Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: CX5snYa2Hh2P11loBOqTsxdpTeohzPjvTd1xti23Z4g=
Subject key identifier: 22:F6:24:A2:AF:6B:6A:27:3E:29:83:92:5A:A7:6C:B2:14:E5:67:24
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 0194BCAA1A0D06CD04DC538E83DF5437E68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 069C
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: kGSQZbQIZ4xCNNkvKSncFXdZTGXuCa1aTVRnHiiiKDA=)
2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1a:0d:06:cd:04:dc:53:8e:83:df:54:37:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=22f624a2af6b6a273e2983925aa76cb214e56724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:e8:ac:f4:20:f2:04:fa:d2:5e:bb:6b:4a:
c4:63:4a:2a:1a:5d:af:8c:52:a7:b0:d1:f5:4e:7f:
73:db:34:4f:f9:2e:02:8f:12:ed:9e:c2:48:ea:bd:
97:63:f2:56:61:56:63:2f:a5:d1:ce:41:bc:81:ff:
2d:a9:b8:89:b4:54:0a:73:8e:c1:db:9b:6d:fa:7a:
e2:13:f3:c1:8d:58:c6:d1:44:32:c5:a5:f7:93:02:
6c:17:b7:b0:01:bf:eb:2b:d6:33:86:38:11:9f:38:
1d:f7:6a:89:3b:27:09:9e:e1:64:96:58:aa:7f:d8:
48:bd:a9:7d:43:c1:99:6c:ac:93:e4:ea:a4:57:0e:
b3:b5:4e:b8:84:a6:4e:cc:29:e3:79:50:0a:cd:62:
a3:c6:44:4c:ce:ce:03:52:c9:ee:be:2f:c4:59:85:
7c:53:e4:84:54:0e:45:d6:05:52:ad:a8:f6:a8:67:
a6:b9:0d:a2:2f:86:5d:21:3c:03:41:22:67:3a:db:
d6:65:14:58:88:68:75:b5:5a:29:2f:c9:81:00:85:
81:09:50:e6:47:e2:29:56:de:84:5b:cf:01:a8:86:
81:77:c8:71:4b:74:31:23:34:5a:e3:14:fd:10:e6:
ca:9c:06:ba:e2:94:31:7a:2c:89:76:c1:59:b9:ac:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F6:24:A2:AF:6B:6A:27:3E:29:83:92:5A:A7:6C:B2:14:E5:67:24
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f1:00:8c:09:ec:85:c2:ce:d9:56:a0:81:ff:64:c9:8c:ca:
5f:6e:78:fe:4c:c4:71:aa:84:85:16:d6:09:72:16:60:8c:93:
22:74:82:dd:87:5d:ed:2e:a4:42:84:a8:22:c2:d2:75:bb:ad:
32:9c:c9:2b:84:9b:8b:9a:54:8f:fc:c5:5d:e1:19:89:37:0c:
c0:c8:2b:42:ed:ad:76:a3:7d:e4:f1:16:25:51:d9:92:ec:fa:
96:78:97:7f:97:2b:83:ad:27:f7:f4:7a:56:79:28:63:08:07:
a4:68:27:86:f5:dd:0d:9c:e1:a3:24:a2:e2:71:87:36:27:95:
41:07:1d:2f:d9:11:15:9b:86:e5:34:1e:d8:31:8f:61:3a:32:
69:b4:20:4b:f4:7e:a5:d1:e8:57:58:b3:6a:42:87:e8:a7:1c:
57:3e:1c:ad:e9:e9:b2:6d:f9:c1:b8:82:9c:34:5b:b1:cd:50:
11:1b:2c:ea:6f:a1:d4:4b:b6:3a:87:6f:6b:c2:96:4f:85:02:
20:9e:39:ad:8e:fe:16:55:2c:0c:39:ce:bc:37:ef:2c:66:57:
6b:64:73:d5:18:bb:e2:a0:f4:e7:27:95:67:08:8b:e2:1e:0f:
d6:79:b4:24:fb:50:cb:97:b2:73:55:a6:77:44:20:31:0d:e6:
ae:4f:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:10:25 2025 by rpki-client