Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
File: 7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json)
Hash identifier: sHgVVBEbVLeOyrYYNvXaAx4NEq+wl9633Evq0lS9SjQ=
Subject key identifier: 3D:90:72:93:22:AB:CC:62:D6:F2:93:C2:F3:1D:29:A1:BC:05:07:A8
Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
Certificate issuer: /CN=edafdca6eace4f1293223b02eebc278243869b7b
Certificate serial: 0194BC3C3B0057EC0D0FD12640475549CEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: 6ezdTJ8pe9uuM1XUEtMKCpdIj/Qano4zfwHyMs8SLEg=)
2: 9MDvmaTaPs6Me-n4uVcmqKT8FSg.roa (hash: /pTREuez+n3EK0dILbgfWJ7sRgL4yIoJam7Lpsx5YvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:00:57:ec:0d:0f:d1:26:40:47:55:49:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=3d90729322abcc62d6f293c2f31d29a1bc0507a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:8b:1f:b5:2b:89:40:c2:69:b3:64:07:4a:
7c:e4:87:f9:1f:9d:d5:9e:8e:55:c6:19:43:8a:87:
7b:cb:fd:43:0c:29:46:85:6c:37:8d:23:1e:e0:39:
26:68:d6:70:cc:68:a3:d2:df:ce:69:a5:31:af:a5:
15:35:e7:95:2d:cb:9e:63:7a:c4:95:f3:07:69:36:
8e:fe:ae:c7:e1:b8:a4:4a:2b:d1:cc:0f:da:86:e6:
5e:e6:7e:a7:fc:44:6b:b3:30:52:5d:8e:6d:5b:34:
3a:30:2e:ab:fd:9b:2a:f3:06:17:43:fd:fb:3d:39:
e1:a4:7f:3b:24:7e:5e:96:f0:0e:67:7e:d7:94:72:
20:56:29:10:eb:16:ab:08:87:9d:b5:61:f6:3f:fe:
ba:b6:f5:d3:d2:dc:1b:ce:f1:9b:e6:f0:39:26:f3:
c2:0a:af:24:9b:77:78:eb:93:b1:82:97:a5:99:80:
46:42:78:92:78:5e:89:06:89:65:04:8c:a2:ae:32:
62:9c:f9:5d:73:f6:3c:55:1c:c7:67:28:99:cb:d8:
06:12:68:8b:2a:6c:b9:48:31:10:15:bc:19:ae:a7:
05:c5:ad:46:10:9f:0c:37:67:71:72:05:4a:6f:d2:
c8:7c:43:c3:33:b3:82:e9:f6:fb:3f:4c:a7:f9:db:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:90:72:93:22:AB:CC:62:D6:F2:93:C2:F3:1D:29:A1:BC:05:07:A8
X509v3 Authority Key Identifier:
keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b9:8b:d7:17:35:27:eb:5f:3f:d0:31:32:16:23:1e:1c:bc:
d0:53:11:3f:c5:2e:c0:c8:52:cd:c9:26:d7:12:46:51:7b:62:
51:57:28:70:c2:27:35:c7:e0:46:c5:14:de:5f:ab:c4:7f:8a:
00:89:0a:6e:3a:35:54:cd:30:0f:dd:8e:c2:89:4b:fd:ab:0a:
dc:3f:ec:a8:1c:91:5a:4c:ed:df:5c:9f:b4:ff:1b:b4:3b:8b:
82:fc:dd:1b:7e:91:8b:7a:76:bd:30:93:85:46:f8:3a:db:eb:
41:dc:e8:e8:ae:6a:82:71:d9:a6:b7:38:81:2c:6e:83:78:69:
1f:58:c8:bb:63:34:2e:21:ff:0d:e6:a5:ca:76:85:f4:c2:03:
9f:74:1d:92:6d:47:2f:2c:32:4c:3a:8c:2f:d4:a6:2d:17:a8:
76:c7:e5:cd:ef:3c:f4:eb:d6:64:51:96:8d:ff:68:be:61:56:
96:f3:ee:f1:3e:06:3d:e6:56:cd:5d:9e:eb:65:64:21:cf:0e:
0d:f2:a3:5a:9c:3f:b0:78:d5:1d:3a:89:dd:14:66:bb:4a:33:
e2:1e:67:4e:b4:f9:68:d2:5d:23:90:cd:38:83:d2:d1:dd:0f:
21:4d:66:f5:b8:b7:ce:7f:f2:10:37:fd:78:e3:02:d4:e7:7c:
d9:78:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:49 2025 by rpki-client