Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier: /VWKg+xE3MJWiS0NASmMCqGTVcROTKIPjvb9wEnrf68=
Subject key identifier: E0:C7:49:79:73:58:55:48:18:15:CE:D2:E1:FE:C7:0D:C4:AF:77:7D
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial: 0195E07D8B4A6D0013F7165E258837B94A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number: 0F1F
Signing time: Sat 29 Mar 2025 06:01:18 +0000
Manifest this update: Sat 29 Mar 2025 06:01:18 +0000
Manifest next update: Sun 30 Mar 2025 06:01:18 +0000
Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: YEDSI1IcOSRi2wLkO4Hp/hN/IdmONgORnDngABJSijU=)
2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:8b:4a:6d:00:13:f7:16:5e:25:88:37:b9:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Validity
Not Before: Mar 29 06:01:18 2025 GMT
Not After : Mar 30 06:01:18 2025 GMT
Subject: CN=e0c74979735855481815ced2e1fec70dc4af777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:b5:5f:26:73:24:42:eb:7a:d6:e7:b6:bc:
66:e2:6c:91:56:83:44:90:68:ef:05:82:de:62:3a:
9f:91:88:31:19:c2:73:be:21:f4:b0:42:60:4e:07:
7e:81:0f:16:fe:fe:8b:3b:80:34:a2:c0:45:51:db:
19:ed:10:8b:12:dc:7c:9b:dc:fb:c3:d1:2e:c7:be:
15:6e:5f:bf:f7:4b:e5:07:1d:dd:37:51:e8:4a:12:
b3:18:0c:29:43:35:70:d4:03:78:b6:23:a7:5a:11:
90:f7:b6:5f:b2:3f:02:f0:b9:67:05:61:39:c5:65:
43:87:95:1c:b8:fe:2d:2d:cd:6a:c9:43:a9:2c:96:
30:a5:04:b9:f2:78:3a:9b:f4:fc:20:92:65:ed:dd:
cb:44:22:92:ca:0c:24:f8:e2:3d:79:38:7b:b2:e3:
29:14:cc:ac:11:c3:71:9e:59:50:49:ff:2b:bb:ad:
4a:8a:44:9d:7b:82:4e:8c:d9:90:ea:8c:84:5a:c5:
d7:31:78:c6:a8:72:14:36:5c:06:71:1e:4f:47:3a:
25:be:6d:c5:0f:45:63:ff:87:25:93:fb:66:16:21:
7b:05:44:80:62:da:a7:06:d2:d7:e3:64:3a:7e:26:
f3:2e:53:16:71:c4:e4:b8:41:20:8b:ef:86:57:53:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:49:79:73:58:55:48:18:15:CE:D2:E1:FE:C7:0D:C4:AF:77:7D
X509v3 Authority Key Identifier:
keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:ce:c2:94:49:7f:98:52:ff:c5:d4:7f:3f:27:f1:5d:70:
7b:30:b6:2e:02:81:9e:56:22:1b:ff:16:f7:5d:6c:8e:52:ba:
26:3d:e1:08:66:9b:84:cc:15:c4:0a:e1:3a:66:88:d1:d5:3c:
ee:ea:79:b2:dd:fd:db:1b:63:02:51:2a:43:14:d8:b6:8b:fd:
14:38:ce:50:d0:cd:76:f3:7c:2d:9b:98:b7:50:7a:be:4f:85:
fd:0c:bc:13:19:5b:32:f3:ea:b9:f6:0c:db:33:67:f9:80:a3:
ff:05:dd:b4:57:74:62:28:06:40:c9:da:ce:d7:9d:d6:3e:ff:
0f:b1:88:a9:ef:cd:fb:77:72:80:5e:78:dd:57:f9:c2:ba:9b:
84:d0:82:fa:f3:1f:0a:d5:37:bc:e1:c8:91:2e:fc:c7:a2:6b:
c4:64:3e:53:3c:a9:52:9d:03:b5:7b:80:57:7b:fa:9d:b3:1d:
ae:46:60:d2:7b:87:56:31:f7:f7:f4:45:06:46:93:93:6d:f7:
61:83:85:bf:50:da:63:12:2d:04:a5:29:b4:f4:56:8c:28:cb:
dd:8d:0c:fe:cc:4c:45:04:41:72:ab:98:cc:32:b6:46:0c:e7:
bc:ea:d3:2a:ea:4d:31:58:d2:6a:06:32:1e:e4:81:ea:97:af:
dc:27:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:00:26 2025 by rpki-client