Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: Qj5c1M+P/sqIUuK2LfUjlh41JZL/PvhbGSzm+c5TxLY=
Subject key identifier: 25:D4:B4:14:1E:BC:FB:65:9E:63:FB:44:AC:CD:5F:CF:2C:1D:BD:CD
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 0194BBCE827B0BBA7346E7774681BF48CC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: +t/a5BsS6mF+9qr/LMGQYOaw3KT/YdwfTvvUTudPOXU=)
2: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (hash: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:82:7b:0b:ba:73:46:e7:77:46:81:bf:48:cc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=25d4b4141ebcfb659e63fb44accd5fcf2c1dbdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:d1:2e:b8:cf:d9:af:79:6a:a5:1b:25:fd:
46:55:75:b3:56:eb:df:56:82:3b:75:18:53:a9:8e:
f6:6c:da:48:02:4e:d5:32:9c:bb:27:59:24:1a:c3:
2c:84:35:cd:2b:08:e3:ab:60:53:ae:0b:8c:93:ae:
a7:3c:ed:cf:83:0b:18:ae:fa:f8:30:81:ea:50:47:
93:5a:b0:76:9a:5a:e7:f2:3d:b5:a5:fd:ba:63:17:
fd:38:bc:12:2d:46:87:a6:e3:36:cb:12:b1:dc:84:
0b:01:b0:07:1a:00:ba:d3:ad:1d:e9:6c:9a:c0:6b:
cd:d4:d4:6e:68:15:73:62:67:31:5d:02:d9:89:45:
82:3a:68:3c:f9:35:25:94:dc:d3:6f:3c:bc:c7:2a:
9a:bf:7e:c7:5a:68:8b:c8:a3:62:0a:bd:62:e5:17:
3f:bc:23:4e:4a:4d:66:b7:f8:24:50:dd:ce:2a:aa:
3a:54:94:0e:8e:75:30:13:e6:01:3d:d5:8d:3d:84:
62:dc:57:67:bb:0f:6f:08:f2:4f:14:74:a2:96:42:
fe:61:1d:90:fa:55:8f:f4:0a:4b:1e:4c:d0:05:ee:
ab:09:03:88:3d:f1:da:fa:e3:a6:41:93:05:a1:5c:
06:5b:3f:26:b3:ea:57:57:18:e1:34:d3:bb:b2:13:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D4:B4:14:1E:BC:FB:65:9E:63:FB:44:AC:CD:5F:CF:2C:1D:BD:CD
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:09:95:8c:6e:55:fa:3d:02:be:d5:b9:38:41:bf:75:6e:3b:
cc:02:6f:10:37:ae:1a:0c:a5:f0:6c:e7:7f:d8:31:27:69:3c:
9b:78:b2:ad:f9:ea:59:e6:70:44:13:20:d9:78:fb:86:fa:bf:
ea:81:44:06:c2:19:02:34:e1:75:ad:a5:dc:94:97:2d:43:39:
3a:01:0a:00:e2:b4:53:61:db:b8:94:9d:70:d4:21:db:7b:52:
ab:6d:65:27:e1:a2:50:44:6d:65:27:0a:75:56:e6:63:b9:1c:
50:b0:18:30:4a:e6:9f:8a:86:5f:d1:52:23:24:20:74:37:67:
67:5b:cc:54:4f:30:6d:75:bb:3f:95:20:62:48:bb:c4:7a:af:
5e:e4:dd:e2:9e:2f:f0:40:f6:48:7c:57:dc:ba:72:ef:32:27:
d6:a8:5f:1e:16:ec:05:b6:c7:06:a2:ae:10:0d:84:83:39:9c:
ee:a2:49:6f:40:66:75:04:ec:eb:2d:a9:80:1d:e9:1b:a1:56:
d0:56:93:c6:95:39:1e:ec:6e:06:4a:a4:c3:71:36:cd:e1:f4:
a7:4e:be:a9:83:fb:6a:e6:3b:7a:80:17:55:56:0a:95:53:5d:
07:c9:1e:84:a1:8a:4e:93:7a:02:37:bd:90:e5:14:e3:86:dc:
bf:ca:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:17 2025 by rpki-client