Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
File: 2LogEg7G3ID9NRpTPSyFyg2YMpk.mft (raw, json)
Hash identifier: xLaWzTd1WQt5t99bQbRr5ue+40DXkVpAwhLt8bUwXy8=
Subject key identifier: 2B:0C:DD:B0:74:E0:7B:51:95:32:20:7A:BC:4B:B3:58:9F:F8:C8:09
Authority key identifier: D8:BA:20:12:0E:C6:DC:80:FD:35:1A:53:3D:2C:85:CA:0D:98:32:99
Certificate issuer: /CN=d8ba20120ec6dc80fd351a533d2c85ca0d983299
Certificate serial: 01940647DD40D71C35A9E3E0AA687B5E1FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LogEg7G3ID9NRpTPSyFyg2YMpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
Manifest number: 0EB2
Signing time: Fri 27 Dec 2024 04:02:40 +0000
Manifest this update: Fri 27 Dec 2024 04:02:40 +0000
Manifest next update: Sat 28 Dec 2024 04:02:40 +0000
Files and hashes: 1: 2LogEg7G3ID9NRpTPSyFyg2YMpk.crl (hash: DH/ucdlmtBJELnRz7e/yRvbHmwLywyeKYVOyqN3mnWg=)
2: 9V2BKnKBMK0VJ7PFnAdXsUMYNqo.roa (hash: 0FjCfTTIm1iCsgiAhyU8h37USdk2WAUxdtXx4UpG5E0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:dd:40:d7:1c:35:a9:e3:e0:aa:68:7b:5e:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ba20120ec6dc80fd351a533d2c85ca0d983299
Validity
Not Before: Dec 27 04:02:40 2024 GMT
Not After : Dec 28 04:02:40 2024 GMT
Subject: CN=2b0cddb074e07b519532207abc4bb3589ff8c809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:0a:b8:04:d9:a9:81:9d:4f:c5:ad:87:77:
a6:49:7f:70:cc:57:98:53:62:58:9a:33:ac:80:bc:
66:e8:8c:4a:1e:9d:0b:1b:da:96:dc:84:73:6e:af:
a3:9b:d7:5f:f2:ea:cd:cb:b2:20:f3:57:2c:a6:2a:
da:c1:ba:0b:10:51:a2:d6:3e:32:23:8c:34:7b:2c:
35:8a:be:a5:37:e4:59:c2:b1:af:b3:31:82:92:05:
5f:e2:79:41:34:4e:a6:da:63:2b:65:f7:d6:49:3a:
ab:9c:09:fc:68:13:37:43:5f:96:26:cd:34:ab:e5:
10:53:4d:cc:bc:42:59:dd:b4:a4:38:45:5f:65:2b:
c6:77:c0:9d:28:bc:ad:8c:82:9b:a0:97:54:0e:78:
63:af:77:aa:21:22:0e:ca:11:aa:69:c2:39:fd:60:
a8:d0:8a:24:08:df:9e:4b:86:9b:07:a3:fb:69:cc:
ca:5b:ab:49:91:b7:f4:e4:4b:57:81:a5:f7:bd:05:
1c:d1:e1:ec:0d:49:0a:20:40:60:d5:1e:2b:0a:68:
c9:b0:c4:46:13:3b:70:cd:f9:2b:2a:9d:02:71:61:
35:91:84:fb:c8:e4:87:fe:8f:31:f6:b7:f4:f9:55:
fe:bc:02:67:97:57:d2:c5:c2:c7:1a:f3:ca:5c:31:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:DD:B0:74:E0:7B:51:95:32:20:7A:BC:4B:B3:58:9F:F8:C8:09
X509v3 Authority Key Identifier:
keyid:D8:BA:20:12:0E:C6:DC:80:FD:35:1A:53:3D:2C:85:CA:0D:98:32:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LogEg7G3ID9NRpTPSyFyg2YMpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:73:31:14:72:ef:51:84:67:84:a4:e3:ec:f3:df:db:7b:6f:
14:62:4f:35:37:d9:ba:cc:4b:20:28:01:e5:11:a5:74:79:70:
de:3a:5e:d7:e6:6f:58:00:db:07:71:2c:9b:43:3d:0f:bf:a0:
05:b6:b3:81:82:9e:0d:f9:71:c4:72:8f:08:b7:db:fa:a5:48:
5e:99:e5:02:2a:d6:04:ce:3b:f7:d5:44:be:a8:3c:22:81:f8:
34:03:da:fe:03:7d:bf:ff:a8:6f:6c:71:73:ff:d5:e2:c1:58:
fc:45:65:a6:7b:28:f4:f9:c8:13:b8:14:ca:a7:4c:79:fd:19:
6b:5d:f0:d2:b5:eb:56:1b:bc:95:1a:31:94:fb:46:f7:c4:b3:
20:4e:5c:4b:ac:07:6e:8d:f5:75:91:ee:f5:51:29:98:67:c6:
ec:c7:6f:ea:52:ca:f1:77:00:ad:e1:b0:69:c2:be:79:8b:b2:
07:de:7c:e6:4a:b0:80:54:dd:41:51:f9:2d:8a:34:f9:af:d5:
f6:c8:ff:ad:31:c7:d8:8f:31:be:67:38:5a:e1:dd:37:fa:bc:
49:fe:5d:9b:ec:39:7f:41:10:8b:ff:f9:56:2c:d4:c8:d3:38:
71:ce:91:2f:ba:1f:e3:e5:95:ae:ec:0a:0d:1f:42:55:f0:44:
97:a8:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:29:12 2025 by rpki-client