
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: OqywbZDxUjqplU1id43XsITz+TLTU12xCrRp9O/3CSk=
Subject key identifier: 6A:51:05:F6:78:21:38:43:3C:15:35:B3:CC:41:2B:DE:C6:02:31:18
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0194BC05016AB608C011761BA4BFF2FD3418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: QEbG6e1cV3eMFV9DZvG5_8m9nNg.roa (hash: TO9vlu7nxD1p5s8bS0q0vVYLA1cWPaflTOLYMoa+Xs8=)
2: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: gTuqSsLDOJvGXllLmWYcK2tV0P4Txv+BcaFP7CMcbyI=)
3: zJfYWtrmuOnIS50feQhKcumdyfw.roa (hash: iVCAB4WbYXFr/UIQ+S56Cp8fATWtHXGcdqo4NIduuNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:01:6a:b6:08:c0:11:76:1b:a4:bf:f2:fd:34:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=6a5105f6782138433c1535b3cc412bdec6023118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:34:d1:5a:dc:be:32:65:13:8a:a9:19:ed:
2e:f2:41:17:d1:bb:08:32:53:5a:71:72:7a:d4:d3:
19:bb:8c:51:cd:ff:f9:59:00:b7:87:b5:7e:97:f3:
fb:06:85:9c:88:06:52:55:b3:17:60:45:d9:3d:b6:
8e:d7:0e:a7:d4:32:fb:e6:78:86:7f:d2:6d:52:01:
7c:04:d2:a1:19:bd:1d:41:ba:4b:d1:f6:e5:8f:03:
23:5a:51:03:73:f2:ac:4a:ef:48:70:a8:43:c2:eb:
10:6d:2f:69:b1:69:45:a9:fa:43:b1:d8:ac:69:0f:
68:4b:cd:b7:d3:c4:85:8a:21:d6:40:c5:cf:ad:68:
28:36:4d:69:eb:4a:e4:f1:64:6f:3c:ad:31:54:cc:
14:79:0f:66:70:61:32:92:29:e7:e9:f3:ed:01:c5:
38:1c:7e:0e:3a:31:b7:9e:3a:55:dd:5c:f9:d6:7e:
10:65:c8:2c:5c:30:60:cd:b9:48:78:9c:be:a9:e5:
2c:98:e1:70:e7:ea:0d:85:ba:eb:a6:a0:4b:56:c0:
98:13:29:71:78:48:7a:40:64:ac:32:ca:ae:46:b9:
1a:96:3f:f8:10:e6:ee:c3:95:b4:95:f3:da:db:45:
e2:48:2f:06:e8:77:4a:2d:6d:f4:77:bc:bb:be:df:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:51:05:F6:78:21:38:43:3C:15:35:B3:CC:41:2B:DE:C6:02:31:18
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8f:b2:39:3d:cd:d8:7f:fa:57:91:c8:fb:d4:7b:b9:ab:12:
0c:ad:61:e8:f1:8e:bb:c8:d9:ff:0d:c9:53:6c:c2:83:80:22:
e5:f5:2c:5e:07:36:45:69:57:8b:60:cb:d3:3a:2b:b2:3d:6e:
3e:f3:1a:a6:57:61:6c:53:ad:a5:0e:e8:2e:12:ca:2d:27:3a:
23:29:07:01:d7:ba:5e:6b:4e:55:78:e4:32:0f:56:27:aa:a4:
9d:d1:21:c1:23:bb:ad:0d:8f:04:d5:15:65:80:60:1a:3f:ec:
aa:06:38:1c:d1:22:fe:fd:64:12:5d:70:c5:01:f3:f2:e4:3c:
cd:09:92:70:3e:46:41:db:d9:c8:38:6c:cb:87:8d:81:b7:78:
9c:6f:c8:df:94:fd:ad:fa:d8:15:6a:20:4c:6b:8d:af:94:45:
88:dc:bd:e5:55:13:43:a7:f5:d6:53:29:16:22:81:69:b3:90:
c3:02:8e:2e:f4:dd:7a:9e:42:f2:f8:49:fc:e1:c5:45:6a:0e:
14:d9:0c:d1:cd:09:26:83:eb:3b:e9:29:07:75:65:b7:f6:e0:
8d:85:bf:73:70:ff:0e:1e:b3:57:e8:5a:0b:c9:0e:df:ff:dd:
7f:d2:23:49:f9:3e:23:04:b1:16:b2:2f:51:87:b2:1c:26:3f:
ef:2c:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:10 2025 by rpki-client