Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier: jhfDjTabwBuZnmhPiipiNH0+CbQpPqPOdd12VoKMigc=
Subject key identifier: F5:4D:94:BA:6A:A4:23:46:71:AD:82:91:B6:E8:54:DF:77:E4:13:C0
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial: 0194BBCE6B0AB4D6B39D1FF59B188A937D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: ioPPNAXS1Iv4Lng47s7hgT0twKftp41AnWkllWDYTeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6b:0a:b4:d6:b3:9d:1f:f5:9b:18:8a:93:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=f54d94ba6aa4234671ad8291b6e854df77e413c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:2b:86:60:2d:ad:f7:6e:77:4f:42:c4:d5:
bf:34:9f:36:08:c8:f5:c1:28:1c:28:a2:9a:f1:cb:
ec:56:83:3e:a8:67:59:d5:64:44:07:e4:4e:ce:4c:
ab:2c:e8:12:a1:63:38:cd:3d:06:24:b1:8f:db:97:
67:a1:61:2e:0a:af:2d:e4:07:16:97:16:5b:9a:a8:
bd:3c:dd:0c:8b:0b:28:93:19:82:d3:2e:87:fc:f2:
d3:cd:f1:14:85:f1:c1:d9:97:38:d1:3b:eb:3d:15:
bb:d6:71:df:8a:7c:36:b8:20:a3:83:18:c1:f7:5a:
00:f7:d7:8e:2c:b1:12:02:0a:a7:41:20:b7:94:9b:
72:35:d6:fc:35:55:75:aa:0f:cb:bf:55:28:00:0f:
10:f7:13:14:bb:fe:94:d4:77:07:73:27:7d:41:89:
55:d2:c3:ca:ef:14:0d:6b:9c:48:bd:79:5f:58:2b:
3f:be:a3:ca:48:8b:7e:a1:5d:53:cd:d3:12:3e:6e:
f8:d5:0c:ca:c9:99:dc:db:34:64:20:fa:67:03:63:
81:e9:74:63:6f:fa:0e:d0:bb:20:37:43:cf:a1:ba:
2d:0b:14:da:cd:76:05:8a:e9:58:d7:60:af:e0:b7:
23:af:5a:58:39:06:01:7e:15:48:16:07:f6:1a:fa:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4D:94:BA:6A:A4:23:46:71:AD:82:91:B6:E8:54:DF:77:E4:13:C0
X509v3 Authority Key Identifier:
keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:23:a8:28:2b:04:03:a6:16:c3:d3:b0:2e:82:7a:9f:b4:6a:
14:f5:66:e8:bb:cf:4d:87:60:86:d6:76:49:1f:3f:36:bd:b1:
c5:96:ed:e8:42:e7:20:e1:27:09:3f:ee:c7:eb:d1:6a:15:3b:
dd:fe:a5:34:69:b4:7c:05:e3:f2:e8:cd:c0:e7:36:5a:72:dd:
16:8c:cd:fb:e2:b1:58:10:54:e7:04:21:50:25:6b:82:c5:b6:
ee:46:d5:69:08:8d:04:f0:42:a4:ce:41:40:19:09:72:e9:d1:
95:0e:99:46:f6:47:12:e2:b5:08:f6:3b:36:49:5c:25:7e:59:
a2:85:c7:52:08:09:e7:73:3d:d7:78:51:ab:78:ec:e6:b0:a0:
5b:20:a4:a7:5f:c9:fa:10:40:8f:4d:9e:de:53:3a:f4:db:12:
f7:bf:1d:e8:a9:94:02:dd:33:48:7c:9f:52:c8:4c:88:93:ad:
3f:f0:1b:a9:19:39:ac:13:3f:92:78:eb:c0:a0:64:a4:e8:f1:
00:f6:c2:33:f0:8e:54:02:ab:59:73:88:5f:25:df:4d:c0:70:
bc:40:f5:14:e6:d5:fa:63:e4:7a:23:b2:b3:e7:6b:8a:94:b5:
c5:bf:48:97:7b:ed:35:a5:ea:0b:3d:7c:96:fc:15:fd:42:d4:
b5:65:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:38 2025 by rpki-client