Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: h6MG7koSP5kbkXHiuMOZQ2vlpaD/wL9/6CCuM/taF0g=
Subject key identifier: 9E:7E:5C:90:4E:8F:D0:EE:A6:18:25:15:0C:72:14:48:41:73:5D:7A
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 0194BD17ADB2811059172D44BF57085988D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: D1WGBNZ8BV8+k9Zoo8K05PMIAI7WXaaiOVwQDJFH0XM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:b2:81:10:59:17:2d:44:bf:57:08:59:88:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=9e7e5c904e8fd0eea61825150c72144841735d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:f6:be:bd:89:fe:89:04:12:8b:c9:e8:22:
1a:3d:84:84:cb:f5:cb:04:36:75:0a:c1:d2:38:0d:
68:2e:55:38:ed:34:cc:6b:5b:85:7e:75:79:3f:51:
ff:79:91:65:40:df:30:18:1f:a8:74:cd:f0:33:b1:
eb:2a:eb:ba:f5:b7:be:b4:00:13:ad:21:7d:b2:b9:
a3:8a:be:79:a1:19:60:70:5f:08:b1:43:ae:63:dd:
3d:d2:b8:4b:f4:c5:10:99:08:88:7c:b5:1e:66:34:
54:a2:79:01:13:83:7d:03:8b:eb:06:d9:f3:59:8b:
a4:09:d1:49:f2:86:74:aa:02:40:e2:9b:6f:5b:55:
86:41:ea:a0:a8:b1:d4:4a:6e:ac:97:f4:82:c1:cf:
1d:4d:d9:54:42:2e:c2:84:42:9d:f6:87:88:85:4d:
26:75:2f:5f:81:4c:09:66:70:06:a3:76:8b:82:98:
f0:01:73:b8:22:f5:dd:03:8e:64:e8:47:6e:e2:db:
6b:8e:8b:62:6c:74:ac:33:86:2f:5d:4c:e7:70:d9:
2d:3b:88:48:48:fc:2a:f9:6d:13:70:d9:24:63:03:
99:b0:44:e7:22:e4:0f:74:3e:12:d0:d1:b0:b7:ea:
6e:05:67:13:c3:97:84:61:b8:ba:d0:25:6c:99:89:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7E:5C:90:4E:8F:D0:EE:A6:18:25:15:0C:72:14:48:41:73:5D:7A
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:69:55:17:ae:70:94:64:1d:a7:51:b7:cd:7f:6c:04:52:c3:
dd:0b:90:32:46:af:c1:12:ff:5f:07:ef:8e:c4:2e:7d:e4:a7:
63:af:21:d4:b0:3f:68:72:3d:2d:b2:76:63:f6:1e:30:5b:55:
b1:e8:6c:2f:e5:f6:db:61:f8:25:4d:2f:ba:7b:20:83:dc:f7:
04:c2:f2:29:94:62:af:51:92:ae:d5:ba:0b:ae:fc:53:e1:1a:
f0:6d:f0:b1:e8:a6:6d:23:45:32:16:4c:c6:7c:f9:c3:d5:c5:
c0:7c:df:ac:f4:d1:f7:8b:5a:7c:5d:a1:e6:e6:4c:c7:63:86:
a1:72:72:73:df:05:1d:90:10:01:b5:f4:2c:20:bf:4e:9e:38:
b6:d2:95:f0:99:a5:17:40:f7:74:64:4c:93:ce:d3:6b:bf:24:
60:e0:f5:29:d9:66:89:c1:ae:0a:18:0a:1f:4d:0c:d9:c0:8e:
91:ef:7e:4e:3d:3a:af:5b:a0:21:f4:4e:dd:44:b7:c7:01:65:
b9:b9:23:8c:4c:1f:a8:ec:0d:5a:06:d7:40:2e:e0:e0:ec:c7:
0f:d2:f4:60:95:89:20:02:2b:c1:9f:a2:70:66:6f:2a:e5:fb:
41:c1:89:89:af:07:6d:af:ae:19:9a:fc:3b:cd:03:6d:27:d3:
92:e3:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:47 2025 by rpki-client