Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: Knsio0Ald3gqUJ2XWqD45czCcT8bbYvizNn69eFLL+A=
Subject key identifier: 99:00:10:C2:FA:1A:15:C9:E5:4E:52:97:62:24:76:2C:FE:5D:31:0C
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 0194BC3BBA08364574E18713B7A0972E2C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 1127
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: ZxeqSiLG73dqXH6Q4ftPDQMUQu6hlEVFAg1WDO3pk2k=)
2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:08:36:45:74:e1:87:13:b7:a0:97:2e:2c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=990010c2fa1a15c9e54e52976224762cfe5d310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:67:e3:43:8e:be:ad:fc:05:29:4f:00:74:
86:6d:70:c2:b2:ae:40:7e:10:73:a1:83:b3:1e:a2:
c1:c8:35:7b:85:89:50:20:bc:b2:0a:cf:51:54:d6:
27:e2:6a:e4:59:33:ad:43:66:9b:3c:70:cf:ec:ed:
aa:81:d5:a4:d3:da:a9:76:65:e1:fa:3b:06:54:2a:
ec:dd:da:c8:60:3d:e7:7f:5b:2f:78:9d:fb:f6:62:
84:a8:63:7c:0d:c3:fd:d2:b3:3f:4e:1c:32:6d:2f:
9e:a5:5c:0b:65:fb:da:df:dc:fe:df:06:c5:c4:c4:
bc:fe:5d:78:aa:9c:e0:c5:9c:e5:d0:24:7a:17:a0:
e9:c7:94:47:29:13:8d:02:8b:c4:2b:91:d0:44:4e:
66:f2:1f:e9:71:e7:a8:49:a5:50:58:24:57:1b:b5:
26:ac:b9:f7:f6:79:c3:cd:66:94:75:c7:f3:9e:d3:
41:fd:f6:f9:55:eb:07:e8:7a:1f:3a:d5:f2:1e:e0:
d4:20:61:e7:3e:65:5c:91:a4:9a:86:dc:01:9b:20:
12:47:74:7f:2e:5f:c2:25:04:2b:6a:7e:36:09:81:
52:47:33:28:93:0b:0b:2d:a6:75:a2:32:7a:b0:50:
e2:63:8c:8e:e5:49:9e:51:40:f5:db:60:00:e1:05:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:10:C2:FA:1A:15:C9:E5:4E:52:97:62:24:76:2C:FE:5D:31:0C
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:1f:e8:18:ff:67:bd:de:ba:b2:ac:22:96:0d:34:be:aa:
dc:b9:de:56:c6:78:41:04:54:58:b5:aa:76:37:67:d6:25:f7:
e5:cc:ad:31:41:37:be:00:13:dc:e8:ee:1f:c3:9a:1f:51:e2:
bd:71:54:79:4c:b9:58:73:a0:6e:40:96:74:81:64:ea:6f:79:
db:f5:cf:b0:8d:10:c9:33:1d:43:d3:89:c6:00:0b:17:1e:71:
18:77:d2:15:19:bc:9c:00:5b:0b:51:fc:6e:6a:64:70:ed:cf:
5c:27:f6:b2:67:20:b7:bd:50:a8:0c:61:7e:b2:ef:9b:93:06:
3e:51:de:15:ec:91:db:4b:5f:cb:6d:0c:d9:09:6d:90:db:f7:
7f:3c:47:7b:bc:14:cf:fd:f0:37:bc:6c:f4:5c:be:21:05:06:
08:dd:7c:06:29:08:11:ff:ac:3c:fa:7a:10:6d:dc:97:56:a6:
9b:23:33:04:1c:b6:7f:30:a6:8b:39:87:37:8a:93:78:d7:63:
be:78:50:dc:57:81:57:36:4f:e9:11:3c:df:38:7b:be:2a:a9:
fd:9d:21:5e:52:5c:4c:a6:8b:37:48:54:27:8e:96:4d:83:f6:
0e:c6:05:8b:d2:e9:12:9d:30:8d:9d:f4:0e:12:43:df:2f:82:
29:ba:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:44 2025 by rpki-client