Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: WVaQ7irBPhFbo81DVJsBXf9GPENXuMEpAnP75z6OTsw=
Subject key identifier: 88:C1:FC:10:CF:96:BD:27:4F:E3:58:52:D1:9A:13:8E:5A:AF:9C:09
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 0194BD174BD760D17E634FB409D3977CC988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0B9A
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: 37VQNFdyB4OYvD2la3DH5j7+NUNK3UdSGwdvOhDvVDI=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4b:d7:60:d1:7e:63:4f:b4:09:d3:97:7c:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=88c1fc10cf96bd274fe35852d19a138e5aaf9c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:32:84:15:e2:e6:1d:4f:65:57:cd:55:6e:
92:fe:4c:c6:5d:4f:d8:15:f4:01:1f:a6:72:44:24:
be:12:89:49:42:9a:b7:84:9a:7b:79:00:f1:66:c3:
b6:3b:77:d0:77:18:37:b1:3a:80:87:e6:fb:d8:09:
8c:c9:6b:02:cb:ab:01:d8:69:fc:63:db:a6:4b:ab:
2c:c8:e0:ee:9c:91:39:53:f3:bd:7e:10:58:60:c7:
81:aa:eb:0a:14:1c:42:02:a9:ed:2f:ce:01:25:58:
0b:eb:f7:07:28:32:0b:43:bc:2f:28:06:17:5c:80:
f3:22:da:a3:e2:83:9f:8d:a5:42:02:58:33:d9:25:
19:f2:01:a0:25:9c:00:81:fa:0a:e3:e6:b3:30:0c:
ae:ef:84:5d:8f:fd:74:c8:b2:a9:e4:7d:ba:10:37:
68:49:a1:71:85:d1:32:b8:50:82:46:14:3e:cf:5d:
c2:f4:b8:6c:ed:cc:3b:d3:5e:5b:3c:bd:16:f1:c6:
dc:b9:4f:c5:27:f5:4e:64:cd:7a:67:94:83:63:91:
2d:3c:71:a3:06:bc:9f:90:90:e3:f3:44:46:6c:e4:
7d:9a:bf:86:4c:32:5c:b2:94:16:93:b8:22:eb:bb:
0e:69:d7:99:7f:f3:f4:13:d5:44:da:e3:fd:77:44:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:FC:10:CF:96:BD:27:4F:E3:58:52:D1:9A:13:8E:5A:AF:9C:09
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fa:f1:84:44:f9:b6:af:d2:c4:44:f0:da:12:29:1e:27:be:
0f:95:d8:4f:9d:4f:c6:c5:08:89:d2:83:d3:a6:e6:63:10:61:
3d:4b:e9:61:5d:d6:9d:df:cb:3f:4e:ee:6d:84:ef:e5:12:a4:
50:4d:0f:fc:8f:8e:32:ec:a5:78:f1:44:97:d0:a7:1f:43:7b:
1c:7b:6d:da:67:f4:22:33:1c:97:1c:7e:30:ee:0f:ed:10:a7:
f8:95:ef:b7:73:fc:ac:45:3b:e9:97:c0:31:24:b9:f9:0d:b5:
ea:a1:84:5c:55:35:54:1c:2b:90:fb:ee:16:c9:64:a1:d8:36:
8a:55:16:18:c6:88:81:92:96:24:11:80:a3:8a:47:31:55:68:
ab:35:a6:9b:48:be:5a:1d:b4:44:a5:91:a0:0c:cc:56:e7:db:
ab:cb:e2:5e:71:17:5c:19:59:b0:18:e5:56:92:c2:c0:6b:61:
75:6f:c2:3e:6c:3c:5d:69:92:66:ca:28:75:09:e0:c1:22:78:
16:f8:26:18:31:69:10:4b:f7:6f:54:ab:77:76:fd:8d:00:98:
e5:99:1f:c1:e5:5c:a4:28:09:06:5b:af:1f:f5:8c:b7:a6:08:
fd:5c:ef:ed:2c:0d:8e:4f:e4:92:1d:dd:b4:f3:09:09:0d:af:
2a:df:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:04 2025 by rpki-client