Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: sVA3L8667lnyIa3xVVQvgtCGmj+ckTbtg7b7kZopPqo=
Subject key identifier: A8:5C:12:5B:54:D6:8B:F5:D2:6B:42:8C:8F:CE:8C:B7:E4:14:87:92
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 0194BC3BF3474480CF62216D53091E0B7EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: 2pHVnpeU6HNjZ83SPiekfn/m+5hPYXkg6VCurRGhdy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:47:44:80:cf:62:21:6d:53:09:1e:0b:7e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=a85c125b54d68bf5d26b428c8fce8cb7e4148792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:03:1b:b2:53:6a:65:03:bf:1f:3f:65:bc:
78:90:7e:c7:bd:88:5c:91:1a:e5:a6:30:d3:97:10:
9d:20:30:37:ea:ea:09:60:cb:6e:df:df:24:30:96:
dc:93:dd:9b:27:12:00:8f:18:d7:51:ea:74:a2:dd:
4b:db:92:63:34:0b:c4:a6:a5:bc:62:96:46:4e:0b:
7b:07:70:e0:8f:e5:5b:8b:a5:d6:1c:5b:5a:80:65:
0a:35:47:58:7a:6f:dd:b4:39:cc:23:4f:52:97:96:
7b:59:6c:7e:da:4a:3b:c3:5f:12:ec:99:60:00:59:
ba:6c:b2:78:15:5a:3f:53:dc:5b:ed:1d:8e:c9:1c:
b9:47:91:ff:3a:49:b8:9d:26:ec:ae:bc:e5:c2:87:
03:14:77:2d:f3:f6:80:16:64:20:4a:08:13:63:dc:
52:95:27:74:cb:56:90:c5:c5:78:0d:ba:83:41:05:
97:70:a3:21:f6:88:96:f2:f8:64:2a:c7:b0:a2:67:
c9:4f:8d:64:94:de:24:78:95:a1:20:13:ac:aa:f2:
7e:0f:cf:80:d8:29:56:ac:57:85:18:ce:45:a6:a0:
6d:2e:08:c5:78:2e:bf:f5:51:b5:bc:f5:96:5d:79:
36:f6:30:35:5a:0f:9e:47:8e:97:87:a8:73:a7:58:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:12:5B:54:D6:8B:F5:D2:6B:42:8C:8F:CE:8C:B7:E4:14:87:92
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:51:45:2c:bf:47:6d:d5:67:da:c0:a3:cf:75:0e:5b:c6:67:
c7:b5:a0:18:5a:17:ff:00:5a:da:03:1c:68:5a:29:76:85:e2:
61:ef:a5:f8:9a:d1:23:e7:bb:24:53:e4:8a:44:9e:37:a5:49:
38:af:a8:4a:aa:9f:98:7b:84:f8:17:2d:48:28:24:46:cb:63:
b4:85:6c:ec:4d:f5:64:9c:a9:d9:5f:eb:b1:7f:aa:d6:b4:7f:
48:e5:2b:77:59:b4:f5:66:8b:13:07:47:17:cb:ca:f3:58:72:
28:8b:2c:1c:b7:31:6e:89:ae:c5:29:a4:62:51:17:59:be:0b:
88:c0:63:d5:36:f2:b0:bc:df:86:e6:65:46:81:6a:f8:9d:5f:
53:6e:c7:d6:2e:c3:f9:26:0a:31:0b:f0:c7:5c:a8:b9:fc:9a:
3f:4b:56:01:1b:0b:32:ce:86:33:7d:79:0c:2a:cf:4c:b8:b2:
cf:7d:ba:a4:9e:01:12:5f:02:5c:97:07:a7:91:69:3d:7e:a1:
22:fa:42:18:a5:59:b9:cf:ff:08:35:c5:43:23:0d:f9:66:39:
6f:4c:a0:6e:11:75:ab:ea:50:10:6b:9c:ea:b0:88:df:4c:de:
90:ff:8a:e2:35:3f:ab:38:00:cb:4d:fc:79:4d:96:ff:fc:ee:
f1:e5:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:23 2025 by rpki-client