Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft
File: 2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft (raw, json)
Hash identifier: zJ1pO90IX+CJdbp3uOVOWbEAiBpdz7kGGeyTgS8qeKQ=
Subject key identifier: 43:87:67:08:C7:32:0B:4F:0E:FA:16:E6:0D:D0:26:D6:39:AC:87:E3
Authority key identifier: DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
Certificate issuer: /CN=da828487183840993c01acf9d4005239484c42a0
Certificate serial: 0192B263A10CE50DB8DD9F17AF7B6EA5F53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft
Manifest number: 0812
Signing time: Tue 22 Oct 2024 04:02:06 +0000
Manifest this update: Tue 22 Oct 2024 04:02:06 +0000
Manifest next update: Wed 23 Oct 2024 04:02:06 +0000
Files and hashes: 1: 2oKEhxg4QJk8Aaz51ABSOUhMQqA.crl (hash: dD9DgWyTCNkntA+SgX4kpcV1FG88JbqLYpeux7dSPjo=)
2: gnZ3ec2tzjZ8N5uoFQq3H5JNDJg.roa (hash: FfXAIxdASOeIUwUGtRptck4sFfHj/a/5uvU6Jc3+HMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:63:a1:0c:e5:0d:b8:dd:9f:17:af:7b:6e:a5:f5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da828487183840993c01acf9d4005239484c42a0
Validity
Not Before: Oct 22 04:02:06 2024 GMT
Not After : Oct 23 04:02:06 2024 GMT
Subject: CN=43876708c7320b4f0efa16e60dd026d639ac87e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:a9:1b:7c:bc:af:6e:56:83:c2:94:1e:c0:
01:fe:b4:21:b5:d3:62:af:93:b3:37:9d:82:14:e2:
9f:2c:e0:1c:63:e5:1f:89:da:c6:9b:76:88:aa:21:
6b:4a:2f:0a:95:ff:fb:0d:64:0f:87:84:bb:81:b3:
3b:c1:8f:3b:ff:3b:37:e2:ab:d2:aa:83:b6:6c:f5:
c5:2d:06:50:8d:52:21:95:68:9f:3e:1a:ca:90:5d:
ab:1a:33:eb:0a:79:9b:ce:ee:53:f0:6c:ab:91:22:
41:cc:02:d3:9e:9f:1c:e9:e2:23:d7:18:5a:95:b3:
89:2e:88:23:dd:7b:ec:cf:f3:1d:22:95:45:fe:ed:
99:68:6d:f0:52:d4:2a:14:35:e1:20:2a:a2:b7:fa:
2c:36:60:97:96:b6:d1:6d:a4:5d:b6:3d:38:c3:0d:
4a:d7:51:57:e9:96:8d:8b:20:82:46:38:e3:8e:b5:
ae:e5:88:55:ca:38:f9:81:0d:dc:5d:b2:bc:58:ca:
0e:64:b4:25:e0:79:05:a3:58:cf:de:f5:01:82:6e:
7c:59:cd:4e:45:be:ef:51:ae:6e:c6:51:5f:32:00:
31:3e:d9:1a:27:d8:29:7b:28:15:fa:ec:1d:6b:0b:
ad:ed:58:8a:78:65:f5:04:67:74:a4:2b:41:54:95:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:87:67:08:C7:32:0B:4F:0E:FA:16:E6:0D:D0:26:D6:39:AC:87:E3
X509v3 Authority Key Identifier:
keyid:DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0d:de:49:ed:d6:b9:13:cb:07:74:5b:1a:b1:02:d4:3d:21:
1f:e3:f1:4c:88:33:33:07:35:44:8b:ec:73:2c:a4:0b:74:0a:
32:02:90:13:0d:a5:a1:68:ae:a6:4f:3b:61:ef:bf:df:04:03:
c2:9d:01:3e:5e:aa:f1:f7:6f:24:c4:55:ff:35:e5:b6:66:44:
a8:9a:4f:26:04:a7:84:a5:37:1d:1f:b5:f6:f7:12:ef:ea:00:
fa:d0:80:64:00:aa:9a:d6:f4:86:73:a8:38:72:96:9a:87:52:
5d:1b:1a:c8:34:85:71:ec:45:5d:f0:f0:7c:b7:25:7f:a3:7a:
cb:0b:54:00:b0:c9:1e:c4:65:e9:ff:37:16:b8:c1:6b:a8:4c:
1f:b2:1f:82:0b:8d:dd:87:e6:75:ce:25:b6:9b:c4:11:3f:aa:
7d:d2:43:3d:50:5f:13:c7:ef:74:ef:c0:21:71:d5:0e:2e:3e:
d5:14:d6:12:8a:fb:66:5a:fc:44:2c:f3:74:e7:0c:6e:8b:a2:
8c:67:09:ee:64:89:f2:d3:e1:6c:03:a0:4b:a8:f4:0b:bc:d7:
2d:d7:be:f4:35:53:69:1a:5a:55:fb:25:fa:40:d9:60:78:b4:
09:a4:12:8f:70:77:e2:69:fd:44:50:48:b3:35:4d:f0:52:b5:
1d:3d:27:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:27 2025 by rpki-client