Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: 0QyXRQGGTJmKEyyBWLVpvXdMUvlnejzZcdSCKwz6i48=
Subject key identifier: 38:91:2F:6A:13:B5:E7:73:96:6E:59:61:AE:CD:BF:66:2D:06:3D:44
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 0194BC3BEB9135374783C12FE67EA90EBFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 0BDE
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: FhRdRjdocyyyebA8S+JMJhQWLj7dG88sBSZUW0WF61o=)
2: anoG2QxpBajiR81r5Nnqj0baENo.roa (hash: KO9yPbtejqfpWJpsarLnmq3okmJ48dSkW7G2+vLUOFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:91:35:37:47:83:c1:2f:e6:7e:a9:0e:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=38912f6a13b5e773966e5961aecdbf662d063d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:60:82:58:89:fd:60:53:4a:14:c1:5b:d4:
dd:bd:35:5b:20:12:0c:e1:2b:d0:ce:d8:42:16:c0:
d6:1d:26:7b:fd:f7:2a:be:d3:07:f7:6a:2c:45:fd:
b5:a5:af:1c:84:5c:26:57:b2:5a:1a:a5:51:fe:ca:
60:6f:e1:87:64:22:39:77:75:75:56:61:1a:26:b6:
8d:5b:cb:2c:96:79:d4:96:72:d2:39:c3:b1:1b:06:
7d:73:9b:75:3f:a7:83:fc:d5:e0:51:fd:bb:9b:6e:
99:a5:a3:08:90:61:03:be:85:a4:52:19:c3:a9:32:
41:76:57:05:2d:17:b8:68:fe:ff:24:77:16:0e:df:
c3:5e:73:2e:db:fd:41:6b:93:5c:fb:c8:1a:65:50:
da:f5:63:a9:eb:cf:3e:69:1d:ac:cf:7a:81:7e:ec:
3b:c4:6f:4f:93:1e:59:16:58:fd:47:46:54:bb:53:
98:10:c7:7b:0d:c4:2d:50:cb:24:ce:55:ce:92:c5:
0c:4b:df:1d:95:7a:f3:ac:98:ac:59:61:54:3c:24:
0f:94:07:08:c0:d4:10:e3:a8:5c:de:af:b0:4c:a1:
77:12:5d:c3:4c:a7:47:8f:5c:8a:5a:88:11:ca:25:
bf:ae:8a:bd:c5:68:c5:59:45:57:83:9c:15:5d:50:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:2F:6A:13:B5:E7:73:96:6E:59:61:AE:CD:BF:66:2D:06:3D:44
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a7:06:23:50:14:0a:91:c1:ef:c0:42:de:28:a8:c1:b8:96:
48:f9:5a:4d:2a:63:20:e3:dc:40:04:bc:9c:20:14:d6:c0:8d:
f3:dc:44:23:a9:9a:75:9a:e8:09:31:d6:46:f0:6d:3d:f4:01:
89:7f:7e:36:32:b6:d9:2a:4c:70:45:17:8f:e5:81:69:05:17:
6c:c0:cf:8a:55:62:ea:2c:73:73:e6:af:1d:91:ef:8b:f7:4f:
a6:55:ed:d9:b0:25:ac:71:22:6e:1e:e2:61:f5:db:cf:c3:ac:
8e:dc:ed:ea:80:c1:92:a1:0e:14:dd:02:26:11:c5:b9:99:b8:
76:ca:35:23:d7:55:53:26:ed:1b:3a:33:6a:13:8a:2c:bf:82:
e1:c3:c3:eb:2b:55:7f:37:c2:67:24:af:e2:5a:41:d6:5a:d9:
cd:05:f9:86:14:20:97:ee:bd:b4:39:24:0b:f8:64:91:11:be:
95:b1:a4:dd:bc:ff:24:93:03:d4:e5:85:d4:71:5d:54:c9:de:
70:44:30:ac:fe:c7:c0:70:46:b8:15:a1:3a:64:ac:bf:08:36:
ca:d4:e8:19:62:bb:a3:b5:7e:00:11:cf:4f:4d:2b:a1:42:91:
78:cc:4e:6b:99:90:44:04:48:25:9b:03:df:0f:e3:dc:7e:a2:
16:50:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:52 2025 by rpki-client