Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
File: u7MU1-NpAfbep8ApGlFTO7Ik87M.mft (raw, json)
Hash identifier: mzgpwoMof8BOvTnzdnch4fb+FpO2TDAAbwTEIId2y04=
Subject key identifier: 76:E2:3D:84:99:0A:A1:8D:CC:A2:0F:8F:F7:51:C7:4B:BC:D5:87:68
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Certificate issuer: /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial: 0194BC3C09F916F2297B6241A833EE9659A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
Manifest number: 07AA
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: u7MU1-NpAfbep8ApGlFTO7Ik87M.crl (hash: JOd3L2Wn7Zgdzvu50nm1hc/ubOeQ1EOBjp2n47Co6lw=)
2: yfiu2M8plrtU3UaE1tSWQlOfqzM.roa (hash: LGvgYonneT46G/xf4FgiBrT7VrnKx0OUEEnLR8etqrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:f9:16:f2:29:7b:62:41:a8:33:ee:96:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=76e23d84990aa18dcca20f8ff751c74bbcd58768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:21:f8:37:13:f4:bb:5d:66:7d:42:ba:e5:
a6:00:16:87:00:39:3c:d1:ad:1b:15:fd:06:32:b8:
0c:3f:54:7f:56:ec:cb:be:f0:0e:cb:1d:0c:48:b9:
ef:3d:6c:ac:0f:cb:ab:1a:97:d0:52:12:13:78:8a:
67:d8:eb:97:8b:4e:cf:d0:b0:ff:a3:9e:7a:df:fc:
ed:10:82:d7:ad:c5:fd:bb:3d:11:8c:cd:ad:99:96:
c2:15:77:41:83:af:70:20:24:56:22:a1:b2:8b:e4:
22:92:bf:39:d6:b0:d2:c1:0e:b3:d8:aa:23:b6:44:
15:40:d7:15:ad:45:5c:f0:77:9a:39:5b:f2:00:76:
28:6f:8d:9d:95:c6:f8:76:ac:a6:df:7b:4a:bb:1a:
3b:10:c4:64:cc:cc:c2:10:c8:a5:aa:53:8f:83:40:
f8:07:1d:f6:76:b7:77:00:21:2f:2a:c6:30:67:83:
35:41:ca:07:f3:06:e5:11:46:ae:53:93:e7:12:80:
d7:14:02:82:43:79:2f:bf:5b:4b:85:ba:16:52:2a:
1b:01:c4:7b:7d:81:8e:3b:b7:da:73:92:d8:be:95:
33:74:28:05:88:05:01:92:38:a1:66:36:2a:7c:11:
1c:34:0b:94:d8:a5:e6:76:0b:dd:6b:07:93:e0:d2:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E2:3D:84:99:0A:A1:8D:CC:A2:0F:8F:F7:51:C7:4B:BC:D5:87:68
X509v3 Authority Key Identifier:
keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:35:6f:a4:00:70:44:23:57:e3:70:00:6c:c0:bf:90:bd:94:
ad:18:2a:12:49:ac:ea:05:23:fc:b3:61:46:3b:5e:5a:90:8e:
ae:f0:8d:42:8a:1f:8a:86:e9:57:01:9f:1a:f9:2f:a5:de:f1:
06:cc:61:c1:93:5a:3a:31:ab:fa:dc:44:2f:cf:53:51:2c:f7:
0f:4f:a6:72:79:e7:6e:e0:26:35:c7:d1:1f:31:e5:4e:2c:73:
09:a4:35:56:0c:8f:53:a1:1c:db:d1:53:d6:55:e9:4c:fc:69:
d7:a2:66:d2:5d:71:00:36:9f:d5:cb:7a:9c:13:4d:6b:aa:cf:
d2:2a:bd:e0:3a:24:21:f1:78:e1:3f:00:42:ab:e9:9c:5b:27:
a8:01:97:a2:bd:53:53:2d:de:05:4e:44:7a:3a:76:05:80:f6:
91:e6:0b:a0:5e:87:af:41:29:68:c2:63:d1:23:da:d9:d6:52:
aa:5d:a0:35:4f:45:38:33:03:65:23:fe:fe:df:26:1f:87:a0:
9b:8f:be:c8:d8:db:ec:a5:6b:7a:6c:f0:e2:94:77:bc:40:df:
b0:9e:a3:f4:ae:eb:d3:2f:36:0a:e3:4c:4e:9c:cb:f0:96:35:
90:49:20:64:d7:c5:ce:44:35:03:54:d0:b0:02:c4:28:8b:36:
fa:92:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:04 2025 by rpki-client