Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: mI7zt3rPRWOaImPzUgZ6tEw6n9mlKVvYOQJcPdATw+8=
Subject key identifier: 66:82:AA:F3:8B:31:5C:D8:3B:98:6A:A9:B1:76:50:1C:38:38:04:51
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 0194BD853197F2B9BC831944CF2290CD987E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: vA7oBE7KcMufHXAeGFeN3xjw+T0lVeoTrtNRL8qURVo=)
2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:31:97:f2:b9:bc:83:19:44:cf:22:90:cd:98:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=6682aaf38b315cd83b986aa9b176501c38380451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:1f:a3:9c:6b:25:9e:c8:18:31:f8:ef:44:
63:02:84:67:81:b8:d0:f6:24:2d:2e:4e:05:e8:9b:
79:03:2f:24:48:95:8d:f2:a3:14:c9:34:07:97:67:
9c:31:a8:91:ed:02:d2:12:1b:c8:8d:54:5d:ba:96:
93:6e:7d:9f:60:8d:2b:53:24:d2:dd:cc:6c:81:6f:
5c:63:59:14:9a:5d:23:4c:6f:ce:a1:8e:70:b2:30:
85:5b:5c:ef:71:71:77:3a:34:4a:a0:22:c5:30:c8:
a7:c1:2c:6f:a1:22:43:73:96:0c:70:d9:32:07:a7:
24:40:4b:0f:aa:19:7d:dd:84:e4:b2:67:31:d2:09:
b1:29:f1:c7:2e:2c:8b:4f:94:af:ae:74:db:92:a3:
84:e2:3b:79:8b:a1:69:44:e6:4a:f2:eb:dd:81:be:
44:0b:f1:c8:e2:35:7d:90:2b:ea:3d:b3:54:2d:e3:
91:db:f6:3d:3c:12:6c:2f:fe:d4:57:7f:13:f2:f3:
a8:d3:7e:3b:d3:a8:4d:7b:a8:d4:5d:62:08:77:3e:
8a:d7:71:f8:44:9a:ef:67:18:75:eb:e8:c8:c0:6b:
42:eb:4b:31:e2:24:7d:50:8c:2c:b3:c6:1b:b9:6f:
0d:47:bf:38:bd:e8:6d:41:d1:7c:d8:17:47:af:22:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:AA:F3:8B:31:5C:D8:3B:98:6A:A9:B1:76:50:1C:38:38:04:51
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e7:d0:b9:b3:54:cf:40:54:6b:6d:ad:5b:32:da:f6:60:ca:
38:8a:d5:6e:e3:b2:5a:44:00:78:cf:98:5a:bb:dc:9c:13:06:
8f:59:21:36:63:9e:11:8e:07:61:8a:22:28:55:68:33:d3:7c:
0f:20:3b:a5:f6:a7:56:5e:83:60:0d:18:b1:67:73:0d:78:92:
33:d0:53:37:98:fe:82:82:bc:e9:9f:c7:81:f9:36:7d:80:b5:
7d:13:0d:52:a9:b2:76:86:86:b9:9a:e7:c8:a8:71:85:96:5f:
13:42:66:60:cc:e5:70:f5:22:ed:f7:18:53:2e:d4:6c:ba:32:
f0:6b:f5:43:00:0a:83:df:fb:8d:31:20:da:1e:f5:1a:e4:e7:
d6:44:e9:cd:9f:45:90:7c:66:9a:0e:de:86:0d:3c:f7:5a:53:
02:73:bb:1a:b4:11:52:4f:df:5d:b7:7a:89:07:9c:1b:d6:9a:
9a:0e:1e:d7:af:61:f0:06:ca:c6:e8:3d:35:27:a8:31:9f:65:
3a:ad:7f:6a:82:47:2a:35:e4:d0:5e:c5:97:e1:ec:6f:1f:96:
fd:ed:a3:9d:c9:ee:1c:b6:5a:7c:7b:a7:a3:0d:58:9a:2d:dd:
be:52:6c:b7:89:6f:09:b8:4e:22:46:4e:c4:c7:18:4e:6a:fa:
1f:f1:34:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:00 2025 by rpki-client