Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: /jCRbHnHLVHF278d6prcMvqe7Kv/tyscJt46jc+M6lA=
Subject key identifier: 9C:2D:53:2A:0E:34:45:1D:95:1A:1C:79:0C:23:30:1A:24:0C:3A:74
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 0194BD4EAD3F56BA7E3EA77B403D588CDA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 02BE
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: nlE9RGOSEooMixPT9i+Mp4CNc/i7iKNkfuvCb6My1Vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:3f:56:ba:7e:3e:a7:7b:40:3d:58:8c:da:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=9c2d532a0e34451d951a1c790c23301a240c3a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:d1:52:9c:56:e6:da:d9:5d:c2:4c:e6:48:
db:72:88:47:2d:b8:53:13:f6:29:d8:82:3f:56:ed:
0e:05:64:72:d9:f9:21:54:ad:31:1c:45:67:17:96:
d5:15:b0:0b:a1:e3:a9:94:c2:0d:de:cb:b6:08:36:
ad:a3:1c:9b:bc:86:24:d5:66:2b:67:a6:b8:ad:1b:
11:25:89:cb:a9:9b:05:43:50:ae:6b:6c:3e:dc:eb:
e3:46:36:91:df:60:af:5e:86:cc:3c:fc:16:44:fd:
44:f4:8d:8a:7d:95:7f:de:2c:ad:f4:3f:bc:46:33:
5c:26:61:67:61:05:be:80:94:a7:cb:ab:9a:50:00:
14:93:a8:57:5c:3b:c9:27:96:8a:1d:cf:c2:86:f2:
21:cb:77:55:a3:60:50:94:46:5d:19:fa:6b:cf:9e:
15:dd:7c:f6:0f:70:b2:34:1b:1f:a5:b1:93:54:3a:
13:1d:ed:bb:96:63:bf:26:2f:5d:c5:39:0c:7d:57:
7e:db:4c:75:59:d1:4a:5f:b6:44:1c:a5:32:19:d5:
9a:02:81:cd:7f:d1:1a:1c:af:75:be:76:43:f4:f4:
12:1d:cc:3a:f6:3c:a8:cf:d3:c1:4e:08:16:73:f4:
f1:88:d5:10:67:4e:90:fe:6b:4a:37:b7:3b:01:29:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:53:2A:0E:34:45:1D:95:1A:1C:79:0C:23:30:1A:24:0C:3A:74
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:26:8e:fd:46:45:bb:87:ed:16:7b:05:09:b3:50:b0:e9:1e:
60:28:1d:93:1f:8b:45:d8:65:6f:9a:c2:e9:b2:42:de:95:e7:
79:08:60:61:6a:30:73:19:9b:c9:7c:b0:8f:64:fd:ac:62:0c:
94:b6:ef:59:9d:9b:8d:16:b6:12:3a:1f:b2:60:eb:4b:66:83:
4f:cc:f9:d9:55:04:6f:1e:1e:8f:96:48:df:eb:0c:1d:65:4a:
92:28:a5:35:86:e5:71:f8:6c:ad:10:f9:07:52:01:b0:ee:17:
05:b4:70:92:b2:38:15:df:cb:8e:23:7b:ba:08:59:8b:f9:02:
cc:39:8f:13:76:ab:41:c9:c1:b3:43:79:16:14:ec:e6:f6:f4:
28:31:8f:35:6b:04:be:b9:1b:08:6c:44:27:88:df:7d:33:28:
86:18:8f:33:f6:61:47:5d:4d:0f:04:ff:8b:e0:ef:c2:b7:3d:
75:c8:82:3c:37:56:af:4e:ef:f1:ea:8f:c1:87:bd:6d:d4:a1:
37:ae:37:30:d1:ba:b0:2f:06:11:65:8e:a2:19:5d:09:7b:dc:
fe:82:91:16:3b:9e:b6:4d:16:f2:73:84:90:63:ce:b5:a1:fc:
e8:19:37:8d:fd:3f:98:67:43:c1:d8:a9:43:ec:f2:7d:f0:ac:
54:fc:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:01:16 2025 by rpki-client