Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: ozY20JUj+yRX1dAEYvsoazQWYitdMXlh0OYywsTovIs=
Subject key identifier: B8:D5:15:AA:2E:A2:33:07:1C:C7:3A:A0:D5:E2:11:10:26:07:0B:2C
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 0194BCA9A16341666A71D0C84AD9EDCE1493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: Akzo2bYeGJFkO7a9P9Dsdc1i7ImZBG8kc7Ka6J/JPLA=)
2: mRvR04Vo8bdVq6u4azrcSb0QqKs.roa (hash: o8puWvWOya03oF11cLbo7fuHEUvW19W85X59bgXNkBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a1:63:41:66:6a:71:d0:c8:4a:d9:ed:ce:14:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=b8d515aa2ea233071cc73aa0d5e2111026070b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:f7:1c:aa:f5:0e:90:99:82:f4:3e:fb:0d:
78:1e:5b:a0:51:a2:11:d4:1b:0e:20:8c:51:4e:b7:
cd:39:9a:1f:37:e5:47:5e:5d:32:29:2c:94:db:be:
32:e7:a4:8a:64:40:43:d7:cf:bf:4a:d5:0c:a6:7d:
6f:90:e1:c3:ed:44:02:89:7c:a3:bf:74:4a:8b:87:
76:33:48:68:ec:01:b4:63:86:70:35:2f:1b:94:c8:
8b:ef:3c:0c:e3:60:7f:35:80:6c:91:2a:77:98:a3:
d2:ad:08:2b:27:16:e7:9d:0e:df:9d:15:d2:ff:61:
6e:76:73:7b:8c:84:da:7d:45:56:87:2b:0b:34:63:
0c:8e:45:0b:43:5a:29:8b:6b:93:3d:6f:6a:1c:cd:
71:ba:29:57:72:ea:f5:f9:6b:f1:98:19:60:16:df:
22:30:17:90:b0:e1:6b:3a:1a:0c:20:34:32:74:25:
bd:b7:6a:70:34:9b:38:d8:b8:bb:4b:a6:1e:5b:69:
1e:3e:64:4a:f7:df:94:b5:98:4b:d4:a7:67:a7:11:
1c:75:0b:c2:db:14:20:b0:5a:71:43:33:4e:5f:20:
ff:47:85:fa:ee:e6:b6:75:f4:49:37:27:0e:02:9f:
1b:06:75:1a:37:41:75:c9:33:19:dc:c5:4b:ce:85:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D5:15:AA:2E:A2:33:07:1C:C7:3A:A0:D5:E2:11:10:26:07:0B:2C
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:97:c7:65:44:08:e0:b3:27:0d:f7:7d:c6:e5:16:5f:e4:
ed:cf:50:c9:59:81:ba:4e:db:28:2c:f3:32:dd:ba:3c:54:ea:
4e:fb:4b:d7:37:71:35:34:46:45:cf:56:2a:a9:00:2d:e3:7e:
b9:93:72:b6:96:e0:28:59:3a:b8:9c:ea:44:a5:91:23:8a:3c:
ac:83:d0:50:d7:9e:0e:95:a0:37:3d:67:79:d9:bd:1b:e6:f5:
33:4e:5f:9d:5b:8e:49:01:1d:45:81:e4:77:44:98:8c:94:74:
ec:20:d0:fc:90:f9:17:61:c5:85:a1:dc:91:1c:92:29:82:e6:
4d:ff:03:e4:0f:2a:06:f6:61:47:db:c3:79:cc:1e:dc:86:6f:
1e:e4:50:f8:61:92:2a:dc:20:ca:37:7a:a0:5c:5c:2d:aa:1f:
2c:36:a6:da:eb:40:09:3d:29:a2:85:d4:72:f2:36:e2:13:72:
d8:7a:6b:33:a3:7f:7a:82:a6:8e:d3:2d:be:8c:f2:a5:ac:98:
1a:66:f0:b6:5d:64:5d:06:d2:3a:02:fc:04:44:0b:a1:04:e4:
fc:56:36:bc:3c:14:e9:9a:06:46:e5:c2:bc:9e:fd:b7:f7:74:
63:05:87:79:fc:5d:01:bf:e9:10:f3:56:2e:c8:8f:fa:02:6b:
ba:9d:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:19 2025 by rpki-client