Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: kc5qGkg7yuf5ZXMLEYqrrK6lbuq6f3yG2+jNMPDd2aM=
Subject key identifier: 3D:25:43:0F:7D:07:5E:50:DF:22:26:B2:63:D9:C0:AF:E5:BB:E9:01
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 0194BD17D2462525BA4A4B46116EA0CDD15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0765
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: M/UzfOfVYipEcqibGUzLISqO6iHs2VihSyxBgGZHuyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:46:25:25:ba:4a:4b:46:11:6e:a0:cd:d1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=3d25430f7d075e50df2226b263d9c0afe5bbe901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:bf:1e:c3:79:eb:aa:06:74:77:84:19:51:
c1:c9:ba:a2:50:e5:74:3b:64:cf:f5:72:61:1f:ce:
87:1d:19:e6:22:a9:ce:63:41:91:a8:0c:0a:ba:37:
18:68:db:62:c9:13:4d:cd:64:1f:e7:23:1e:57:7f:
2d:15:ca:d1:44:52:ad:93:af:56:49:5e:2d:b1:f5:
a2:15:78:0e:c6:dc:fe:29:ef:29:89:bd:a8:9e:00:
26:cc:d4:80:20:38:70:6e:cb:92:0e:8d:e2:08:62:
30:45:a9:1f:ca:7a:3a:f1:9a:08:c1:7b:52:d1:94:
95:e7:05:45:57:1b:02:26:19:32:e4:fb:17:be:1a:
bc:49:54:1a:d8:c1:d3:80:3d:8f:1b:81:f4:ce:ab:
0e:cb:e4:dd:e1:88:4f:3c:97:85:45:3f:61:40:5d:
ec:91:64:87:8b:96:8a:d2:97:25:8f:62:df:f3:e4:
69:0a:9b:ef:28:55:c0:85:6d:22:6f:b1:4a:3e:9e:
37:a0:5b:dc:94:77:c8:40:20:7e:a5:10:42:b8:62:
41:97:e1:b1:e5:eb:cb:68:b5:5a:26:d4:d6:0c:10:
36:00:2f:69:60:94:ea:2c:25:27:3e:71:f7:49:6a:
42:72:22:68:c3:0a:4e:1d:ea:7c:16:08:86:b8:d2:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:25:43:0F:7D:07:5E:50:DF:22:26:B2:63:D9:C0:AF:E5:BB:E9:01
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:70:ef:f6:1f:87:2b:c0:10:1d:39:6a:70:43:3b:64:d0:4f:
f1:10:de:f6:18:9b:3d:81:8d:72:66:b6:54:47:3d:95:35:bb:
5c:2b:e4:7e:b4:f3:bf:4b:83:f4:dd:13:19:74:0d:07:e2:f8:
bf:11:73:56:86:be:b3:56:c6:a6:e2:f3:ba:e9:dc:04:f0:a6:
77:36:4e:e6:d6:aa:8c:6f:e0:62:3c:99:c6:94:ff:2e:b2:6b:
66:f7:ed:5e:58:33:fb:22:20:67:64:7a:8a:01:25:a6:02:b6:
79:fe:40:b0:87:67:1a:d4:b3:7b:fa:44:de:f4:c2:64:58:bb:
38:a7:45:f9:7f:7e:66:9d:e7:2e:ae:ac:9b:09:91:0c:3f:d2:
f4:3a:76:77:ab:bf:7b:e4:d3:60:ab:50:96:64:ea:ea:8f:98:
64:e3:00:fe:ec:8a:1d:3d:c0:7d:84:ff:93:35:f6:fa:ca:ab:
1a:3c:ca:04:e9:67:0e:93:61:56:9c:9b:76:ca:0a:9b:95:6d:
94:e0:18:99:de:c4:1f:cb:08:4d:b7:ac:a2:3c:0e:8d:fd:a0:
38:b0:fd:fe:43:20:4d:57:a1:4d:b0:a0:0c:c9:5f:44:5d:5b:
6d:6b:52:a9:a8:69:d7:ca:a3:68:90:6c:3e:df:b6:a2:f6:aa:
67:e1:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:18 2025 by rpki-client