Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json)
Hash identifier: 45Y1z2wOa7jplYoLSnfBUONUGRoP2Ti6FKMstRkBwNw=
Subject key identifier: 22:73:53:9C:EE:3C:EB:AE:74:79:10:ED:FB:09:DB:6C:D4:96:12:5B
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 0194BD4ECDF838C175A3EF098D8E32704343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
Manifest number: 02C7
Signing time: Fri 31 Jan 2025 17:00:45 +0000
Manifest this update: Fri 31 Jan 2025 17:00:45 +0000
Manifest next update: Sat 01 Feb 2025 17:00:45 +0000
Files and hashes: 1: 9RdZIw-S-FYoTEGCNtUVTMr1UI0.roa (hash: cuWu4zoZh39hHnMbQsbn1GavX5fkwgR9EpdjwPAYmFM=)
2: K6r4JbxghClQGiOJgPHD3qM06uA.roa (hash: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=)
3: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: 8LFvE52d78yN6GwH6iz+snn2L/mGmlJOLyCNbCTPWK4=)
4: nWYHniVnDldwYunEGsc0VWWiVYU.roa (hash: VRa9zgOVZdpaRaM8P3APLwpP4Czcpn3M9s3Qb5fNEps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:cd:f8:38:c1:75:a3:ef:09:8d:8e:32:70:43:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Jan 31 17:00:45 2025 GMT
Not After : Feb 1 17:00:45 2025 GMT
Subject: CN=2273539cee3cebae747910edfb09db6cd496125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4d:74:90:3e:78:58:f2:c4:9c:8a:9d:97:75:
8f:64:25:1b:4e:b9:32:86:7c:65:df:08:f2:03:bd:
18:11:4d:37:86:b4:41:5c:cf:6a:ea:fe:bc:06:9c:
85:34:aa:d6:2c:a0:d6:24:f4:d2:f4:3b:35:7b:27:
18:b0:82:a3:96:ee:e8:49:f5:68:dc:49:9c:e7:fa:
34:36:a5:51:fc:4d:c5:94:53:b2:d1:a6:bd:f4:9f:
69:15:7b:c3:60:b8:08:23:4c:a1:67:19:0d:88:de:
d9:86:1b:64:07:32:da:01:a2:11:1d:77:e5:02:f9:
8f:d6:18:04:28:f0:aa:8d:c9:b6:e0:46:64:13:78:
1c:0b:f1:f5:db:80:1b:c4:71:4a:77:68:71:0a:08:
1b:25:07:06:62:44:73:05:c1:8c:76:c9:1f:db:41:
d3:b6:13:7a:08:48:17:ff:75:d2:50:2b:d7:c0:0c:
47:9a:b8:e4:f2:34:ff:94:8d:e1:f9:44:39:e6:a3:
e7:5a:a1:6a:53:1f:1a:32:bf:ee:4d:7e:3b:f4:25:
5b:bb:e5:c7:d3:c8:7b:70:a1:1c:1b:8f:29:34:be:
75:4c:20:81:7f:ac:59:5e:41:49:cd:93:d4:31:fe:
b5:66:42:f0:1d:15:d3:8d:e0:12:d8:27:e5:33:df:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:73:53:9C:EE:3C:EB:AE:74:79:10:ED:FB:09:DB:6C:D4:96:12:5B
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:dc:69:29:73:82:7b:8f:cf:e4:bf:59:2e:f7:04:cf:26:3b:
f5:4c:13:34:86:28:ad:cd:c8:ef:40:e7:ce:3e:ba:ee:a2:98:
51:2b:ee:f2:8e:f0:fd:53:0d:ef:b4:16:2b:26:98:95:ce:aa:
7e:29:58:18:61:9d:c6:e9:a7:4e:c4:d9:41:61:6e:9b:ad:6f:
6c:e9:dd:b1:65:55:14:22:2d:26:13:57:7b:aa:2e:1d:7f:9a:
6f:35:92:7c:ee:d0:dd:c2:2c:da:bf:98:aa:c9:d0:72:9d:d2:
95:27:24:59:04:8e:1a:d6:7b:4d:55:a8:7a:c1:84:be:78:83:
45:ac:3a:86:d1:de:38:a6:f6:a5:e3:f1:6f:a4:be:da:a5:87:
4e:6f:4e:e9:f6:53:0c:3d:8a:52:39:eb:1a:37:27:b4:e7:7c:
be:0d:6a:33:d0:d6:8c:5d:ba:e8:f2:74:c1:92:e6:15:a6:66:
ab:71:a6:e9:51:d6:e0:da:fd:3b:8e:0f:fa:55:67:d2:96:07:
ef:96:ab:b3:a2:8f:b9:1d:f6:41:0e:94:c5:8f:81:6d:30:2a:
8f:28:be:30:6e:b2:34:0d:f8:1f:7b:99:48:eb:1a:35:13:a6:
54:db:6c:d3:22:37:35:1a:ba:fd:e2:32:59:71:55:b5:cc:71:
2b:b5:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:25 2025 by rpki-client