Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: Alc8W14hGLgFkrRVZ3J6o09oD+S2VRN8eEGuDuStyHo=
Subject key identifier: 52:BB:56:15:88:3B:95:BD:40:F7:6E:AC:41:8A:A8:EC:D1:FD:2F:F8
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 0194BD85976A2DC48C26650C0E5F01808D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: wqgBfQaLcRfEv91Rslo2S4QLMCVRdSLu5RH3xK8pqhg=)
2: SWG7ULWsbdkT7YnAYLal6aiUNPU.roa (hash: 4R5oEsAspImowOjIwYW5eNE8lcSJazbh0RoaPrdVo18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:97:6a:2d:c4:8c:26:65:0c:0e:5f:01:80:8d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=52bb5615883b95bd40f76eac418aa8ecd1fd2ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:97:55:ac:7b:93:48:2a:ab:21:8b:52:1a:
5c:c4:73:1e:ac:0e:3b:dd:25:54:93:ca:b8:28:c4:
37:76:06:1f:13:3d:40:88:c3:ff:85:db:14:ef:db:
0f:ad:bd:de:76:b9:61:bf:67:e4:d6:2f:b8:79:03:
da:bc:7b:c1:9f:ea:15:35:97:c5:23:19:22:f7:35:
16:6d:3e:ff:d0:00:77:cb:e3:75:90:27:87:08:bc:
1f:5a:d5:36:0d:f0:0e:c3:52:3e:69:00:81:48:fe:
b9:03:66:37:a3:1c:9b:6b:bd:c5:a8:57:be:e2:bd:
50:27:96:9f:52:13:00:33:4b:87:49:54:b7:75:05:
9c:47:1c:ba:4f:f6:81:18:fd:a1:1d:0b:f2:3c:3f:
c7:ea:07:03:9c:c6:4b:33:4a:2e:9b:91:2f:39:36:
e9:9d:6a:6a:49:9e:02:62:85:b5:d6:4e:f7:a6:c7:
07:db:6e:89:7a:5e:c2:f2:da:a7:89:73:d5:d6:42:
8a:63:b8:29:39:8b:4d:fc:d9:8f:a4:83:8f:14:ec:
2d:9a:47:14:b5:7d:96:c2:7f:34:0f:c6:72:20:67:
34:41:28:77:64:ba:c7:30:1b:7b:d0:2f:16:e1:f7:
86:22:7a:09:2e:56:3e:51:23:f7:f8:20:48:17:79:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:56:15:88:3B:95:BD:40:F7:6E:AC:41:8A:A8:EC:D1:FD:2F:F8
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:29:3f:a0:50:29:fb:67:4a:58:b1:66:87:bc:ef:97:0c:b8:
61:b5:f4:82:64:0c:44:62:24:9b:d5:87:d7:a9:3e:0a:ad:d5:
2b:d0:52:4d:ba:58:bd:06:3a:75:e8:c0:a5:b2:89:7d:91:c4:
61:a6:6c:5c:21:89:21:9e:05:ef:01:41:fa:e1:bf:40:2b:a3:
94:c3:57:a8:33:98:d9:ff:d5:67:72:34:fa:93:42:2c:3d:91:
03:1c:13:cd:10:ea:40:83:78:4c:b0:d0:55:e6:62:e0:10:1e:
d6:47:b9:92:43:0a:e2:e0:e6:cd:5b:1d:18:b8:2a:50:16:40:
f6:98:5f:f2:66:59:c1:0a:c2:c7:06:22:08:c2:28:a3:2f:6a:
e9:4c:e5:31:ae:f8:f9:df:a4:cb:78:01:8d:bc:7d:bb:e1:53:
57:b3:92:e9:27:61:e4:5a:1d:1a:4d:f8:29:c3:c4:ec:4d:9a:
32:84:7f:0f:45:f8:01:a1:e8:69:ab:6d:3c:4f:e0:78:25:75:
da:2f:db:22:8c:fd:1c:b7:b4:e8:75:2e:0c:46:67:ee:c7:81:
d6:16:b2:e7:24:89:b4:63:1e:b5:25:7f:07:5d:e4:51:dc:90:
d0:48:56:c9:3e:b0:d7:2f:66:23:59:d0:05:33:21:63:41:87:
92:9c:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:10 2025 by rpki-client