Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: r6u0PaRb7eDQvuTFksiA+4COljTAXNXY/Hz5XJcJfc8=
Subject key identifier: 61:C7:CA:AE:09:BA:D1:50:1F:0D:8E:38:C4:8B:C5:CE:FB:88:70:75
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 0194BC3C4B503D952D5340DC086218D73886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1213
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: uUZ2Wspq3ZY6jt2sKsn4S2OF9ZJiAwQ8k/FTclTDDww=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:50:3d:95:2d:53:40:dc:08:62:18:d7:38:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=61c7caae09bad1501f0d8e38c48bc5cefb887075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:96:f0:74:06:7e:61:89:45:77:4e:d7:8c:
aa:a8:09:1c:0d:5c:b9:ca:9b:f6:71:a7:c6:1a:48:
e3:cf:db:6b:23:6b:63:3f:75:d1:d9:95:34:df:be:
43:d5:7d:f0:78:76:93:50:71:9b:98:1b:31:a3:de:
fc:5b:0d:fd:6a:34:1a:67:a0:07:4d:d9:7d:62:95:
29:97:ad:0c:db:c3:b9:be:1e:b3:f1:cb:d3:69:23:
fb:af:70:63:30:25:5a:b4:32:e7:4a:6a:40:d7:44:
4a:ba:47:4e:07:2e:44:84:ee:ca:ed:29:42:bb:22:
e8:9f:7c:4b:00:c0:98:59:7b:74:3c:9d:a7:9e:4f:
0e:ec:35:e2:5a:d5:7c:db:29:ec:96:37:87:2a:84:
67:ed:28:a2:cf:4a:01:04:ff:3e:1c:4c:0a:c2:3b:
b0:cb:2b:be:61:5c:d3:64:40:dc:00:96:15:57:ce:
75:79:bd:9c:01:18:35:80:50:92:56:d1:63:34:2a:
a0:51:bc:3c:9f:41:65:6a:32:67:f6:ee:00:af:a9:
d3:36:d1:ba:d9:9b:41:b6:6c:88:7f:4d:06:29:49:
d1:63:85:5e:1d:54:4b:55:ea:46:08:12:47:fb:99:
81:82:2d:70:61:d6:34:ea:81:a9:2e:b3:8f:98:60:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:CA:AE:09:BA:D1:50:1F:0D:8E:38:C4:8B:C5:CE:FB:88:70:75
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:75:a3:d5:dc:b3:b7:d7:81:c4:ee:44:6e:c2:89:03:a4:0d:
8c:81:9b:71:46:de:a5:c0:23:8b:45:35:60:71:dd:53:7a:77:
73:4b:dc:9f:e2:01:01:1e:5d:4f:b0:b5:85:26:ad:24:d6:62:
eb:4b:03:70:2a:74:2b:54:7c:a0:33:2d:36:d8:60:0a:58:2e:
72:13:9f:5c:7b:ee:7d:d7:82:c2:e4:e9:df:9e:28:8c:96:8e:
62:ca:19:d1:29:f3:a1:6d:64:0b:ea:65:63:18:d4:eb:af:ac:
5d:28:6f:3c:86:f4:b7:26:62:18:94:b0:5b:b0:e2:23:69:2b:
46:47:6b:b5:5c:fb:91:2e:e3:8a:49:07:41:2b:00:1c:75:f7:
df:5a:82:fd:fb:37:12:9d:d4:c1:35:da:21:05:76:a6:a1:e3:
16:d5:8f:8c:25:1b:fb:f0:80:c6:1f:35:6c:11:5a:06:a8:0e:
af:d1:d4:84:70:8f:5f:97:e3:f7:73:6b:82:88:20:f9:f4:eb:
dc:d2:f8:12:fd:9a:88:0c:2c:2a:e1:7f:89:84:c3:ce:43:73:
98:86:d1:14:2c:1a:c3:1a:ce:83:a5:71:a4:e4:57:c1:76:ab:
b1:9d:7e:0d:dc:55:6b:74:db:72:7c:94:e6:f2:6b:b3:55:22:
b7:ae:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:40 2025 by rpki-client