Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: X8/gk8VyV1wx2I/ovBcCDihQ5WELiJkDZBQRH30eSOY=
Subject key identifier: 97:AC:CE:BC:F2:4C:45:9A:70:98:B4:0C:7C:21:81:F3:80:D9:4F:BB
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 0194BD85AEC4D40EFE0AA9550524A6BCAB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 01CA
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: 2C3GdujUQDHGNwQZ8eVk7DJiszsuR1noZrUkf9ZSQcs=)
2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:c4:d4:0e:fe:0a:a9:55:05:24:a6:bc:ab:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=97accebcf24c459a7098b40c7c2181f380d94fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:1d:56:fc:0c:9a:ad:f1:f3:c4:0c:1f:f6:
36:0f:c2:16:89:85:e0:b1:37:01:c9:8e:05:c8:f1:
5f:27:09:68:cb:64:ff:45:7a:f7:0c:6e:42:a4:e8:
a9:b6:bf:39:fb:48:7a:57:df:ec:57:4b:d3:fb:79:
04:ea:0d:87:78:6b:fb:19:23:a6:ad:67:79:11:08:
a0:20:96:53:84:f6:d1:86:bf:0c:2f:91:d0:a9:75:
65:08:b0:f6:d5:0c:1d:a0:04:f1:57:1a:26:8c:31:
a1:f3:99:d7:12:66:88:12:2b:9c:59:06:fd:9b:b0:
6c:70:75:45:8a:c6:ee:a7:0a:79:23:57:ef:45:16:
0a:a6:08:b9:e2:18:b7:b9:ba:cb:8e:39:c9:67:67:
ce:ca:e7:40:37:44:d0:8d:aa:30:2f:0d:80:72:39:
c1:41:6b:e0:7a:76:23:5c:23:22:3d:d8:a7:d9:61:
4f:72:05:9a:b5:a6:ce:79:4c:65:d6:5e:17:5c:ed:
31:f4:0d:ba:24:bb:cb:02:04:a7:de:18:2d:48:cf:
55:a2:9a:fc:02:31:8d:3e:3c:cc:45:f3:39:70:56:
49:0e:84:33:22:a8:a9:64:b6:9d:80:0e:fa:cb:01:
74:37:ca:db:06:4c:b9:d4:09:dc:ec:32:a5:6b:31:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:CE:BC:F2:4C:45:9A:70:98:B4:0C:7C:21:81:F3:80:D9:4F:BB
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:36:2b:a1:dd:3d:ea:05:d7:60:05:f3:0e:22:e7:dd:9c:4e:
6a:d0:79:f1:eb:e8:ab:c6:fc:78:72:a8:af:94:60:90:5c:3e:
3f:df:a2:ca:17:4d:ad:04:fc:69:84:68:69:04:28:5e:28:1a:
fc:38:a3:52:a9:49:30:4f:ef:6c:1f:10:db:d1:c6:ff:50:36:
69:6a:82:99:c7:fe:f4:3a:97:75:fb:08:97:0c:22:d5:1d:15:
ad:6a:0e:6e:1d:ca:30:e2:f6:4b:31:33:9c:14:89:09:dd:87:
6c:24:42:a6:c4:ae:5f:f4:64:bb:f5:16:62:25:a3:9b:15:bb:
38:a0:56:86:ee:d3:75:61:a5:cc:2e:5a:ce:db:2e:64:b0:55:
73:8c:78:10:b7:ed:6c:af:36:3b:60:96:7b:24:91:71:6a:7f:
4a:3a:d0:d1:88:89:35:05:05:c8:28:49:7e:3c:27:f3:b7:4c:
12:27:bd:4c:4c:68:3d:06:44:e1:b5:ef:f1:e8:d9:8a:f9:c3:
5b:ba:e7:04:00:e9:73:18:53:45:12:48:ef:48:a3:a7:89:e6:
28:5f:5d:08:93:4d:86:06:7b:6b:af:38:de:91:dd:1e:23:47:
b7:07:d8:6a:32:56:03:37:8e:59:4d:0f:4a:01:88:1e:a9:5f:
fe:49:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:05 2025 by rpki-client