Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: r6UOU7Nrzi0reaSRlVB1mIXCMI3IBCiSeTP3AMGKonU=
Subject key identifier: 7C:38:EE:EF:3A:2B:EB:A6:8C:80:94:29:F2:D6:E3:88:AC:F2:55:31
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 0194BC727BA0DADC06F748A7A906DE51D9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 0DDD
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: PQ_yvQsZl8a1BJZelz18O8KYziI.roa (hash: a9+EgNIf1zhqdc2reiY/K2IYhXxlOzKE9JswUeuIGNI=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: KFJabiKPyr9fE+85lygOrvRhXieGHHiazMbdU6LrNOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7b:a0:da:dc:06:f7:48:a7:a9:06:de:51:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=7c38eeef3a2beba68c809429f2d6e388acf25531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:07:42:ea:b1:29:90:bb:04:a6:c8:f4:d8:
14:1c:cf:c4:94:e0:13:87:09:8d:2c:05:61:6e:b9:
d5:ba:ed:56:97:91:f8:bf:d5:5b:9c:55:00:12:d4:
41:3e:1c:e3:4c:dc:a1:e2:af:4d:80:e0:99:09:ba:
69:c1:dc:cc:42:b2:a6:72:08:b0:1c:ae:1d:bc:64:
18:2f:2a:4a:aa:9d:67:0a:5e:e1:51:a9:9a:73:bb:
e5:d8:7e:d4:29:cc:51:29:d1:62:e0:83:06:07:d7:
f2:c7:8e:4f:aa:ed:9f:39:08:fa:d0:0c:6c:eb:0e:
d3:5f:7c:99:92:d1:69:5a:1e:56:0f:c0:7f:71:a3:
37:db:5e:89:07:67:64:29:21:8d:75:bc:55:fa:25:
f2:83:e1:bb:55:6b:9c:7f:2b:28:f1:e0:66:17:93:
84:f6:86:0e:a6:b7:ef:c8:27:43:e3:c0:41:24:ba:
db:25:68:22:5c:17:66:5e:4a:1e:1a:fc:12:85:1a:
b2:e5:9e:5a:f2:c1:b4:6d:51:50:cb:ce:be:0e:fa:
28:20:57:aa:ac:ab:89:54:bc:5f:78:99:5c:14:97:
ff:1d:82:89:03:74:8c:51:11:59:65:ea:f7:0d:16:
f0:64:48:3c:67:ab:7d:e2:84:06:4b:0b:0c:f5:cc:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:38:EE:EF:3A:2B:EB:A6:8C:80:94:29:F2:D6:E3:88:AC:F2:55:31
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:4b:18:7a:75:f5:57:cd:83:ec:9c:86:50:5d:3b:34:dc:
76:c1:55:74:db:07:b0:0c:84:d6:e1:23:7f:73:03:46:7f:e5:
b1:e7:1a:4a:ed:e6:0e:64:91:12:a5:ce:82:b6:43:9f:dc:cd:
e9:f8:c6:39:0c:71:4f:54:c1:ca:72:0c:43:e6:25:10:56:ef:
71:e8:c0:4a:d6:1d:69:6e:ca:1c:3d:2b:ca:b2:bd:04:63:b8:
0f:f7:21:62:1a:15:fd:8e:c1:ac:bd:3f:a4:a2:49:c7:a6:26:
5e:e9:c8:68:c5:dc:76:61:34:67:1c:eb:98:ce:d3:34:72:3a:
33:5c:4a:1a:e7:89:0f:22:68:4d:b9:cf:7c:22:17:f6:63:5c:
db:e2:c8:79:a3:8a:f7:c2:1c:4e:b8:9c:d4:f7:9b:e1:72:27:
58:6e:1b:c6:77:c2:d2:44:9a:56:5a:3a:bd:79:ba:7c:a1:26:
c9:45:5e:f5:e3:f0:f2:09:8c:71:ea:65:28:1e:5e:f0:06:e0:
ff:8e:18:25:80:1b:90:52:c6:a3:e5:69:24:5c:c7:16:39:b0:
08:90:75:ec:d4:65:da:5f:36:e2:0b:84:88:e5:d9:35:3e:1d:
db:01:6d:da:32:1b:36:50:10:dd:a8:92:94:08:21:3a:d6:58:
35:c9:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:54 2025 by rpki-client