Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: h1+RcDJ8FvJ+9tHvlfZr6/4Xk81/a7T0Sp9uCHA29ow=
Subject key identifier: 02:68:9C:77:1B:98:FE:33:BE:19:6B:8F:97:4B:6B:FE:D5:31:7E:A6
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 0194BCA9F244C6ED7D69704C4AF139A7E1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 1051
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: vIt6qLvMP99jur7R5Nqud7qa80WN+nz4BjjaNLg6nDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:44:c6:ed:7d:69:70:4c:4a:f1:39:a7:e1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=02689c771b98fe33be196b8f974b6bfed5317ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:ac:99:ea:b9:a2:d5:4f:20:e4:19:59:5c:
cd:73:6c:03:3b:8f:5d:c8:5e:92:0d:9f:4d:6e:65:
5f:d3:2e:37:09:19:6f:bf:de:b4:da:fe:cd:f5:17:
45:60:1a:ae:68:54:ff:6d:fd:b9:cf:10:d8:91:cb:
1f:9e:a8:88:e5:b2:ea:ce:0b:8d:32:19:56:5a:a5:
c3:c6:e7:5b:80:fe:c1:45:f4:47:0f:9b:bb:ed:06:
12:75:3f:06:0e:7c:13:58:e4:7f:06:89:98:4b:dd:
0b:a6:d2:76:8c:b5:ca:cc:cc:6e:cd:88:ef:63:90:
de:96:44:60:ca:14:3f:53:f4:0e:bf:26:6f:53:2f:
63:e7:ef:83:42:48:f3:a3:f6:bc:d6:07:e6:bd:8b:
b3:94:61:83:07:6d:3e:d7:5d:99:f1:22:6f:4a:88:
d6:09:16:30:34:31:c4:e2:f5:67:3a:41:9d:2f:08:
8e:91:6a:22:a7:d3:f4:1a:ec:2c:9f:0d:19:16:29:
51:1f:2b:13:eb:bd:05:c5:8e:60:a8:38:c4:e6:c8:
24:7a:91:de:42:a9:9b:32:db:ba:5d:7c:fe:28:5d:
2e:08:e9:f0:41:0a:93:08:a6:b4:dc:77:02:2d:22:
db:d7:a0:d0:21:03:16:9d:e1:7d:a2:7e:0d:97:ad:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:68:9C:77:1B:98:FE:33:BE:19:6B:8F:97:4B:6B:FE:D5:31:7E:A6
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8f:1c:6f:f0:86:38:61:34:fe:b1:82:28:61:7e:92:8e:d5:
e8:ca:11:91:d1:17:ee:25:b4:c5:50:32:6e:de:69:e7:17:24:
5e:df:f6:22:80:de:81:d2:e4:69:d5:26:18:57:af:0c:77:5e:
b5:fc:a6:6e:ec:7c:37:06:51:22:c3:aa:dd:35:73:3f:a3:37:
e3:a0:a3:20:7b:0b:87:8b:b1:e6:99:e7:cc:7f:a7:80:66:9f:
11:fc:c5:4f:69:a4:7c:dd:2e:d2:06:8a:cc:b1:7a:29:b0:c8:
4b:ea:2d:e3:d3:69:be:3d:5c:f0:35:d2:44:e1:fe:91:af:ff:
ee:5f:de:92:76:a1:d0:bf:7f:a9:6c:83:eb:f7:04:76:51:0a:
48:6b:80:22:9e:8a:1c:62:cb:0c:3b:bf:21:14:1e:8f:35:be:
40:56:52:b8:f2:9b:f3:1e:d9:e0:c7:35:ae:44:74:ca:6e:27:
ec:1d:79:bb:52:cd:ac:6b:d5:c1:77:6f:7e:4e:8d:a9:ad:6f:
76:a7:c9:9d:e9:53:db:b5:8a:f6:5d:f4:05:3e:9a:1e:95:a9:
32:6b:f5:73:7c:93:89:59:fa:65:a8:f3:05:6a:c9:04:64:47:
d7:66:30:29:de:2f:37:42:14:99:9e:04:3e:6d:a5:96:7f:f5:
d1:b1:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:59 2025 by rpki-client