2
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (hash: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=)
2: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: m32sMDdZlpx0tmoX326+kIAE+K2QptJNCE/m5fnKQ7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ce:eb:cf:b4:9f:d3:26:ed:a0:f1:32:ae:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=19582b39efd0917dbb955310282252b4c3c99696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:7d:2d:af:22:4b:dd:82:09:70:2a:ed:2a:
c5:05:35:f7:f4:cc:e8:90:f3:14:0d:bc:cb:87:c0:
4b:4d:c4:72:90:d1:99:f9:bc:49:e5:32:56:68:af:
e1:da:f8:b4:b7:20:97:74:26:be:e2:e1:10:76:e5:
47:7a:a4:5b:08:31:18:83:94:e7:03:ea:26:a5:df:
36:c0:ca:de:d7:c4:e7:60:1a:32:40:95:76:0d:71:
a8:0a:f3:e3:62:68:61:12:32:e2:85:31:c6:4f:93:
3d:00:81:4a:7d:d5:4e:eb:c8:ee:b8:0e:f6:f3:65:
dd:37:ab:dd:b1:8d:95:f9:f0:22:3e:ee:e7:45:5a:
6b:16:4e:09:00:e0:e3:ca:55:21:e9:af:42:25:b8:
ee:49:45:a9:49:13:c2:2c:39:23:a0:ad:91:22:ff:
ab:6e:86:fb:20:a2:48:1c:b8:9d:1e:a9:5b:75:29:
a4:77:45:d0:63:76:0b:96:d0:6f:79:f1:67:80:e3:
6b:c5:be:ce:b6:45:fd:f8:ed:19:47:11:50:98:22:
7b:1d:e8:be:c2:61:64:b0:9d:fd:6c:ee:2d:1a:4d:
83:b7:ae:3e:b3:81:c9:92:16:05:14:3b:1d:ed:5e:
81:09:7d:de:8d:b8:5d:fc:88:83:0b:7f:43:a4:f8:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:2B:39:EF:D0:91:7D:BB:95:53:10:28:22:52:B4:C3:C9:96:96
X509v3 Authority Key Identifier:
keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b9:c7:7c:eb:0a:24:ca:75:32:9b:ca:cc:d2:40:66:39:93:
6d:d3:6d:01:14:9f:a3:76:f5:c9:93:6b:58:56:f0:5c:d8:4d:
d8:f0:f3:10:31:c4:b5:fa:ce:8e:61:e0:48:ee:e3:bb:68:2e:
d5:b5:c8:b8:61:00:b9:5d:b5:1e:eb:61:3e:32:ce:38:b2:1d:
10:7c:f4:18:e7:30:ba:89:ed:a3:28:2e:f5:44:2b:18:b4:19:
b0:ad:87:38:7c:28:db:2c:36:f4:50:d0:7a:1a:b1:ac:03:ad:
34:fd:9e:d6:7b:56:b0:64:83:c6:e1:43:73:58:6b:85:2c:00:
4e:10:1d:85:fd:b5:cb:91:89:f0:3e:b7:a1:26:41:4f:de:86:
54:45:bf:d2:04:ce:53:39:d0:ce:43:09:2e:7a:77:36:f9:9e:
31:63:c4:73:cb:65:c5:91:b9:e8:95:e9:94:2a:0e:f4:76:9c:
2f:d0:46:4d:f0:4e:c3:aa:4e:f5:5d:d6:d7:a8:74:00:4b:55:
ee:0c:9b:ea:b2:3e:15:2a:c6:bc:81:e5:67:32:d5:95:f5:45:
b9:40:00:52:24:2c:3e:d9:91:55:2e:25:5c:cf:31:de:50:ec:
d1:1b:e8:f4:8a:3e:66:07:3e:6c:34:00:fa:f2:9e:cc:cc:a8:
fa:2d:a5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:09:04 2025 by rpki-client