Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier: FgjkTz2E6yYIctuJEHdKDzYQOlxOt8pPoRwfzkzryzE=
Subject key identifier: 75:9C:F8:DD:7A:0B:21:58:58:ED:48:23:5E:A5:C7:7A:04:EB:16:7B
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial: 0194BCA9D96E61C9C21277B87421BB7FAE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number: 016D
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: 3CItlGC3sIeA/29exNJjvsZ2VPhk+UgS7205MCrPGuA=)
2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d9:6e:61:c9:c2:12:77:b8:74:21:bb:7f:ae:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=759cf8dd7a0b215858ed48235ea5c77a04eb167b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:d9:39:ff:99:7a:32:2e:70:c6:72:f7:58:
2b:ce:ba:6a:0a:12:5b:a2:bb:2c:32:4b:76:d1:90:
a0:ff:5d:a3:9a:ed:7c:a6:98:39:65:a0:42:c6:22:
a4:28:ee:c9:8e:7b:eb:83:32:29:d2:63:a6:30:02:
ff:73:35:59:e5:42:93:45:57:82:8d:33:9b:aa:bb:
3c:f4:b7:3e:b8:4b:41:18:ab:ce:90:eb:37:c2:09:
2d:3b:56:79:19:20:7e:01:17:4f:03:da:61:03:2f:
13:64:49:96:ef:81:bb:15:44:47:00:5d:66:0b:f3:
ed:3e:b2:64:63:25:81:4f:54:f9:43:0d:fe:4c:15:
c2:c4:d1:1a:be:ad:d6:9b:7a:b5:67:39:30:ac:dc:
c4:2e:91:7c:b8:c3:dc:31:1c:2b:4b:c9:57:45:fa:
42:52:a8:40:e7:91:fa:bb:9e:2e:81:3d:a1:aa:45:
c0:5a:b8:92:3f:4d:05:a0:f5:25:b1:29:d3:17:a6:
c4:8a:d8:4c:25:42:66:83:7f:71:e3:44:31:a5:3b:
1f:5a:67:20:80:a0:a1:3f:04:b5:76:be:49:15:f5:
fb:17:b0:5f:3b:8d:06:4f:6f:16:c5:53:eb:2a:5d:
3d:cc:a8:9d:f7:b6:ae:b2:14:b1:fe:88:bd:dc:aa:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:F8:DD:7A:0B:21:58:58:ED:48:23:5E:A5:C7:7A:04:EB:16:7B
X509v3 Authority Key Identifier:
keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a3:d6:e8:27:24:79:00:00:fa:e8:c7:e2:9d:3a:78:af:6a:
e2:7a:a4:bf:ef:f3:3e:bf:d3:45:0b:78:bd:15:7f:ea:ab:ac:
94:e8:a9:41:64:53:3b:c2:5a:28:a1:20:b9:d8:bb:35:11:ea:
48:0e:56:22:b9:e8:d2:b1:76:96:5a:90:48:77:5c:01:2a:76:
6f:de:e7:73:22:ed:63:41:b1:50:9a:45:59:21:16:c5:bb:06:
1e:dd:8f:1a:86:60:d7:5c:11:29:88:22:ef:c5:15:97:48:5e:
2f:0f:35:82:43:e3:71:61:c8:ef:08:57:cd:62:40:20:20:aa:
e6:c6:0e:0e:e8:51:bc:40:56:53:77:76:eb:db:40:a9:61:5d:
88:f5:25:cd:31:c9:6f:34:e6:8d:fa:b6:e6:2f:4a:ae:d3:bb:
e4:d2:fc:8d:9d:c9:c6:de:cf:47:f8:75:22:3d:35:4e:9a:b1:
6d:81:d0:8c:c5:d3:cd:37:ac:dc:78:d4:1c:50:0a:f6:a9:d9:
5e:92:3e:d1:b3:c2:31:7e:b2:54:de:af:b5:8a:81:de:58:75:
c1:cf:07:fb:48:27:2d:d5:04:fc:89:04:82:a8:e7:27:ac:ea:
54:cd:e8:5d:1b:5d:fc:e7:b7:82:a0:35:25:45:f4:31:e6:ab:
c3:54:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:42 2025 by rpki-client