Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File: 7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier: w8HxaKW/IIvAPELQ8HaSTS35VowQQTfcpalC2VwhDME=
Subject key identifier: 5C:4B:A5:31:95:A2:15:B3:2B:08:83:0F:36:FA:F8:88:86:0F:94:1B
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer: /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial: 0194BC3C4F0E2C6358CE9D67E09A7824695F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number: 10EB
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: mAqPepiSyOUwz+oa+G0vulor3MBhQsjPWIQLl4OSb6c=)
2: XiTX8PRRbjXruYbuuuJUYnL12Hc.roa (hash: 9YQjgU1UXlyr6JjfJF2PAwxgn/9h4L92vADp3ZCOwiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4f:0e:2c:63:58:ce:9d:67:e0:9a:78:24:69:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=5c4ba53195a215b32b08830f36faf888860f941b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:b2:2a:52:99:ae:30:31:a9:30:27:54:ef:
c2:43:83:bd:62:71:f7:aa:54:92:f5:6f:54:50:7f:
55:2b:5c:38:a3:bb:2e:2f:d3:fa:3f:68:f3:98:09:
1e:26:49:14:db:f3:b3:e6:14:e4:2b:c4:6b:c9:38:
03:6b:9f:ba:2f:a5:33:ed:a8:64:bd:46:08:2c:35:
b6:ca:fa:79:24:1c:21:84:df:bd:bc:ef:20:54:fa:
64:aa:59:7a:86:2e:59:4a:95:da:57:32:e6:9e:6b:
2e:81:13:b0:03:ba:0f:2d:9c:cb:74:94:e7:e4:1f:
bb:c9:cb:61:3e:98:b8:86:e8:74:60:cc:76:e1:10:
df:8a:8e:34:8e:fa:d6:83:fa:ca:c4:cd:0b:84:19:
39:6e:f9:51:7e:1c:f3:1b:a4:c2:88:ab:90:91:1f:
cc:63:5e:ab:a5:10:c8:67:6e:a3:4b:d4:ea:a1:8b:
92:b0:15:c1:f9:38:95:26:50:c1:fa:f9:ae:e8:fc:
80:7e:f8:17:22:f7:1c:47:04:51:58:de:14:34:26:
38:6b:75:e2:da:b4:47:c3:db:fd:58:ed:87:1f:84:
a6:af:e9:03:20:de:b8:38:60:56:a5:d8:6f:7c:89:
39:44:93:05:c4:d7:87:a5:64:1c:fe:ac:58:aa:68:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:A5:31:95:A2:15:B3:2B:08:83:0F:36:FA:F8:88:86:0F:94:1B
X509v3 Authority Key Identifier:
keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:62:bc:43:1b:5c:83:1a:d5:0c:b7:f1:61:94:6b:1b:53:f9:
e9:15:17:ad:f9:ed:ea:9f:62:9b:3a:de:ff:48:c8:67:d1:c5:
6e:f3:bc:aa:29:e7:42:95:60:d4:0a:92:ab:37:03:cd:7b:6b:
95:fe:cb:8f:58:43:0d:fd:a2:e6:d6:e0:b4:97:6e:26:a1:3c:
63:09:ac:ac:cd:8f:04:6d:89:70:6e:67:25:a2:44:18:90:b8:
27:0e:fd:7e:e6:a7:0b:28:fc:28:3b:b4:57:d4:f1:a7:bf:31:
51:c8:7e:24:50:f1:6e:6c:a8:8e:b5:01:22:e7:35:ed:c6:84:
74:fd:31:bf:19:af:3f:b4:98:4e:ed:a8:e5:e2:ba:db:72:cf:
e9:19:16:64:3e:08:95:7f:81:e6:ef:e8:a9:05:5c:ee:8c:b0:
8a:44:39:0d:cf:7f:0e:27:88:04:06:0f:58:c5:a9:94:75:44:
30:82:c9:be:51:cf:a3:16:35:d2:19:75:1c:18:cb:2f:19:c3:
33:91:a5:75:b6:86:a5:70:4a:d4:b6:43:a4:7e:50:ac:71:15:
33:26:db:7e:d6:42:d0:53:fa:6d:93:69:d6:50:83:ff:2b:b2:
77:99:d8:db:ac:f0:62:36:d2:3e:57:e9:86:4a:e6:a9:ef:44:
a8:dc:e4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:13 2025 by rpki-client