Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: 25/WKgBGqoby65g5YHKp8sQXu1dZ+hvwiAoTWKAofFo=
Subject key identifier: B6:22:25:1D:1C:78:18:34:21:15:5A:F1:FB:2D:08:35:3B:D9:CC:CC
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 0194BC3C76A74D3D0D04DC13313E8E3DB091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 01E8
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=)
2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: wKjN7c/6Q3dQKpeu52zWx7hPEhLKaDvH4K2HZn8ckxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:76:a7:4d:3d:0d:04:dc:13:31:3e:8e:3d:b0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=b622251d1c78183421155af1fb2d08353bd9cccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:0e:c7:dd:77:9d:02:5c:c1:9f:42:40:3b:
4d:ed:65:68:4f:bf:00:fb:5b:a6:24:a4:4f:ce:a3:
df:6d:47:7e:fc:61:ed:1e:87:de:c9:6e:ea:aa:22:
d5:13:ab:7b:87:09:45:13:15:96:a6:e5:b8:f2:12:
87:ec:c2:e1:50:ff:1f:05:d2:24:e7:b3:28:57:46:
c4:16:3b:ee:14:ab:d1:8a:d6:9b:a1:f2:bf:71:f3:
98:64:dd:be:95:1c:af:7b:db:49:aa:db:2c:41:f0:
15:6a:14:90:ea:54:9c:6a:be:ac:0c:dc:cb:64:4b:
8a:eb:18:59:cd:fa:56:fe:c1:54:99:3b:ea:e2:43:
08:d2:f4:ea:0e:3f:46:7d:54:ef:ef:71:44:f6:ee:
fe:70:1f:17:2b:68:a1:de:d7:ac:f6:38:e8:4d:4f:
00:dd:80:b4:3f:21:b5:93:58:7a:29:38:8c:b1:5d:
7e:0c:98:1f:5e:5d:80:2f:82:4f:26:e9:da:fb:eb:
c2:49:ec:6a:79:aa:d1:ba:f0:59:9f:eb:a8:70:c5:
ca:e2:93:05:3c:09:1a:32:0d:a4:93:b0:c9:d8:50:
d0:14:f3:58:e4:b9:61:b4:87:b0:ba:82:9a:98:5b:
13:8c:46:f3:fe:2e:45:3d:86:fb:7d:5d:1b:c4:9d:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:22:25:1D:1C:78:18:34:21:15:5A:F1:FB:2D:08:35:3B:D9:CC:CC
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:46:9d:fb:2c:c7:02:0e:99:8c:6b:40:37:85:c3:72:7b:3c:
12:2e:7f:30:ed:5b:25:3f:80:46:73:c1:fd:75:3b:af:e0:a9:
b2:70:03:c4:27:ba:d8:cb:b2:88:af:84:f8:0d:e0:5f:3e:cf:
bc:cd:b5:7d:fe:60:08:d6:3f:d2:c6:03:86:08:12:2f:80:5f:
86:e0:66:9c:08:9f:98:9e:91:4d:2a:07:90:9a:dc:c2:9c:d1:
77:a8:8c:6b:3e:75:61:54:2f:e2:17:da:6f:bc:b9:b4:6a:e8:
b2:5d:35:49:ad:69:4d:cd:21:4c:47:51:05:33:0a:96:fb:2f:
e9:a1:67:61:86:7a:c1:48:1d:7a:05:52:06:7a:4d:49:b9:3f:
0a:43:bd:e7:96:9b:72:e6:2e:65:c9:42:ca:b6:8a:6f:a5:6d:
66:4d:b9:6f:5c:b3:9a:22:22:fa:71:ba:18:db:11:f6:60:cf:
22:76:32:a0:26:b6:28:bd:3c:83:e8:08:b4:29:67:c9:96:3d:
f9:c4:7a:50:59:61:c4:f8:58:b4:af:f8:48:f4:c9:22:3c:ff:
02:67:11:56:85:bf:ae:e1:11:fd:de:e1:33:22:ac:1e:85:eb:
7d:22:38:a0:c5:dc:9b:d5:b5:3e:c6:7e:7c:37:d2:97:76:b1:
fd:0b:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:18 2025 by rpki-client