Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: j233MxoyKXZLSIjj/PY6FIoZ6DNtlMM3pCPT/Ei42m0=
Subject key identifier: 2F:EB:55:5A:A4:0C:B5:E0:68:6A:14:4F:77:BC:FB:B3:7C:67:2B:9E
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 0194BD85BCDC7E9D353EDAFB4F9EDC9A5CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 8C
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: bJ8ULUD6SKSNpKSHbIaMDZsV82rz+M9+pmg2QqKNMpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:bc:dc:7e:9d:35:3e:da:fb:4f:9e:dc:9a:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=2feb555aa40cb5e0686a144f77bcfbb37c672b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:67:57:11:72:ca:69:2b:bd:4e:fa:89:97:
04:d6:61:d6:14:55:cf:a9:84:2b:74:c4:94:f0:7d:
f0:de:37:7d:62:ea:ef:79:3c:58:a7:f1:f5:25:60:
ad:ea:60:07:a3:4c:d9:d1:8b:c3:cb:68:50:1a:7f:
50:e1:a4:95:87:fc:6f:b7:a7:27:67:f0:11:fc:bb:
00:b3:84:80:d6:34:9f:45:fb:ef:2e:c9:66:20:c8:
4e:e3:40:d8:96:68:cd:a0:19:c3:9d:f8:4d:3f:5c:
78:76:5d:82:df:5f:02:42:68:fa:1f:f1:4a:a7:28:
be:95:db:6f:c6:f3:9c:7e:52:80:90:bf:3d:2e:18:
da:46:b6:22:c7:41:e3:a6:31:65:92:16:8c:d9:73:
9e:47:11:ae:f1:42:89:ee:21:d1:d3:8e:b5:3c:30:
61:ac:53:52:ac:74:3e:ad:df:da:e9:6b:34:0c:e0:
d6:d3:23:e2:7a:e0:cd:06:0f:0d:e4:2a:63:2b:87:
69:61:12:31:5f:e6:48:d9:42:91:7c:15:64:bc:32:
66:63:99:e5:fc:8a:a3:fb:b9:cb:72:54:46:53:8e:
18:07:24:02:8c:f1:f5:cb:74:3d:e7:3d:69:fd:a9:
b0:9d:93:ae:d6:c2:2f:b5:b1:83:df:77:57:98:96:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EB:55:5A:A4:0C:B5:E0:68:6A:14:4F:77:BC:FB:B3:7C:67:2B:9E
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:85:bf:73:d6:a3:c7:ed:e4:19:a8:35:c1:42:8b:3e:dc:e6:
f4:43:f5:6d:3e:5e:df:4d:01:0f:ca:b3:14:86:be:aa:50:c3:
37:20:65:84:29:34:7d:15:12:83:bb:c0:86:24:aa:81:5d:a9:
16:1e:84:85:6a:27:d1:c1:68:92:9e:00:c6:31:74:52:d0:c6:
44:40:25:1b:6f:0a:e7:45:00:cc:67:74:5b:cd:d1:67:dd:e8:
96:49:2c:e7:6d:07:87:d5:58:d6:d4:6e:35:51:84:a7:ef:87:
b5:7a:17:d8:69:15:d4:c1:61:61:0e:ae:c2:13:19:25:a9:dc:
43:ef:f9:86:3b:be:ed:27:a3:6b:b1:f4:86:01:c5:0e:a9:8f:
5b:97:ff:dc:64:b4:52:d4:5e:10:e0:43:86:c8:47:46:ad:3e:
c7:c3:1b:6c:f5:6a:a6:9d:74:49:df:c1:9e:9c:bf:85:73:7a:
c0:3a:21:f4:8e:86:a8:17:ed:05:7d:1f:4a:c0:76:90:fb:57:
c5:98:2d:cf:55:22:bd:a2:dc:e3:29:7e:46:db:f5:15:b2:64:
91:83:4e:84:53:c3:6e:bc:0c:e3:82:6a:a5:48:5e:0f:69:30:
df:63:6a:c2:58:3a:38:db:b0:d3:de:59:fe:61:46:bd:ec:05:
e1:18:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:30:09 2025 by rpki-client