Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json)
Hash identifier: brbXgGyl+6Tf6m8Jobd4k+3e2A0J1Pwa0eMkEE9sfIo=
Subject key identifier: F5:79:C8:84:F7:99:F4:D4:33:3B:94:B0:C3:8C:99:70:7F:90:09:72
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 0194BCA97396E6C0D3AD7FE9D8C09211A4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
Manifest number: 0EAF
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: 6gcvZTZXP4ZLMiI5jebyFlo2UHw.roa (hash: RQsjYw0xdW4sDKfB24mkwlHzLhlqiQP7AvUyqjMzN5A=)
2: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: klle8cB7G3b0wmVY9DEBqpK4oBFujwDAQzG2HDamWzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:96:e6:c0:d3:ad:7f:e9:d8:c0:92:11:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=f579c884f799f4d4333b94b0c38c99707f900972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:61:68:9a:68:88:f0:50:38:b3:a5:be:c6:
61:19:7f:82:ed:64:29:7a:cf:65:02:3a:39:82:bc:
1d:2e:2e:7d:8a:31:17:ed:22:61:12:e4:dc:7d:d0:
37:e7:12:a6:cd:42:b1:99:96:9c:e1:ba:56:97:95:
a4:07:b2:69:2e:34:13:7c:32:af:0b:50:f2:f4:14:
f7:d5:0c:7d:f1:a4:63:53:be:80:6b:58:d8:60:f1:
85:2d:91:a9:fe:5d:58:4f:77:e4:da:50:3e:b2:2d:
87:5a:b3:f9:b1:67:84:98:1e:d6:0c:f9:4b:9c:ec:
5d:3e:1c:64:28:05:e0:0f:c8:62:44:e8:61:a0:da:
91:76:71:f7:5d:1f:54:0f:e5:2b:d4:73:a5:e0:09:
6b:72:47:ac:78:f5:7f:70:65:b3:f7:01:a3:1d:2c:
ed:38:8f:36:74:5e:d7:3c:3d:c5:39:fd:41:5d:e3:
79:c0:11:95:5b:55:90:2f:f5:7a:fa:78:fd:67:7e:
46:d1:ff:7e:89:91:29:4e:0e:2e:8f:0f:b3:d7:c1:
9b:1a:21:bb:b6:0e:f0:26:50:a7:4e:e1:67:47:40:
30:3a:d7:9f:10:df:c6:1e:b2:7e:9e:8c:c3:bf:8e:
36:a7:9b:07:fc:c2:e0:e4:4b:41:a0:bc:49:83:44:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:C8:84:F7:99:F4:D4:33:3B:94:B0:C3:8C:99:70:7F:90:09:72
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6f:7d:51:30:dd:5a:c6:75:36:9f:40:9b:78:04:57:bc:70:
f1:34:d4:d7:cf:9d:e7:5b:5d:d7:ea:17:d1:ba:b7:14:22:7c:
51:a0:de:f5:ba:37:31:19:a7:76:78:60:d9:d1:f1:3d:e3:a0:
fe:ba:fe:21:ca:38:74:7b:1d:9b:ba:5f:a2:b3:e5:f9:65:cb:
64:4e:4d:c2:96:7f:eb:59:de:1e:5d:34:f2:13:7a:e2:d0:9b:
6d:ae:3a:92:c9:85:58:20:4a:54:5a:60:bf:30:0a:1d:c5:1e:
f4:32:9d:fc:96:14:e0:39:dd:39:57:c6:70:17:cf:a9:6d:63:
e3:4f:8d:1a:c8:1b:20:7e:f0:cc:9c:35:11:46:88:2d:ea:61:
cd:98:75:bc:de:8e:c6:af:3b:5f:73:23:74:ae:10:6a:e3:c4:
03:ff:a5:41:04:c7:36:1a:d5:a0:ae:47:3b:de:20:46:88:ac:
cf:b5:bb:1c:1f:5a:3c:4e:58:30:e2:65:85:6c:19:0e:1d:b3:
89:08:40:a2:66:78:d3:e8:02:e9:30:4f:c8:0f:ca:79:d5:a7:
d1:39:29:f4:87:f8:3e:0b:80:e5:a4:55:3b:1d:a2:a2:32:35:
37:09:19:e8:9b:db:26:ed:f3:39:29:2b:7b:c9:11:4b:d5:ca:
e4:04:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:21 2025 by rpki-client