
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File: f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier: dunVhnGzV3FnwmRtcbQpUcUNJZVgFl55CIze6K0YYYk=
Subject key identifier: C5:D7:FB:3C:BC:04:E0:A1:A0:D5:5F:DD:15:F8:79:61:B3:51:C3:97
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 0194BBCEA418BAE0BCB3242753471C1C8202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number: 0CD7
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: 8Nz7pWuGzKddMGUQDfHKd23vSsc.roa (hash: 0Zij1MsWucwtgl3mjLbhutBq2eFIXVXGt5jqt0MvUbY=)
2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: gywPrZMZdol18ex4i1cPNKB9ZYKVxY+9wmA8pFJ3kvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a4:18:ba:e0:bc:b3:24:27:53:47:1c:1c:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=c5d7fb3cbc04e0a1a0d55fdd15f87961b351c397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:3c:12:87:a2:3d:5a:a1:27:1f:0f:71:b1:
4b:87:57:72:b6:4e:05:e5:9a:56:4c:8b:24:da:1d:
eb:f1:db:b8:16:e6:83:f0:7f:45:f7:02:f7:a9:1c:
f2:96:92:aa:8a:9b:5d:96:52:65:49:1b:2d:da:62:
73:fb:7a:15:55:28:86:e8:e0:3f:3b:a3:14:95:92:
b2:90:0c:c9:af:2f:32:73:38:dd:30:b8:a4:28:dc:
8e:7e:90:ca:63:3f:0f:0e:31:b9:58:b2:01:01:d6:
71:ee:9e:2d:c0:1e:c1:d0:eb:0b:da:45:60:04:ed:
dc:b0:ee:45:47:97:60:f4:52:8e:6d:39:d4:ee:da:
15:06:5c:9a:51:1a:55:8c:40:b6:06:c6:5c:72:40:
e2:d1:a6:b5:ed:4d:33:78:86:5d:d2:68:ea:0c:90:
7d:b2:10:6a:51:ab:8e:77:db:32:15:d0:ab:a3:f0:
3d:60:3f:27:e4:13:d2:c3:ea:34:84:0a:21:eb:26:
10:1a:6c:2d:d4:69:1f:19:17:c7:97:13:ef:f0:68:
6e:fa:6f:fb:37:2a:91:df:fd:3a:c9:66:89:33:1b:
66:5e:4c:e3:88:81:6f:37:23:9b:07:6a:78:6e:ef:
c5:17:5e:89:52:c7:d3:ae:ff:58:89:8e:cd:19:bb:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:FB:3C:BC:04:E0:A1:A0:D5:5F:DD:15:F8:79:61:B3:51:C3:97
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ca:95:e3:1e:ab:22:80:25:c8:f3:c4:a3:27:e5:3d:f8:ca:
74:e2:4e:31:20:1b:06:bc:31:6e:f0:9c:51:a4:46:89:3d:6e:
74:37:9e:39:b0:1e:0f:2c:f4:fd:0a:ec:27:07:3e:1e:23:ce:
97:7c:76:5d:53:e9:cc:18:0f:5c:4b:f3:29:c2:87:66:58:a5:
3c:86:65:7a:82:e0:bc:df:44:77:4a:77:1c:de:3f:52:1e:d7:
6a:94:ba:68:41:72:34:8b:bd:81:40:61:6e:dc:9a:26:1a:b6:
5b:8d:91:19:af:29:cb:6d:85:1f:ba:d9:f3:df:b9:23:61:d5:
51:36:04:e9:b4:c0:e9:0a:47:94:3d:9a:28:f4:2c:68:eb:6c:
bc:62:b9:cc:9f:cd:2d:e9:d2:a7:07:9c:1d:3e:f1:6a:b6:6a:
78:8e:f6:c9:fb:bc:07:1d:7c:bb:bf:7a:7e:7d:8d:39:a1:aa:
44:da:0e:94:28:e2:f9:06:9b:83:a2:81:4b:9e:2b:0c:47:16:
6b:c1:17:09:1e:0a:af:12:61:84:c4:c8:aa:8a:70:2b:ff:c6:
8a:6c:ab:dd:aa:2e:57:f6:c1:ee:ae:2f:3f:85:09:82:91:f6:
b6:5a:c6:44:7e:62:a9:c6:b6:03:44:ec:a6:1a:57:9f:fd:3f:
e9:b3:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:43 2025 by rpki-client