Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: PY7T501LTIYyhWT8EAS5Q0JN3PP7B1Xy+HHES0ucT1Q=
Subject key identifier: 53:A6:34:8C:14:19:0F:A2:0C:00:7C:7A:71:6C:53:2A:AF:4A:F6:DC
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 0194BCE0E9B1249859749A803217F5849F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0C7A
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: NF1g3PEgcuN3VJyR/eouDrlV1Uuj3brXYD+/njfbYko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e9:b1:24:98:59:74:9a:80:32:17:f5:84:9f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=53a6348c14190fa20c007c7a716c532aaf4af6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:45:a1:cb:28:c0:ea:4c:f7:c7:41:52:0c:
f0:fd:1d:80:78:4b:09:08:98:be:e0:44:84:1d:62:
0d:1b:d9:67:ee:6b:7a:3e:3d:8b:e3:a8:3d:ee:84:
ae:90:02:6c:c7:18:35:54:f7:a9:fd:dd:df:d4:7b:
11:c6:77:fa:91:be:12:e6:47:6f:04:c5:b5:f8:a0:
e9:fb:c2:6f:23:70:7c:54:61:77:12:e9:3d:23:e9:
28:1b:da:87:05:66:63:a1:31:8b:65:a3:cb:97:ca:
55:a7:a2:35:f7:2a:70:e7:eb:2a:e4:3c:dc:bc:1b:
10:3a:90:c8:65:4f:22:a1:d3:fe:da:cb:40:a4:11:
c2:c5:e2:87:94:0d:3f:eb:e9:0e:83:67:be:c3:2f:
6b:06:7a:cc:c8:fa:d9:e0:f0:04:2f:3b:65:d2:24:
87:71:26:bf:7a:f8:21:ae:79:48:73:e4:64:38:42:
25:7c:41:33:2c:d8:6d:f5:24:19:67:1a:64:9a:ec:
18:53:9a:a7:c3:a5:79:c7:7a:70:f7:3a:35:5b:80:
c0:8d:5a:aa:39:b2:e9:25:83:0b:7f:e1:37:0c:23:
23:d8:f2:e9:85:1b:f1:c4:d4:de:66:de:de:45:fc:
4c:9b:7c:e9:7f:6a:bf:c9:d9:2a:1e:00:64:55:77:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A6:34:8C:14:19:0F:A2:0C:00:7C:7A:71:6C:53:2A:AF:4A:F6:DC
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:96:e9:ac:45:f5:ab:a6:df:dd:6b:7c:7a:ae:ec:0a:ae:b8:
86:2e:c2:1b:c2:ab:a1:45:85:3b:c4:a7:69:24:3e:09:3b:e7:
1e:47:41:cd:17:b0:b0:0e:ba:c0:8a:0c:0c:63:4c:d2:c2:68:
7b:ed:9e:7f:c5:e2:3b:5d:c3:70:f2:7a:63:d2:a5:01:e0:8e:
93:41:b5:88:bd:cd:aa:e6:59:69:e9:c9:71:89:a5:05:3a:86:
73:2b:47:a1:01:98:ef:92:3e:9f:90:f1:a0:6b:ae:9d:69:44:
63:36:a4:50:ef:2b:a7:e7:14:07:5e:b1:f3:e8:b5:cb:57:c0:
26:80:20:4f:c9:2b:af:8d:ef:d4:0d:8c:e2:85:08:a9:6b:20:
c0:8d:02:a3:de:5c:9b:dc:3c:a5:07:c6:b7:8d:00:57:23:2f:
4d:cd:c8:dd:cd:38:41:6c:e9:d8:31:1f:e5:46:72:73:38:ac:
8c:30:a4:d5:68:cd:6f:2f:5e:74:12:2e:ab:55:17:39:31:16:
77:26:3a:a6:17:f9:32:18:23:02:12:f6:ec:a5:8e:41:12:9f:
99:43:e9:5a:16:4d:ff:74:c4:b2:bc:8a:fa:91:e8:b5:52:40:
e1:1d:b5:44:02:57:7c:0f:10:43:2c:13:ef:8d:18:db:18:5d:
83:f1:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:55 2025 by rpki-client