
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
File: 2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft (raw, json)
Hash identifier: /D3V3e047+daxAPhBtleiJjHKbkFe1L8xy0Sdd+ub9E=
Subject key identifier: F8:EF:A3:18:62:D7:E9:A9:6C:90:BB:D2:FB:27:04:F4:09:79:18:5C
Authority key identifier: D8:17:3D:42:A8:78:8C:05:DE:36:FD:FC:D3:29:C3:5B:43:EE:CE:3E
Certificate issuer: /CN=d8173d42a8788c05de36fdfcd329c35b43eece3e
Certificate serial: 01940721AE54580D551EEC5B2E1566991C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
Manifest number: 0B03
Signing time: Fri 27 Dec 2024 08:00:35 +0000
Manifest this update: Fri 27 Dec 2024 08:00:35 +0000
Manifest next update: Sat 28 Dec 2024 08:00:35 +0000
Files and hashes: 1: 2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl (hash: wPHX7h/VnQzdGhXZ6J25Xy+eQ65fwJ+aqqawIvgkw04=)
2: DpyiQgQ9FdTG5s8YbeYxHyQxbOM.roa (hash: YoIx6oD1L1+W6DX16hCA9uHG0kfmePKoHXMxdCbW3dE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:ae:54:58:0d:55:1e:ec:5b:2e:15:66:99:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8173d42a8788c05de36fdfcd329c35b43eece3e
Validity
Not Before: Dec 27 08:00:35 2024 GMT
Not After : Dec 28 08:00:35 2024 GMT
Subject: CN=f8efa31862d7e9a96c90bbd2fb2704f40979185c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:9b:78:9e:3c:a9:60:e8:bd:ac:bb:36:93:
19:71:0d:3c:03:55:b4:28:89:06:32:1c:c9:a2:ca:
c1:d8:cd:83:96:5f:57:65:02:00:eb:fd:10:58:3f:
18:4d:c7:64:45:8a:55:f7:77:dd:1b:2c:5c:6b:01:
b0:b2:18:b0:4b:ea:85:94:37:81:4e:54:55:49:30:
94:6b:6f:f9:e4:d4:39:53:ff:02:73:11:cb:1d:09:
54:aa:0a:b1:44:a4:fd:08:9d:1c:70:5d:e4:ef:ca:
7c:f8:06:55:52:b9:e8:38:99:20:6c:0f:72:ee:fc:
c5:a3:25:56:6a:d4:3e:d5:8f:d3:e7:9c:de:54:8f:
84:c5:42:f6:56:fb:c7:61:3f:bf:5f:8f:6c:c4:9f:
e2:d3:91:d7:0a:76:ad:74:87:a3:bf:74:b1:0d:a4:
ea:26:7a:e2:3c:02:da:ef:99:0a:08:3c:bb:7b:b5:
8f:10:f7:22:92:94:65:77:36:16:6f:a5:06:f7:8a:
c9:3a:a1:3b:18:e4:dd:51:22:6a:94:70:33:f4:c8:
c3:85:42:3f:ef:2a:86:16:c3:67:27:4d:6f:fc:2b:
2a:e0:19:9a:e4:d7:04:e9:53:12:36:dc:ba:4f:d8:
4d:2d:f3:7c:29:36:4b:6b:a7:47:46:4e:03:50:5a:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EF:A3:18:62:D7:E9:A9:6C:90:BB:D2:FB:27:04:F4:09:79:18:5C
X509v3 Authority Key Identifier:
keyid:D8:17:3D:42:A8:78:8C:05:DE:36:FD:FC:D3:29:C3:5B:43:EE:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d9:d4:89:ff:37:1a:11:c8:27:71:0b:45:c1:6b:be:9a:d1:
da:4c:6e:66:66:3b:dc:f5:e6:ad:16:49:21:71:f1:f8:15:7a:
f1:15:b9:d1:38:02:6f:20:a6:dd:d7:7f:34:48:82:12:ee:7f:
fe:f3:e4:dd:30:f0:e0:d4:31:ab:c8:37:50:c9:11:78:b3:d2:
8c:b0:ef:04:3d:82:66:05:7b:6a:d6:50:bf:b6:33:dc:ad:3a:
52:52:1f:4d:89:92:9e:97:88:cc:82:7b:16:64:e3:4a:7d:b2:
7f:1e:b6:d5:37:e0:0a:ff:8f:27:8c:16:6c:6d:86:0a:ec:69:
1a:4f:51:d1:60:63:0a:1f:9e:42:a1:38:0c:e1:52:ed:f0:4a:
f3:59:fb:d8:91:3c:d5:7c:7b:3e:ea:a1:5a:ed:3c:5d:83:48:
70:65:04:37:e3:b3:79:5e:96:79:da:ee:f2:24:69:eb:f7:38:
30:40:6b:15:db:1b:5c:9b:a4:c5:16:60:42:14:eb:08:35:91:
c9:e6:d8:bd:2a:c4:21:c8:75:bd:a1:26:bb:85:da:35:be:62:
e8:bf:3f:da:8a:55:ad:ac:7c:42:99:d6:8a:a6:43:86:59:08:
8e:e5:a0:6e:13:9b:0d:9a:d2:31:aa:76:7b:5e:1d:32:e3:46:
6f:8e:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:03 2025 by rpki-client