Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: Pna6MZmjZBFA0puLXxCyZYe69COCQtOGsJeph+lFFsM=
Subject key identifier: 79:9E:E2:52:13:93:EB:7A:20:28:3A:3B:82:1D:E1:DF:DC:3B:A9:FB
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 0194BC3C4E5119EC7B613C937AD2899BFCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 02E0
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: jhtPE6lLpTRHVfVbfn5MXvUTytFZi30EQjyEX27CJO0=)
2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:51:19:ec:7b:61:3c:93:7a:d2:89:9b:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=799ee2521393eb7a20283a3b821de1dfdc3ba9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:5e:2d:f4:d2:0f:05:62:f8:02:0f:d8:ed:
12:aa:17:74:8c:24:52:d7:50:a0:a2:81:11:a3:20:
2d:54:bc:0e:7b:f9:49:31:64:37:2f:2c:f1:ab:10:
3d:46:8b:6f:39:5e:76:d6:73:15:c0:c8:80:cb:f5:
d0:b3:d3:a1:8d:d2:2c:0f:57:b9:db:b1:52:4b:bb:
d5:65:2a:65:8b:49:71:24:99:02:8a:44:fe:20:3d:
73:13:66:7c:e4:02:02:ab:ce:b2:81:b2:ee:08:fc:
10:ab:3a:43:e9:4d:d1:0b:71:b0:7d:9c:2f:da:15:
82:34:ab:1c:db:33:31:58:d1:c5:b3:48:aa:b3:84:
ed:59:f2:02:aa:ed:99:a8:14:4b:08:36:a4:86:e2:
50:8a:7a:a8:7c:0c:a7:81:4d:8e:21:eb:2a:ab:08:
1d:92:21:64:28:b0:a6:f0:ca:6e:c6:07:f3:39:8d:
db:2d:66:54:ef:c0:e6:9c:24:bc:6e:b8:d1:b0:f0:
e5:bc:77:df:67:26:3b:87:48:19:6a:0e:9c:2a:9f:
61:9d:25:0a:87:26:73:3b:b1:32:5e:09:b4:04:cb:
1e:55:36:9c:c6:7f:b0:2e:1e:cc:00:8e:61:42:05:
91:80:1a:75:af:87:92:dd:43:9b:73:4d:e5:49:ca:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9E:E2:52:13:93:EB:7A:20:28:3A:3B:82:1D:E1:DF:DC:3B:A9:FB
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ac:b5:b8:6d:6c:21:71:93:fa:56:88:d9:28:63:e1:54:99:
e6:c4:41:13:2e:65:5f:2e:b4:bd:f3:c7:b2:cb:31:87:93:e5:
e8:1c:2b:79:5b:f8:b2:04:49:4d:4c:eb:8d:c9:1b:9f:9d:2a:
da:51:04:30:23:e2:e6:d5:55:a2:71:fa:34:c1:83:76:49:a1:
a4:6d:48:19:14:91:cd:06:46:56:08:94:4f:95:15:23:65:f2:
f8:dc:c5:51:d6:c6:5c:f4:2b:3e:17:5d:5f:d0:5e:2e:d9:d2:
47:ca:29:99:1e:2f:68:db:df:10:dd:cb:ab:8e:6b:e8:c1:17:
5c:9f:b8:3f:fe:1e:86:0b:4f:38:0f:45:19:d2:c3:99:46:fd:
74:ac:4b:5b:e0:f1:52:dc:79:5f:3b:87:6a:89:2f:1a:23:3a:
a4:69:82:3d:30:50:c4:9a:01:a5:c6:0d:88:07:f6:17:e5:a4:
17:d7:60:67:9a:56:5b:1a:f4:ee:4f:58:e8:b4:3a:58:bb:0f:
a6:0a:50:78:25:5f:72:15:1b:3e:7a:83:d9:b7:08:cf:9c:a8:
20:fa:55:82:07:8d:69:d6:b0:82:26:7a:9e:1d:20:3e:a7:e7:
46:85:d9:df:49:4f:66:50:bf:a9:e0:40:b2:6e:4f:93:02:1b:
cd:6a:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:54 2025 by rpki-client