Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.mft
File: 2qv8kBeos21pESDjc_CM5AH2r0A.mft (raw, json)
Hash identifier: jPq6VyBTNEDd0XZP5yTLGdQGex1tLz+SL1BBDjMliQI=
Subject key identifier: 35:0E:C9:86:F7:6A:67:4B:8B:19:21:53:53:0C:60:BE:E9:41:C3:88
Authority key identifier: DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
Certificate issuer: /CN=daabfc9017a8b36d691120e373f08ce401f6af40
Certificate serial: 018DF3AAD4E2D24CD6C98024CF717218AAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.mft
Manifest number: 082E
Signing time: Thu 29 Feb 2024 07:01:15 +0000
Manifest this update: Thu 29 Feb 2024 07:01:15 +0000
Manifest next update: Fri 01 Mar 2024 07:01:15 +0000
Files and hashes: 1: 2qv8kBeos21pESDjc_CM5AH2r0A.crl (hash: hl/f/MoInQnEa5jqyrbOiLmP9oIWlinTkecrgks+Chs=)
2: ddnj4lu0sQTNFIbeAWt1xIKZtdE.roa (hash: DWjFt2gA1aouapBU+5+4CCQ1iZ1B8tieiegVSKlm17k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:aa:d4:e2:d2:4c:d6:c9:80:24:cf:71:72:18:aa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daabfc9017a8b36d691120e373f08ce401f6af40
Validity
Not Before: Feb 29 07:01:15 2024 GMT
Not After : Mar 1 07:01:15 2024 GMT
Subject: CN=350ec986f76a674b8b192153530c60bee941c388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d4:bf:27:a6:61:a4:ca:c3:f2:e3:1d:c0:34:
15:01:7d:67:e3:33:81:43:6f:80:80:7a:e0:cf:89:
13:b9:87:c9:cf:3c:6a:c7:33:71:98:70:7c:e6:78:
f3:4c:01:6c:96:a8:52:a3:91:d2:02:f6:c2:46:95:
56:47:60:e8:66:f3:f5:88:a9:18:34:e4:e5:32:84:
f8:8e:e7:53:1f:cf:29:a6:c4:d8:6d:68:e7:5e:08:
60:db:f3:32:a7:02:55:8d:24:3e:26:72:f7:64:36:
2b:a2:be:86:36:c1:c3:13:29:54:aa:f6:36:45:18:
98:52:8e:d7:11:20:d4:2e:3c:ea:76:bb:38:a9:0e:
73:d3:15:3a:b0:03:ce:34:a2:58:2a:f6:47:ae:b3:
29:06:4f:84:da:ed:e1:2c:47:82:82:d2:01:3f:e9:
bb:47:85:d1:4a:bd:6e:cc:48:82:b0:f3:c5:80:12:
63:24:74:ca:86:74:8a:66:6a:40:bb:d2:fc:64:27:
de:14:2a:b4:7f:a2:d7:9b:4a:6c:93:9f:0a:71:60:
c8:e7:9b:42:b1:b0:fd:26:ea:ac:25:06:92:9b:7c:
a6:65:29:36:78:c9:44:39:e6:5d:ea:21:43:3b:3b:
31:be:6d:57:f5:f9:d3:e0:24:96:cf:f6:79:75:9b:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0E:C9:86:F7:6A:67:4B:8B:19:21:53:53:0C:60:BE:E9:41:C3:88
X509v3 Authority Key Identifier:
keyid:DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:80:49:8a:26:c0:7b:df:df:c7:3b:18:a3:86:89:96:bf:c2:
f3:b7:e2:b5:9a:f8:3e:ee:44:ea:4e:a2:5a:c1:2a:32:3a:d5:
4e:b8:96:78:66:4d:bd:13:3e:27:68:ad:7a:5c:f6:bd:ab:09:
5e:aa:2a:50:ba:c7:a1:07:e6:89:6d:73:8b:0b:0b:38:24:03:
c0:6f:ef:17:28:40:af:a5:ad:8c:f4:3a:1f:6e:2a:54:40:1b:
8e:87:52:59:26:50:ef:65:fb:e8:b0:c5:49:00:0b:ea:ad:e0:
86:61:ca:c0:a0:77:29:9a:7d:d4:7b:21:e9:64:a8:47:a9:88:
54:ce:56:08:22:a5:bc:7a:c3:52:24:0e:7b:af:ea:ed:49:59:
6f:e9:16:57:f8:9a:a2:d6:6f:ff:fc:f7:cf:12:a1:f1:e8:c1:
75:78:34:79:42:2f:1b:cb:47:fe:b1:8b:42:9a:3a:cf:fc:11:
db:cf:67:dd:da:99:f5:ce:8b:a4:f1:64:98:60:b5:0c:e5:00:
38:77:44:cd:5c:27:bf:52:b5:43:9e:c4:da:29:ee:df:c4:54:
7e:7e:ab:71:ad:78:e3:78:07:9f:11:f5:f5:2a:f7:06:24:1e:
7f:a0:34:0d:a9:6d:83:b3:83:ac:18:62:f8:6b:76:e0:a3:f5:
83:86:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:27:12 2025 by rpki-client