Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: SyUnKD31HxXu1ABJQNUw4b6TCwsX6vFidgMRq4CDMg8=
Subject key identifier: F2:D4:63:75:23:35:60:91:2C:DF:CA:2B:69:77:E2:FA:62:EC:D3:E0
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 0194BBCEB9D1C557F77A85D8EAD399B4CC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: 0GCKtfifuMqf1SliZM0STxpyE7ruTml/xfuinfAYwi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b9:d1:c5:57:f7:7a:85:d8:ea:d3:99:b4:cc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=f2d46375233560912cdfca2b6977e2fa62ecd3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:73:06:ac:7a:f4:7c:9a:d9:6a:ab:ee:ef:
39:70:cb:94:63:78:fd:aa:6e:f3:41:ee:0d:1c:9e:
7e:ab:5f:6d:0a:32:01:64:3e:9f:e9:e8:e1:5e:24:
4f:4d:fa:8b:9a:13:bf:1a:8c:4c:0b:5c:41:5a:09:
66:33:cf:df:fe:7e:60:71:5d:56:32:66:99:ce:c6:
1c:cb:ea:a0:da:44:32:fb:7b:14:6f:17:82:77:94:
9a:88:30:bb:d4:f4:e3:70:a8:82:3d:f0:81:54:a4:
76:5e:3a:4f:d0:9e:1e:58:a5:00:0e:cb:42:10:26:
ea:fd:4a:e2:da:f3:81:37:36:51:5d:d2:c6:c4:4e:
dc:dc:1c:88:9f:19:37:91:49:da:1e:94:12:f4:4c:
9b:34:17:79:75:36:9d:6a:80:d0:e5:53:79:42:cd:
a8:01:27:ea:05:0d:73:94:4a:d8:db:41:f1:e4:da:
05:13:db:39:e5:bf:e7:6e:66:4e:9e:f8:8b:d6:e4:
30:b8:ee:1b:b6:97:48:8e:0c:e4:f0:63:b1:0e:36:
d6:0f:8d:a7:2f:29:6d:c9:5a:16:cb:2e:ee:e0:31:
d9:d1:1a:81:7c:a0:49:bb:1f:40:9b:3f:6c:c0:31:
96:69:5e:ec:06:4a:36:82:67:54:d8:52:74:66:38:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:63:75:23:35:60:91:2C:DF:CA:2B:69:77:E2:FA:62:EC:D3:E0
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:11:1f:ac:3d:97:c1:c2:cd:32:3d:22:21:13:60:b7:d5:45:
be:6a:d3:5f:e5:d9:9e:07:09:be:e4:ff:71:8d:ba:4c:92:08:
46:49:ee:09:8e:9e:56:da:05:81:4c:3b:17:f8:57:2b:58:ed:
2b:bd:8e:d3:c0:5d:df:03:aa:07:77:d3:07:9a:38:04:0a:bc:
00:c8:74:bb:98:f7:cb:49:7a:8c:34:7f:20:d9:13:d6:25:10:
11:71:96:1e:5d:b6:4a:af:34:90:af:36:c7:aa:fc:99:f4:d4:
d4:88:74:07:17:47:f1:12:2f:bc:65:d3:27:cc:fd:9f:63:53:
2f:66:8c:df:b1:e2:a9:99:c2:c1:81:c6:59:70:ed:de:4f:3b:
31:53:35:73:82:0b:72:1d:57:87:f7:0f:e7:c9:41:29:eb:d6:
ab:45:8e:e2:ef:fc:14:97:20:ee:b1:3d:b1:3c:83:6d:b7:da:
f9:41:c3:2e:19:ca:ad:31:82:f0:c6:f9:f7:ea:56:f4:55:fa:
3e:14:4a:2d:72:5f:1c:15:35:81:91:c5:04:ac:a9:39:cd:ed:
c6:a4:46:45:be:4e:d8:b1:0a:f6:59:56:2e:82:d5:3b:34:9b:
1e:7d:30:f5:84:52:bd:56:11:9e:fa:ba:7c:7c:52:98:10:a4:
ce:e5:ac:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:49 2025 by rpki-client