Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: yHWxaq4W07wYTTxLKI9Ch9ZHiamljpZAuhMEO44ZTZ0=
Subject key identifier: 24:93:D7:4F:D2:49:B8:F9:A3:09:B2:65:FE:31:F6:27:8B:24:3F:4D
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 0194BD17BBC132C1BC2165FA01EDD5275664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 0C6D
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: oscaEYF5SqFz1825wS+1zJbeay8wKuj10HFy9YetBpw=)
2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bb:c1:32:c1:bc:21:65:fa:01:ed:d5:27:56:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=2493d74fd249b8f9a309b265fe31f6278b243f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:c1:51:2e:ce:a8:39:95:28:00:50:cb:bc:
48:ad:27:d0:40:7c:6b:6b:8c:c6:ba:e8:51:05:5c:
19:b6:da:53:f0:3c:79:2d:1e:85:c7:59:42:30:a2:
c5:68:32:6f:39:98:ca:c5:eb:97:a5:df:71:53:a3:
df:ee:cd:c1:42:c5:6f:fd:6b:e8:6d:8f:fa:cd:ba:
06:08:58:0b:36:1b:7c:85:18:4d:e7:1e:80:ec:2d:
31:c4:e3:1e:eb:5d:60:9b:ef:a4:f2:ef:09:25:24:
f8:76:2e:f2:50:8d:31:91:0d:38:5a:c7:61:0d:0b:
0b:1f:03:bd:28:ca:0f:03:81:96:81:0d:12:86:c7:
fb:bf:bc:a0:f0:57:3c:8e:7b:be:63:cd:9f:e4:5f:
27:41:73:98:e9:fe:a3:f2:91:c2:f0:c8:9f:59:d1:
b3:25:64:2b:1e:d9:33:b0:1c:03:54:14:26:98:cd:
46:88:a9:70:81:65:63:4d:0e:c6:6a:48:0f:66:8e:
78:67:85:23:23:65:31:46:47:a8:42:89:e1:cd:e8:
79:16:85:4b:98:10:a6:8c:14:95:4c:6f:cd:c1:0e:
78:b3:3f:e1:5b:d0:b3:d8:ca:22:f6:dd:be:a5:e6:
37:9f:3e:f3:8b:f4:f7:00:a5:35:c1:f4:e8:c7:db:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:93:D7:4F:D2:49:B8:F9:A3:09:B2:65:FE:31:F6:27:8B:24:3F:4D
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b3:8a:3b:e6:3d:9a:6a:96:1a:49:b8:57:61:5b:9e:7e:bf:
68:66:44:dc:54:c7:f5:20:e5:ff:4a:ed:09:b5:2c:44:b4:db:
61:96:4c:b8:3e:2f:fb:c8:5e:ed:50:c6:32:b1:5a:c3:9a:33:
cb:ab:aa:0e:06:08:94:af:4f:32:38:d6:42:be:db:c5:d2:ce:
28:ea:16:ab:d8:aa:5d:60:b5:32:bd:b1:d1:4a:ff:ce:ec:f2:
1f:7b:68:c7:48:8e:69:57:c2:8b:e9:ac:38:73:4c:9a:5b:77:
4c:6b:1c:99:d9:1a:c5:94:42:b7:a9:f9:24:b1:3a:3c:74:1b:
19:92:e3:f3:7f:66:5f:b9:2e:70:38:7d:57:67:a9:60:97:bd:
f3:fc:32:ca:5a:82:14:04:84:ac:cf:df:15:82:74:1c:ec:81:
36:5c:58:03:0a:30:16:c0:b1:27:fa:a1:4c:aa:bc:21:15:33:
07:1e:7d:50:fd:b1:3e:02:fb:b8:d6:6f:1b:9c:8a:55:49:61:
db:15:a7:46:74:91:83:ed:e3:43:0f:e8:29:cf:8f:ba:19:bf:
ef:cf:a3:75:4f:80:98:8e:8c:68:16:33:e9:5d:75:c5:3b:46:
f9:a2:90:28:dd:89:c5:61:77:e2:d2:c7:54:4e:fa:b1:46:a0:
7e:c4:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:06 2025 by rpki-client