Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: PKA1aMT6T05iAF2zLBMgrPxSxsZx7jva0Xvgwye+Crs=
Subject key identifier: 49:DB:9B:11:EC:9C:C3:EA:30:AA:90:27:13:C7:F3:44:CE:24:3C:46
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 0194BC3C9DCDD014C0DE4C78A4EBE634CAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 04FD
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: pUCR7J1Yuc7NHdPhzOaLS4lHeXA.roa (hash: duCthqxEbQDKuJSOfYFDXosZAjczkDom8uh5OUKy8l4=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: 094H1vRuSbDSqLzG4FXJwFkeWbpSMWWwWMIZxNAwqmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9d:cd:d0:14:c0:de:4c:78:a4:eb:e6:34:ca:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=49db9b11ec9cc3ea30aa902713c7f344ce243c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:21:ec:ca:ee:0a:a5:7f:6d:d4:b4:4d:34:
0e:b6:bb:72:87:6b:a2:e0:80:3d:c4:b7:ea:18:6e:
3a:dc:49:09:89:27:9b:e8:a7:ac:e0:18:0e:6a:21:
ad:71:c8:d2:db:77:f9:03:47:7b:30:4a:76:35:be:
b4:5d:3c:1e:13:71:e0:7b:32:6d:d1:77:e4:cb:5a:
6f:ee:3a:fc:6b:21:d7:91:36:57:f4:7b:37:8f:e9:
28:f4:28:0f:eb:7f:3f:7d:a0:15:36:28:03:dd:6f:
74:73:de:98:93:f4:5c:9e:3a:98:f9:e1:7a:67:cf:
27:e8:02:a6:64:4b:f8:41:7e:de:5d:9b:06:5b:37:
75:13:dc:22:7e:20:a3:05:be:63:ef:45:88:3e:32:
1d:82:8d:22:07:94:76:77:fa:bd:1f:b8:b1:58:c3:
ab:2b:80:40:2a:bc:0f:00:0c:a8:87:f3:45:6d:b0:
06:f9:06:08:80:41:22:57:f4:92:b6:e1:78:cb:e0:
35:58:c4:9e:2a:5b:27:53:a0:5d:e1:ab:02:fa:e2:
5d:3d:a4:bf:b5:89:bb:41:4d:84:76:99:5f:e5:e7:
66:f4:df:0d:60:d7:f9:23:be:48:b3:11:e2:56:fe:
dc:82:b2:96:37:9c:20:3c:25:12:1f:88:07:9d:80:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DB:9B:11:EC:9C:C3:EA:30:AA:90:27:13:C7:F3:44:CE:24:3C:46
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:52:8d:32:f2:23:a1:65:f9:5c:ae:80:4c:13:f8:fa:88:09:
8c:c3:2c:f4:fa:2b:72:d5:d4:8f:10:54:51:b5:77:e2:24:9b:
5a:1c:d4:a1:03:88:d0:ee:7d:6f:4e:2d:93:3d:dd:92:01:2a:
9d:dd:ff:35:25:51:ff:ad:cc:b0:e2:b5:d7:2b:56:dd:fc:c1:
4f:85:e6:36:db:b5:29:41:a8:d3:06:9e:cf:76:8c:db:38:87:
85:6f:ef:82:70:fd:9d:b0:e9:fa:c1:e9:c6:be:b2:0f:11:40:
46:98:26:ed:e1:8d:ca:f2:43:7a:1c:17:27:76:86:12:a0:c2:
f9:00:f9:a1:bb:ab:23:80:d8:4b:fa:72:12:58:27:0f:14:95:
84:a0:ce:1d:5e:5f:39:e7:1f:34:52:58:2d:21:60:c5:9d:cb:
a6:3e:cf:07:cd:bc:81:99:fa:28:42:5d:d1:40:a4:bc:f0:eb:
c2:5d:f4:e6:a7:0e:91:63:15:14:6e:09:a0:22:c7:54:7e:1d:
55:9c:03:d2:27:6d:c0:43:ae:1f:3c:74:2f:17:14:11:c5:52:
97:30:bf:86:79:70:8a:55:38:c1:2a:d7:de:8a:74:a1:f6:27:
40:b9:e8:ff:d8:5e:dc:2c:1d:dc:66:aa:97:f2:a6:83:03:93:
38:87:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:12 2025 by rpki-client