Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: u+sgAZD6v5ngkKk0cx7L69m+B4MNjUyWYtnqEkNK9rE=
Subject key identifier: 9B:19:2F:93:90:EF:61:17:8D:77:79:38:AA:AF:4A:0F:62:FF:3E:6E
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 0194BCAA2990A17CA5D5BBB756CC4D490BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: sayGRBGXY1QViWz4X09TYn4JSdDU7qIEEnuBz4Hp6NU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:90:a1:7c:a5:d5:bb:b7:56:cc:4d:49:0b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=9b192f9390ef61178d777938aaaf4a0f62ff3e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:29:f7:2f:e3:5c:ac:58:ba:96:fb:8d:e7:
75:08:6f:66:fa:49:f4:46:32:f7:9f:23:b8:3d:59:
32:a5:58:ce:6f:77:0c:ce:85:e5:83:0b:2d:38:b4:
57:3f:d3:98:fe:d2:9a:46:7a:47:f7:20:4a:8a:5c:
9d:b6:a9:e7:9c:77:1e:69:4d:1a:aa:fd:f8:0f:5b:
bd:b6:c8:54:0b:4f:fb:bf:f6:95:bc:80:d4:40:3e:
30:b5:75:c3:b3:32:c3:a4:fc:ce:20:88:73:9e:1c:
d6:c4:e5:19:8b:62:c4:7d:90:29:d5:5c:0c:fc:09:
8c:85:95:de:9f:43:be:b3:c9:a7:5f:70:13:1c:47:
ac:40:cf:42:4b:84:49:fa:2e:b1:bf:33:22:7b:95:
61:9a:6f:f5:a9:f1:85:a7:25:f3:ea:c6:61:84:73:
09:6e:13:2a:80:ed:71:00:57:e4:f6:f2:4c:75:5a:
ea:1d:5d:bd:25:a7:02:d0:aa:bb:91:cc:e8:0e:a9:
1f:f6:00:d8:fc:72:04:3d:67:a8:b4:4e:39:44:76:
c3:b1:c5:53:22:c1:55:d1:97:41:17:03:e1:8b:bc:
7e:08:95:37:e7:40:92:d6:d8:db:92:1d:33:aa:f3:
4a:6b:ae:b2:7f:5c:b4:9a:c4:25:a1:1e:0a:de:0e:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:2F:93:90:EF:61:17:8D:77:79:38:AA:AF:4A:0F:62:FF:3E:6E
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e2:e5:e1:7e:10:31:6d:06:8c:97:7d:c5:be:db:ca:5c:c6:
63:23:ae:e8:2c:69:b5:57:6f:88:26:25:42:36:d1:f4:18:a8:
ca:7b:5e:ee:29:da:f2:03:e3:24:0e:a3:27:9a:b1:b5:74:a6:
ac:13:c8:2b:de:5f:fe:98:3a:be:31:cd:ca:fa:5b:6d:cd:ad:
cc:53:d0:ee:68:10:77:bd:eb:14:29:e2:67:46:cd:71:17:47:
e8:39:22:aa:58:1f:71:35:ba:46:1f:f4:3a:67:ce:a9:18:c6:
c2:8b:e7:f1:64:d3:e6:e0:36:b6:5b:08:8b:b0:15:75:26:6b:
53:42:bc:19:d2:e8:3f:bd:ef:a8:c1:6a:86:79:66:b9:99:8b:
4b:b1:9b:ad:b6:8b:a6:36:9e:c0:d7:45:a6:6f:b9:a6:41:bf:
11:c5:0f:c9:2c:44:3c:66:77:6a:14:24:f7:c1:72:e8:37:be:
3c:d6:7a:bc:70:6f:6b:c6:0f:8e:23:6d:e9:6a:c8:43:40:c8:
5c:09:2d:80:6d:60:4d:2a:77:7d:3d:ae:85:9c:dc:ff:81:87:
8a:12:f6:98:7c:50:11:1f:6a:dd:40:57:56:1a:d8:e4:67:91:
65:81:6e:80:98:da:7d:05:a7:5d:69:94:e6:ef:8a:d8:03:67:
c2:73:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:17 2025 by rpki-client