Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: w6NWqLX5vr0AKkjqtYsFkBvxOm3ODBD1YxUJFjbAvfg=
Subject key identifier: 24:7A:A4:FD:A1:61:39:A2:9D:7C:3D:8E:94:94:D6:E7:3E:41:3C:B8
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 0194BC72F61FA40730D0B3C211111DC4A9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 11AB
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: xRUJ3IukIcY4iEy1tiNGmMyibOCzu6TsjmE3tWdM0LM=)
2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f6:1f:a4:07:30:d0:b3:c2:11:11:1d:c4:a9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=247aa4fda16139a29d7c3d8e9494d6e73e413cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:7d:6a:d2:02:21:bd:62:1d:58:29:2d:72:
0d:76:26:37:e0:2c:74:10:cb:4a:f2:cd:b9:12:b5:
bb:6c:84:44:0b:de:ed:80:ff:d5:10:81:bf:06:34:
df:54:23:b4:5c:91:e4:5f:f1:48:c7:d3:f3:ab:57:
c7:78:6a:c4:97:bd:9a:52:7f:de:4f:10:0e:3b:48:
18:3b:9e:cd:c9:37:2a:9e:e3:06:d1:11:22:b4:d6:
20:21:a1:73:6b:a3:8a:6e:26:e2:e0:95:e9:94:aa:
8c:d6:82:3d:69:43:3f:4e:18:2c:a6:d1:b5:3d:07:
0a:3c:ea:19:60:05:fa:fd:7f:a3:11:e8:40:9f:2c:
01:6e:36:29:49:1d:7d:ec:6c:e7:b6:a7:e9:eb:43:
05:b8:ad:c5:b5:e6:59:ee:8f:2d:9c:f4:c9:62:45:
65:4f:6e:8f:c9:5b:67:62:64:01:21:c7:2a:7c:47:
65:b4:5d:43:87:4a:ef:b2:cb:32:f7:2e:2c:0e:09:
a5:3c:92:81:a4:5c:6a:a7:4f:32:2b:5a:71:3b:33:
1b:30:cd:05:b7:80:c6:b0:63:42:49:2a:c4:a0:90:
41:55:25:b1:1b:5c:69:4e:20:29:36:be:02:74:dd:
50:a9:3a:15:19:16:5d:78:c0:dc:df:90:1d:fe:12:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7A:A4:FD:A1:61:39:A2:9D:7C:3D:8E:94:94:D6:E7:3E:41:3C:B8
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:10:db:14:34:71:fa:ae:6a:31:3e:24:1b:78:ef:5a:c4:
ca:95:6b:15:49:23:30:9a:04:94:5d:5f:f2:31:33:46:b7:df:
6d:40:1e:dc:aa:76:f8:6c:60:70:3d:33:b7:fc:2e:bb:05:bc:
37:8a:18:31:da:dc:e4:fa:f9:55:bc:2d:37:53:54:f1:eb:1f:
3b:8d:83:45:92:4b:e0:33:46:75:c9:d4:78:5a:d3:e8:6d:aa:
1a:af:9d:78:96:b9:5f:65:b8:8c:96:23:f1:1c:79:22:54:59:
75:3b:ba:9c:75:16:b4:cf:15:4a:32:f7:05:e5:73:b7:54:38:
c1:87:eb:7d:74:9d:b7:37:75:74:50:b0:86:55:80:5e:e3:f0:
b8:af:06:e5:31:fa:57:06:b0:b7:58:7d:e1:32:b4:78:ad:c2:
e1:83:ce:f5:21:7b:77:64:c4:40:fb:0c:4b:83:d3:98:a3:87:
8b:62:29:b8:8d:70:85:d4:61:c6:a0:30:68:63:00:d9:72:2b:
02:fd:72:18:78:f9:9d:5d:a9:b0:4f:f6:3d:4f:ea:37:83:81:
a8:31:9b:57:bd:08:98:4f:f2:fd:3a:97:e6:51:8e:41:b0:0c:
6f:9f:3a:7b:79:69:0b:81:f3:a9:c8:5a:fc:00:77:9b:aa:64:
e0:bd:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:56 2025 by rpki-client