Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: OVT+EGiE16OTCtL/hAYJPsrx7xUekwTJMrVxzm3+96M=
Subject key identifier: C4:9E:4C:F8:65:18:F1:62:67:E0:CB:84:BF:1C:ED:BF:A1:9A:45:DF
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 0194BD4E6CB507FCA7747A0B27D8D8D50A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0AEB
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: tfCKCs+X3mmCN4vt3KqFMacdvQU8YcPfF4z+R97MZo8=)
2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:b5:07:fc:a7:74:7a:0b:27:d8:d8:d5:0a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=c49e4cf86518f16267e0cb84bf1cedbfa19a45df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:e8:1d:c9:28:8b:dd:27:71:1b:ed:0a:00:
a0:84:99:ef:96:5c:8a:a3:72:c1:d4:13:71:ba:37:
a0:75:70:53:7a:df:5d:79:31:ca:3f:40:e4:07:4c:
ad:e9:f3:67:22:d7:0d:71:43:0f:c7:51:49:7f:d2:
69:d2:eb:86:40:9b:6e:7c:20:cf:43:fa:70:7c:9c:
bd:d5:f5:98:2a:f8:17:f6:17:71:34:e6:d5:3e:34:
5f:96:0a:35:7c:b9:0d:46:80:84:82:30:00:71:37:
76:be:cd:b8:36:19:08:57:9f:e4:ff:7e:c7:32:c6:
6c:9a:8d:b6:d5:35:96:e1:6f:a8:41:06:68:34:05:
88:65:1e:43:63:01:f5:52:64:d0:22:8f:c6:79:07:
d5:8b:09:a2:a2:92:51:b3:51:5d:89:46:c1:46:5a:
cc:94:97:64:81:92:cd:77:20:b9:a6:53:c4:30:71:
f3:ba:d1:52:0f:b1:59:f7:5d:c6:d2:04:25:55:96:
ae:05:7c:f0:6e:18:27:70:b9:f1:41:44:4d:13:02:
cb:c2:68:ae:cc:a1:17:ab:44:4e:a1:6e:fd:07:aa:
58:7d:53:11:49:1b:3b:a9:93:40:c9:de:4a:11:30:
82:c0:85:57:58:0e:3f:b3:ed:0c:bd:7a:e0:9b:f8:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:4C:F8:65:18:F1:62:67:E0:CB:84:BF:1C:ED:BF:A1:9A:45:DF
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b4:a8:7d:4d:66:bc:56:96:ae:8d:94:5f:98:30:f5:5e:ce:
42:f1:04:9e:12:11:c1:7b:1b:08:24:97:96:40:87:1e:b1:e8:
94:3b:e3:9e:cd:ed:c6:b1:e6:df:89:72:a2:d3:0d:39:3c:8c:
db:bb:fa:8a:c9:6a:87:cb:90:3e:16:1f:d4:e5:ca:f4:31:39:
c8:8b:14:34:2a:91:cd:5e:50:fa:99:3a:8b:9b:20:a7:0b:a9:
6a:80:c6:74:5d:98:d1:03:d3:73:c7:8c:e4:27:31:d4:0a:b2:
33:cf:e8:ff:d8:03:ac:6c:6f:e3:bf:11:da:a3:e5:3b:bb:05:
d7:ed:42:dd:be:81:17:37:b4:a4:7b:20:9b:bb:df:e0:8b:90:
00:7e:8d:f9:31:9a:a4:19:cf:5f:87:92:88:f3:3a:bf:26:bc:
db:aa:f2:04:85:82:1b:8e:91:13:af:d9:28:c0:ae:aa:bb:2d:
93:24:6b:f5:31:99:0d:c5:48:a5:d6:cb:b2:1d:dc:f0:6f:e6:
0e:70:75:fd:f6:a1:05:ae:b3:a6:26:26:65:a6:bd:f8:b1:67:
d5:86:86:1a:21:67:43:61:d9:12:35:86:11:6e:e6:b3:43:62:
00:f1:fa:ca:ed:42:71:72:c2:55:42:79:a5:3b:28:16:0f:42:
cc:45:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:45:38 2025 by rpki-client