Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier: B75mx3YYHqSMV9qSiUg7pEBLiVw/+lc4NLCD+ISfOOU=
Subject key identifier: D9:99:75:B1:23:41:CB:C6:8F:F7:4E:BF:AB:E5:22:C7:AE:FF:96:1D
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial: 0194BCAA31AE2E55332D29E4EF243A77FB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number: 0851
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: M9tDhMWteewv4gFsGr+QPllBcFuNzDU7J/0RonfQdUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:31:ae:2e:55:33:2d:29:e4:ef:24:3a:77:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=d99975b12341cbc68ff74ebfabe522c7aeff961d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:ae:d9:62:88:ba:ad:4d:79:5f:57:68:f8:
45:9a:71:e3:a2:6e:33:af:38:e3:47:09:61:de:a6:
e8:be:29:37:6a:e3:ee:d6:98:f7:3e:60:2c:32:2c:
a1:5d:b8:fa:38:bb:09:2d:ba:42:ad:e3:eb:0c:15:
f2:91:ce:2a:20:82:82:3e:66:ea:77:0b:1a:57:d2:
23:0b:44:7b:63:dc:69:0c:98:ea:83:c9:f5:26:d7:
ef:b6:bc:15:5c:db:a5:67:fc:e6:58:c2:29:01:18:
ec:ad:6a:d4:95:27:c9:af:d7:7c:47:a4:6f:87:a7:
fc:82:8e:9a:30:18:d2:e3:75:f5:a1:41:37:da:8e:
8f:c9:76:49:ec:99:c4:60:ee:6b:09:6a:4c:db:aa:
7c:a6:a7:02:03:05:fe:28:70:95:4e:fa:45:b1:8a:
e0:65:10:5d:92:28:31:db:7c:dc:33:5c:4f:a8:cd:
5f:fa:f5:38:2e:71:65:9e:bf:f1:19:de:56:52:9a:
a0:74:4b:4d:bc:dd:16:a8:0b:1d:ad:d6:07:4b:0d:
e0:37:59:a2:78:2f:56:d6:b3:23:46:8b:e9:82:5e:
bc:98:cd:f0:56:5c:5c:63:85:f5:e7:e5:ec:8e:b2:
89:75:99:21:ea:b3:69:55:f6:4f:57:df:9f:85:9f:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:99:75:B1:23:41:CB:C6:8F:F7:4E:BF:AB:E5:22:C7:AE:FF:96:1D
X509v3 Authority Key Identifier:
keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:81:5e:5f:28:97:0d:66:62:0e:37:9a:1b:03:45:20:54:41:
05:30:b2:db:c1:e1:4e:25:d4:78:7d:e9:ff:ea:95:e8:18:73:
49:a5:57:23:87:b4:98:0e:b2:9a:e6:f0:19:06:51:b6:cc:c7:
e2:21:92:77:b2:40:2e:97:c3:5c:99:82:36:84:b3:b0:6e:12:
5a:56:ed:f9:ba:bc:e9:7c:c7:e8:03:18:f9:4a:1e:ae:37:a7:
81:8a:db:a9:21:dd:46:2b:8e:78:2e:69:ad:73:51:c5:eb:dc:
d6:16:7a:42:5a:f1:8e:d9:77:0f:bb:f6:19:62:63:b6:8c:94:
d2:ef:11:3c:6c:8e:07:59:4d:bb:03:1c:fc:92:78:a1:56:75:
b7:ba:7f:94:5d:4b:98:f1:20:23:37:29:80:55:45:e3:89:c7:
f0:44:15:d7:d3:1b:11:90:4f:b9:44:c5:61:47:3e:29:11:e1:
c3:d1:13:fb:cd:87:23:be:51:df:57:5c:4a:d2:2a:c0:bf:d9:
a5:66:16:83:7c:03:0e:51:14:75:7e:83:f3:07:0c:cd:97:84:
f6:81:55:77:c7:c4:2f:59:30:28:da:32:02:b9:7f:11:97:cc:
46:85:b9:ed:bd:71:e4:bb:d4:ff:bf:44:a9:aa:a8:56:2a:9c:
f0:73:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:09 2025 by rpki-client