Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: nlDeb3LYH97XxeEN9ch12N+KVzA1PzP24h7qGEc/xiU=
Subject key identifier: CA:51:09:F7:C5:45:B9:34:05:3C:69:2A:F4:57:53:2D:94:71:5C:D6
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 0194BBCE618CCE4C554211AB715CFF3264EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: LBLgZ1Xyf8O7Tg0B/s+CWu4N/wnMhyOqoxgzO7EBYjc=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:61:8c:ce:4c:55:42:11:ab:71:5c:ff:32:64:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=ca5109f7c545b934053c692af457532d94715cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:14:24:47:bd:a3:c0:7c:31:a5:95:6c:a1:
a1:89:b9:67:17:2a:c9:17:4a:d2:12:e1:23:68:bb:
1c:7a:46:aa:cb:20:e8:16:f9:e2:c3:ea:da:3d:fb:
aa:95:8e:39:e0:a5:f1:9f:78:13:30:27:2f:97:0f:
56:b6:de:b6:84:3f:f4:74:a0:20:fc:1d:67:14:cf:
58:a6:1a:b6:dd:23:83:49:3d:f1:f2:40:31:e8:7b:
bc:39:48:64:b9:d0:42:3b:32:e6:c2:57:1f:68:77:
d3:d8:00:6d:30:6a:31:17:c6:03:23:fd:b9:4a:c7:
a1:64:f2:f9:cd:d7:89:f6:02:8b:84:b4:93:70:2b:
c2:5d:5f:84:7a:f3:26:84:37:5e:a9:78:98:06:da:
d6:f6:8a:b4:df:e3:b8:e3:fd:1a:db:2e:be:3c:35:
77:e5:c5:77:de:e4:8b:5c:ce:5d:bc:20:e4:c9:03:
3f:aa:d0:2a:f4:f9:c3:3d:0e:20:43:bf:74:b3:99:
b3:80:b8:cf:e2:31:73:13:40:1f:e1:1b:aa:dd:b0:
a9:0f:b0:c6:1c:59:4b:84:d5:6f:23:0c:e6:9b:05:
d8:53:c6:a0:4b:50:ae:fa:5d:ea:cc:1e:24:53:ce:
ef:55:51:15:36:dd:5c:a0:b4:a1:b3:5e:32:6f:8a:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:51:09:F7:C5:45:B9:34:05:3C:69:2A:F4:57:53:2D:94:71:5C:D6
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ac:47:52:18:2b:c0:a0:25:23:f6:9f:78:ab:f7:06:d0:17:
76:91:46:21:a5:88:3f:1c:de:0c:a2:8e:38:63:6a:c4:90:73:
4f:7e:e5:75:01:84:3b:da:6f:b9:ca:04:41:bf:9c:c9:4d:81:
c6:91:89:4a:aa:2c:a8:a7:4a:6a:08:42:5b:7b:c9:b7:45:c7:
e3:8b:56:81:09:b7:76:de:b0:98:88:75:76:ec:3c:68:47:42:
fd:e6:0a:b2:b2:b5:71:00:d1:5e:1e:b6:16:43:e6:a0:3c:fc:
c9:f8:0d:f2:49:18:8f:0a:cb:04:ae:25:91:d1:d7:31:ab:8d:
35:bb:24:7e:6d:86:80:32:ca:1b:2b:ea:46:f1:e8:e5:e3:8f:
91:3f:40:54:90:c8:1e:e6:ae:f9:c6:15:33:ff:06:39:bd:36:
56:e2:fb:74:23:56:3b:c3:f7:5d:55:51:0d:bf:82:09:f9:51:
0c:7d:34:d3:c5:2a:82:57:dd:32:6a:fe:89:44:75:f3:b8:bd:
f1:c6:d0:20:58:a5:1f:df:53:14:f3:79:fd:2f:7f:bc:81:94:
ad:54:0b:43:bb:5f:16:64:b4:07:db:1d:91:5a:84:b6:35:b8:
49:1e:90:13:19:98:da:7e:10:4a:fc:f8:2e:94:e9:98:66:4c:
d6:0e:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:53 2025 by rpki-client