Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: XZeFj+iNA/clnc40gP2fFIC4xCDnevNUAU89jYKwFGc=
Subject key identifier: DF:65:8F:EC:1C:3C:0D:FC:1B:99:A8:B3:B3:79:82:C7:0F:AF:AA:A8
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 0194BCA9A85B70F95ECD3233F47B7AA007A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: zOpxhsw0ctwp6yuHofi6k0ZnuNDD63rdIZjb9u7QN28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:5b:70:f9:5e:cd:32:33:f4:7b:7a:a0:07:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=df658fec1c3c0dfc1b99a8b3b37982c70fafaaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:20:ae:2c:5b:10:17:c9:83:bb:09:3b:8b:
38:c5:55:64:5d:88:bc:24:d0:09:ac:d8:04:cb:f0:
37:88:85:24:a9:1f:09:07:83:98:f0:a3:c8:34:a7:
3f:d1:65:10:37:b3:c5:94:a3:39:89:19:d4:16:bb:
2b:01:43:6b:45:76:f6:1d:7e:cf:7b:74:78:ba:5b:
54:e1:2d:95:83:6f:8b:17:ac:87:c2:cf:6f:e3:a9:
c9:00:83:91:1b:f9:a4:04:88:a0:07:04:ab:c4:c0:
bf:28:01:7d:30:cd:fb:16:3b:4e:20:c4:fc:e7:0e:
8e:28:41:e9:c6:b9:fd:86:98:9c:1f:b1:62:c0:a3:
48:b6:47:56:0d:c6:90:99:5a:86:dd:5d:a7:9f:72:
9b:26:78:1d:33:28:d3:d0:c8:af:2f:70:63:45:91:
8a:6a:39:d2:1f:e3:cf:08:77:27:08:db:ed:34:cc:
a8:7c:e5:7a:86:54:34:e6:09:2c:18:41:72:41:48:
f3:ea:eb:5c:40:a7:1b:ce:e8:7b:f4:b0:44:00:d0:
8a:0d:cd:a5:e4:77:ba:5c:05:b3:a5:d6:1f:ad:ce:
dd:c8:c6:4a:66:16:fa:98:5b:f0:9b:d1:80:12:7f:
9e:11:41:f3:a3:10:60:ed:22:01:04:a2:93:04:aa:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:8F:EC:1C:3C:0D:FC:1B:99:A8:B3:B3:79:82:C7:0F:AF:AA:A8
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8b:06:f7:45:a6:54:a5:cb:74:3e:55:33:ec:9e:51:f7:55:
62:1f:1a:38:6d:5d:67:5e:09:93:9b:85:14:fb:63:5b:ed:75:
b4:02:9d:c3:ed:e3:8f:d6:97:04:ba:93:0a:02:e2:bc:08:17:
c2:a3:de:cf:e4:61:47:50:f4:a2:df:22:35:7d:62:09:6f:dc:
cf:fd:35:7b:2d:91:82:87:00:2a:ce:33:86:1d:92:7a:d4:30:
72:9c:94:07:e6:9d:a1:1b:2c:9e:21:40:b2:74:e2:39:9b:48:
7f:66:66:c1:41:60:50:27:ab:77:b5:b1:f0:a0:82:3a:8e:cd:
16:4d:e1:cd:6a:96:93:fa:c8:68:c0:bd:77:92:8d:c3:2f:e4:
7a:14:58:ca:c7:e2:a3:c4:13:56:3b:a2:44:ff:f3:92:43:ea:
2d:04:fa:41:cb:8c:6b:ad:16:6a:4c:db:eb:b2:69:bf:33:b9:
4e:27:d1:c0:37:e2:ca:3f:f0:fa:68:e5:39:12:6d:e4:7a:6a:
6e:0f:b6:84:12:7c:94:66:6a:dc:6f:64:dc:6c:1f:59:7f:75:
bd:16:e5:45:84:26:d3:68:38:06:f6:c4:80:93:64:6a:e1:b5:
2e:8d:23:ce:64:ce:61:a5:fb:04:f6:07:14:2a:1f:26:22:e5:
28:ce:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:03 2025 by rpki-client