Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: NUOBDvqiKLWeQL++BjYxHjdki5ZTwKBljYvvDbdCauI=
Subject key identifier: F2:F5:3B:36:FD:34:5F:86:3E:5E:A7:48:90:28:3D:45:3F:50:15:96
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0194BCA9AD0E0DCB3888B8D98D5A58845393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 0EB6
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: Hh/UTbhDYmJAzprSPgxs/EiaWmqmDj2Fp3Tg4RAedHY=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:0e:0d:cb:38:88:b8:d9:8d:5a:58:84:53:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=f2f53b36fd345f863e5ea74890283d453f501596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b6:28:19:db:05:bd:1f:ce:54:f9:6e:2c:a6:
21:aa:af:0e:48:52:dd:63:66:c9:bf:23:57:90:9d:
b0:bd:c8:5d:5d:b2:44:01:4f:66:9f:10:0e:e3:a1:
0b:ee:6f:68:6a:8f:2b:22:40:d6:d0:f3:3d:0d:51:
ea:6d:43:c4:e4:e5:05:62:c2:02:5c:b6:29:28:88:
d4:61:2e:7f:be:b6:d8:d4:cc:60:ef:5f:de:71:9a:
de:91:32:f6:5b:ec:fb:e6:e1:47:64:b8:ef:66:d8:
6f:b7:3e:b5:f9:8a:00:ed:94:a0:67:2e:8d:86:39:
ae:9f:be:2f:23:9c:af:36:29:cf:93:93:9f:a0:5c:
97:f2:69:7b:e0:a3:23:33:66:cb:25:02:d7:40:f4:
a4:0a:d7:69:51:b0:63:cf:ac:39:b3:63:7d:4b:ea:
5c:fb:7d:94:c4:27:b4:5e:a8:b9:25:c1:45:bc:a0:
19:03:a2:86:8b:b3:39:41:ed:28:0d:bb:b4:78:09:
b7:2e:51:f3:7b:89:45:75:a9:be:76:15:6f:5f:4c:
ac:72:61:66:3c:17:3e:a0:54:71:00:27:80:04:b3:
23:81:fe:7d:c4:8e:9e:06:2a:2f:2b:d9:5d:f0:2b:
42:5f:9b:f6:22:8a:9d:1f:dd:40:f0:00:2c:53:b3:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F5:3B:36:FD:34:5F:86:3E:5E:A7:48:90:28:3D:45:3F:50:15:96
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5c:58:41:c7:5a:6b:2c:3c:e1:59:dd:ae:75:d2:f8:b7:3c:
27:5c:6f:46:68:97:64:09:04:32:ab:2f:6a:fd:eb:6e:24:0f:
ec:dd:01:2e:3a:a5:a7:ec:80:45:c6:0a:75:2b:de:c3:19:1c:
30:74:35:c1:b3:6b:a6:f4:9a:58:53:5e:e9:c5:b6:dd:47:f3:
f4:84:d9:54:6b:5a:7f:e8:28:d4:ff:bf:52:66:c8:7c:af:33:
d6:b5:5c:d3:23:b6:1b:6d:22:88:39:a2:7a:36:37:80:c1:99:
88:87:47:a6:13:d9:e6:af:0c:62:42:03:fa:a5:16:28:5e:90:
9c:16:be:02:6c:10:35:d3:fb:25:87:5f:28:5e:6e:d9:a6:5b:
f0:81:c5:94:4b:d3:ec:24:ad:bf:88:cd:98:c9:07:c3:6f:0d:
3d:93:78:f4:34:ec:5f:17:17:b5:0c:d4:f8:c0:c1:4c:78:9f:
01:d4:31:a1:df:c8:c6:93:14:09:11:4d:69:92:9a:97:b6:f9:
c0:c8:52:14:62:9d:10:93:df:02:5a:b3:9d:ea:d7:ea:3c:be:
1c:82:ec:64:af:7a:f5:ef:f1:8f:f7:6d:8a:75:c4:52:cb:53:
68:a8:e6:71:24:50:90:cb:21:d4:43:6e:53:10:c0:e7:dd:a4:
0f:b3:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:26:26 2025 by rpki-client