Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: scltum5SZ07bwQBHxEXs2YdrGoNj3lizjJvzGky3eCk=
Subject key identifier: 27:4E:06:C9:2D:42:E0:74:CE:04:97:E9:25:E4:01:D7:D0:49:00:EC
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 0194BD8551632CB7054777C08809AC2E0B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0AAB
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: LjC34mhbfqCGgEv8JYdQHmEUlCsIZJGapKZrhofybzo=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:51:63:2c:b7:05:47:77:c0:88:09:ac:2e:0b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=274e06c92d42e074ce0497e925e401d7d04900ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:38:e1:d7:71:a5:97:ff:a3:47:bf:57:24:
13:d1:09:67:40:1d:0b:eb:94:5a:fb:c2:81:e4:db:
44:ec:d9:3d:a9:31:5c:6c:91:8c:78:a9:c8:00:30:
e8:13:51:60:96:73:1e:60:d2:53:9b:8b:66:7c:5f:
66:89:32:f3:fa:cf:e2:7a:ea:ea:2c:59:02:cc:d9:
1c:7f:87:e0:e3:0f:d5:6d:50:4e:02:57:45:95:d3:
28:98:47:90:54:f0:5a:c0:e4:5d:fa:d1:6a:99:9c:
dc:a2:42:c0:b4:e8:6c:70:9f:0c:51:2a:e1:68:2b:
0c:7d:0b:14:3d:2c:1f:20:b3:7a:95:e2:13:ef:ba:
af:28:83:67:f1:3d:6c:01:6b:45:03:9d:c3:61:62:
1a:98:d4:f4:01:94:b4:77:e6:bc:73:75:e9:32:3b:
67:49:8e:7f:0a:c2:58:04:cf:1d:46:a3:ff:5f:08:
2f:04:7f:6f:8c:ea:c1:51:15:f3:1b:01:00:55:86:
c0:f6:8a:86:36:dd:e2:23:63:60:29:4d:60:c8:ef:
5c:05:fe:97:bf:ea:c3:ef:7b:68:15:c0:1f:48:a5:
14:90:80:b2:76:de:83:b3:0b:6c:7b:93:c2:83:85:
a2:6f:d2:80:e3:7f:f1:81:05:54:42:9c:4d:5f:86:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4E:06:C9:2D:42:E0:74:CE:04:97:E9:25:E4:01:D7:D0:49:00:EC
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:e0:6c:6b:80:97:1c:9b:2c:01:3c:e4:22:af:7e:9b:4d:
8a:31:83:b6:6e:a8:25:cf:fb:94:b2:2f:e5:0f:b4:79:07:f2:
dd:a5:e2:09:eb:b5:f1:a2:8a:30:0c:dc:17:b3:df:13:fd:c0:
ce:b5:04:69:08:da:48:cb:10:d0:f4:96:bb:b9:b0:5c:2a:9a:
80:c3:7d:d3:b4:76:08:dd:e2:2e:85:2e:5f:d4:49:98:a6:f1:
92:fe:43:3b:06:c9:d6:c1:a6:05:b6:17:33:92:04:f9:94:d5:
26:6b:f2:f0:2a:cd:6e:b2:c9:0d:d3:a5:df:1a:d3:0b:88:11:
66:50:d0:08:32:fc:ba:2a:ec:b7:22:5b:cd:94:5f:65:31:ec:
51:1d:3f:70:48:1d:33:c7:f8:71:5a:4e:b8:2f:4d:27:9d:5e:
ba:87:77:f8:80:9f:ad:08:32:10:ac:75:f5:81:d0:9c:73:4a:
d5:fa:de:35:c2:10:93:f0:a6:88:69:43:9e:c8:3a:c5:bf:be:
9f:70:35:d6:b6:1a:2d:1d:f0:72:64:98:12:c6:39:83:9c:d0:
fc:78:df:b5:fb:94:05:93:0b:54:85:4b:ad:d4:af:2e:20:51:
19:79:5f:11:df:e5:55:c4:cd:f8:a7:b6:a2:d3:c0:e5:05:1d:
1d:d4:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:00 2025 by rpki-client