Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: evPulploDBrgDJL/l/nr+Z7s8MA6hcw75ZviEZk7qcc=
Subject key identifier: BA:ED:EC:CC:0E:66:CA:24:B1:F4:34:F3:31:28:5F:F4:EA:B4:BE:8B
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 0194BBCECADB3F32BCBF10184C06714C6E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 0559
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: 2O/sLbCREXq35rVtlypOsUXcWxwU//o/QvDDDAllRw0=)
2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ca:db:3f:32:bc:bf:10:18:4c:06:71:4c:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=baedeccc0e66ca24b1f434f331285ff4eab4be8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:5b:c4:ae:36:ae:0b:4a:42:4b:31:46:a8:
f8:39:c6:01:45:89:50:90:6d:78:7d:fb:69:da:7d:
cb:62:73:64:b1:31:35:dd:14:6f:9d:76:5a:23:c4:
25:77:1f:76:3e:13:50:3f:92:71:bd:d4:35:69:62:
bf:b8:66:a0:71:f0:2e:c2:4e:d0:fd:00:b9:6b:13:
a9:7f:0a:bc:68:cc:3d:92:a8:c5:a4:c7:32:15:4c:
bc:0d:f3:21:a3:32:fb:70:62:b4:b7:f0:81:ef:bf:
89:33:e7:71:33:78:00:29:e8:c2:35:fa:c1:65:b0:
3e:17:10:7f:21:58:5e:0f:a6:49:fc:02:40:92:65:
92:32:35:b4:40:c6:6d:48:c7:e6:75:35:e5:fe:38:
62:78:68:55:4c:f6:8c:da:de:7a:f8:7d:a6:ea:fd:
3c:ce:70:2b:f2:85:13:98:25:b5:fb:9e:cd:fb:a2:
39:fc:92:8e:40:8e:ad:30:7e:60:07:00:c9:44:7e:
74:05:6f:f9:30:80:bf:23:f3:52:4b:40:c3:38:07:
6f:6f:8c:5b:d3:04:28:6b:86:fb:f7:39:45:a6:60:
d2:4b:bf:e0:f7:a6:fc:56:d2:7d:a1:4f:f7:f0:aa:
82:2d:68:0e:8d:08:8c:f1:2e:64:e3:98:96:e3:8e:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:ED:EC:CC:0E:66:CA:24:B1:F4:34:F3:31:28:5F:F4:EA:B4:BE:8B
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ec:67:e7:07:fa:29:00:f8:a2:d2:38:97:e3:44:52:31:18:
72:66:0d:41:df:b9:29:d7:e8:44:5e:81:09:ff:33:ed:e2:f5:
45:a5:24:25:5c:78:ab:57:d7:37:20:52:38:65:de:a2:2a:5d:
c7:75:08:ff:2c:bd:f9:60:09:29:44:82:46:37:29:76:56:bd:
19:42:5b:ad:d9:0e:6c:aa:c3:97:cb:5e:6a:85:b8:53:6c:cc:
0c:28:f9:6e:96:ed:dd:61:3f:55:4b:e1:2a:f9:18:73:94:83:
74:a8:f9:db:f5:3a:fe:3c:bd:88:15:54:2b:d9:ba:29:5a:0d:
87:83:64:d0:13:0e:1e:f9:28:37:1d:4a:2e:cf:8a:43:8c:de:
a0:db:d1:95:f6:e5:23:21:64:9d:72:49:01:b7:b1:82:fe:f7:
86:59:18:83:05:27:57:32:45:6c:a8:87:a1:33:0c:f1:de:61:
12:83:12:4e:43:2b:3b:a4:96:78:19:2e:ac:df:72:b8:24:56:
e2:c4:fb:07:43:75:cc:e5:40:3c:f0:3e:e8:79:24:6c:3e:75:
d7:77:fa:d9:31:a8:cd:e4:13:76:06:f9:c2:2b:24:58:3d:67:
de:ee:60:5d:be:d4:96:7b:f5:2c:f9:aa:b0:c8:94:c9:71:40:
eb:16:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:19 2025 by rpki-client