Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File: 7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier: T+tPixokjsEWKEbJJsJk8Y5pOXZbIVhokWCpeZZxiYY=
Subject key identifier: 22:8B:6F:3C:50:CD:2B:A3:F3:15:59:3C:EC:42:86:78:47:C7:4D:DC
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 0194BCAA3D23738D40D2D1BB3F065535C756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa (hash: wuJzjrI9EaOKpfz53i0KZN8DZtLqoyJbku8WdDvpazs=)
2: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: o/GM2BeYbhFsnyfxskwZq+fJK/gq0kEyoL96zqykBNw=)
3: Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa (hash: cMc5/+uI8EwNJg30oKHwLh7pnaj9wAcQ3DWjnpzREXo=)
4: UAMozedMddnvbaHXdpt5f_TDvZE.roa (hash: C7OBU+9hOWyvCkQ42eXork8FUbOcNdFjL8raQWMxSpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3d:23:73:8d:40:d2:d1:bb:3f:06:55:35:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=228b6f3c50cd2ba3f315593cec42867847c74ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:fd:c1:b8:96:b2:ff:f0:2e:2e:83:23:f6:
ee:80:b6:fb:a4:f9:96:26:d0:40:48:21:2e:f7:c7:
07:a0:07:3f:56:68:5b:ec:90:02:f2:8d:86:d6:50:
a2:29:0c:15:d2:2c:dd:d8:3a:66:16:23:42:b9:fb:
0d:3a:af:ae:5a:07:b3:51:37:12:52:b4:ed:04:dd:
11:ff:cd:a2:6a:90:79:92:5d:d3:c6:04:8f:b1:c6:
40:5a:77:e9:3d:04:cc:a1:4e:8f:75:8a:d2:07:25:
6b:48:a9:ee:8b:eb:85:5c:0b:95:a2:cb:2a:7d:b1:
35:8c:36:db:5f:df:45:39:85:10:aa:bb:f4:7d:c6:
ae:af:aa:85:ce:19:d7:a3:64:0f:35:68:af:ac:6f:
4b:92:00:58:54:ec:0f:5b:5e:3e:f5:f6:e2:41:09:
45:6a:19:61:87:98:62:8d:b4:f8:53:65:d2:91:0a:
b7:69:29:c7:c0:a6:c9:75:54:91:ff:80:bf:b9:67:
69:c9:1e:83:8a:7d:9a:09:e2:4d:47:55:47:2c:a1:
fd:b6:2c:b9:bd:a7:8f:af:96:1a:7f:65:9e:52:b9:
9a:81:b0:a9:bf:c4:71:43:23:1d:de:b6:1b:da:be:
a0:19:8e:a6:09:6d:52:e0:c9:10:35:ba:c6:0b:49:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8B:6F:3C:50:CD:2B:A3:F3:15:59:3C:EC:42:86:78:47:C7:4D:DC
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:95:67:40:a2:19:b8:92:28:bc:c5:7b:ed:60:5a:2d:2a:
25:52:d5:b4:d4:d3:77:3e:f4:c9:66:26:a5:ba:9c:09:68:d1:
cb:27:0f:09:da:a6:4d:90:a5:a0:ba:30:0f:c1:78:98:88:7b:
f1:eb:50:91:df:4b:bd:f4:4a:a3:65:4b:70:6c:b7:06:44:c5:
ce:8d:ed:cb:ac:d8:70:1c:16:e9:08:55:e5:9e:66:03:32:bc:
da:e8:e2:ff:03:b2:fe:1d:72:43:b8:fa:f7:a3:de:2b:10:09:
f9:bc:a4:77:e2:51:f7:41:ed:d5:53:1d:c2:40:24:a8:83:c0:
49:76:74:65:7c:59:4e:3d:9c:92:72:44:d8:22:ee:9a:d9:e8:
0c:89:d5:e9:34:15:98:44:1b:87:37:13:70:ea:3b:9e:e2:27:
0c:f1:fd:5e:bd:2f:9e:1e:a9:89:2e:9c:99:39:2c:eb:87:b0:
06:8f:87:cf:ab:00:22:93:e6:57:fe:10:92:61:1c:27:d9:50:
44:c9:e5:31:dd:11:53:64:0f:57:c6:ad:62:48:94:e2:e1:70:
d5:ec:dc:13:d5:a4:c4:ea:1a:a5:e6:e0:0e:25:ba:81:5f:6e:
2e:f2:e6:fd:b8:0c:82:db:44:c6:38:f6:bf:c9:fc:97:e3:fd:
f9:a2:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:34 2025 by rpki-client