Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
File: 7piHul9FfXl6_awsVVHe-0U9iPM.mft (raw, json)
Hash identifier: Yga7AQJD3PPct7slaRclWq5VIJ7N5earq6dBPlGqR6Y=
Subject key identifier: 41:7E:17:68:2A:BD:77:7B:4B:4F:D1:B7:B2:5B:DC:E6:4F:16:C7:C8
Authority key identifier: EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
Certificate issuer: /CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Certificate serial: 0194BC04BAD6DCAC47E036526B5872799608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
Manifest number: 03F1
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 7piHul9FfXl6_awsVVHe-0U9iPM.crl (hash: FeOPgvvK1az9NY4wF9VMy4OfAa51TvxgQR9r9DfyLTw=)
2: xAERLAW9yeSp7-IVDIC_ELETFQs.roa (hash: 8vMoTFjOsjQqMO21PnDb5Vdq3wS8nDT+pMvDuXAJq8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:d6:dc:ac:47:e0:36:52:6b:58:72:79:96:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=417e17682abd777b4b4fd1b7b25bdce64f16c7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:37:2e:47:40:ad:3b:84:4e:dc:de:0b:21:
43:7c:fc:e1:a3:27:c5:4c:a8:7e:9d:89:f3:08:34:
e4:0d:14:72:94:1f:5f:f6:a3:23:3e:d8:1d:05:6e:
bd:48:50:fc:48:8f:a7:a1:cd:2f:9c:36:97:0f:06:
7c:61:30:03:de:05:0e:d4:72:8b:94:04:a3:5a:01:
ee:8f:93:22:0b:53:c7:68:74:6c:df:98:f5:80:84:
f4:f3:4b:3b:ea:c3:1e:37:d4:cb:0a:5b:69:3a:cc:
3a:df:1c:83:04:7a:14:62:95:52:91:6a:d2:02:c7:
17:ae:8e:72:cb:b4:be:82:fc:03:1f:17:1a:65:e5:
2b:b0:58:25:8d:01:66:47:16:47:cf:47:af:cb:bd:
7a:0b:ff:bb:ec:6c:08:ec:2a:ec:8e:6f:bf:e9:6b:
78:36:bd:88:a0:2c:9e:6f:40:86:d3:db:78:a5:03:
98:31:22:44:4d:cb:dc:ac:69:38:53:68:37:b3:91:
f2:72:87:81:a4:84:6c:3f:ba:55:37:40:3d:ef:b2:
3b:2a:4b:53:74:b3:c0:c8:28:94:24:f1:14:c5:bc:
15:00:cf:06:b8:df:e1:5c:69:06:79:7c:ee:c1:95:
fa:96:a1:af:0d:85:2f:67:60:7f:5f:5c:72:dd:74:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7E:17:68:2A:BD:77:7B:4B:4F:D1:B7:B2:5B:DC:E6:4F:16:C7:C8
X509v3 Authority Key Identifier:
keyid:EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7f:98:a9:9a:b1:48:57:01:c6:5f:a2:24:0b:e7:d3:c7:18:
00:9f:9b:7a:12:c4:4e:5b:19:b4:53:2e:96:64:bb:ab:b5:10:
2a:9e:a7:74:df:39:ae:07:32:17:15:18:36:c1:de:9e:f7:63:
26:6f:c4:67:65:96:28:1a:3e:18:30:63:df:db:73:d6:bb:e7:
62:44:7f:7b:dc:2b:c5:39:5f:ff:47:6e:02:c6:26:f6:13:7b:
27:59:7d:2a:d2:c4:15:c3:24:ac:dc:69:10:de:d6:97:ab:24:
7a:7c:7a:33:7b:95:37:fb:be:fc:49:89:78:01:a3:4f:71:f8:
c2:f9:d9:97:1b:30:5a:95:11:10:4f:bc:8c:cf:fa:3d:1e:52:
83:98:a8:25:fd:4c:0d:0e:cf:6b:22:07:63:4f:7f:01:9e:3e:
46:a0:0e:bd:3a:3f:39:47:20:42:9f:0e:ce:b1:58:ee:cd:ff:
88:ed:9a:83:70:6a:f9:bd:f9:5b:57:84:b6:14:96:50:a9:13:
59:e7:55:a6:f0:b6:5c:46:f4:15:88:5a:de:32:bd:09:ae:a3:
0a:63:9b:e5:a1:98:a7:80:04:1b:3c:aa:b9:9c:54:12:6b:49:
11:e6:7f:ab:28:f8:65:14:ef:58:51:24:1e:0e:99:55:dc:95:
a4:10:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:11 2025 by rpki-client