Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: LNpbuZD4RYZ8a/cr+DDyiQbEoGBu6s7sm/6QO+yIqU0=
Subject key identifier: A1:0A:A9:1A:95:BC:29:E1:F7:EF:46:6F:D7:40:9B:19:3D:F3:6B:9C
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 0194BC7341E528A7E2EFD0188CE9A3BCAFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 06F6
Signing time: Fri 31 Jan 2025 13:00:57 +0000
Manifest this update: Fri 31 Jan 2025 13:00:57 +0000
Manifest next update: Sat 01 Feb 2025 13:00:57 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: CmgtiEId1BCJKfq+zD8ccHC3MtMLyXG06YzPY1z19Kg=)
2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:41:e5:28:a7:e2:ef:d0:18:8c:e9:a3:bc:af:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Jan 31 13:00:57 2025 GMT
Not After : Feb 1 13:00:57 2025 GMT
Subject: CN=a10aa91a95bc29e1f7ef466fd7409b193df36b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:4c:d8:fd:4f:ef:d4:66:ed:f8:86:20:1e:
52:df:89:76:c7:41:9b:0f:28:7a:c9:d0:0e:45:ab:
b3:79:20:67:aa:e9:09:71:9a:1d:ea:df:ba:bc:89:
1d:58:8b:2f:bd:30:69:7c:22:96:ff:71:f2:12:79:
4e:15:44:72:ed:ab:e6:ec:ff:9f:22:3b:34:5e:ba:
c0:da:a3:77:b8:12:f4:2c:6c:1f:2c:e0:a7:11:44:
38:7b:c0:12:65:b1:18:d2:39:de:37:89:54:72:28:
2b:22:a5:2a:f9:a0:ba:67:d7:cb:35:39:76:0c:54:
04:bb:74:ef:b0:58:a7:c1:a5:b1:0b:46:8a:31:c2:
40:1d:6e:16:6a:d6:41:26:26:0d:d2:16:c4:3e:ae:
2c:3b:3c:9d:b2:12:0d:08:70:11:59:a1:0c:d4:d8:
17:47:40:12:aa:f7:0e:c7:f4:73:79:b4:2f:6b:f0:
88:26:c9:f3:40:9d:bd:d6:eb:88:69:19:cb:c0:c1:
21:6f:95:6a:24:fe:3e:75:f6:a4:51:fe:35:2f:3a:
67:40:db:55:c1:ae:6a:13:a6:33:de:9d:d0:13:d4:
c0:e6:6b:84:61:d3:ed:6e:2a:b8:77:cb:d2:23:c1:
78:7a:62:b0:dd:43:59:cd:9c:0b:4e:c6:2a:39:dc:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:A9:1A:95:BC:29:E1:F7:EF:46:6F:D7:40:9B:19:3D:F3:6B:9C
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c0:8c:10:69:96:50:5b:8b:e4:57:44:46:fb:1a:6b:b6:b2:
39:35:8c:c7:61:b7:18:0c:c3:1f:3d:a1:c8:bd:43:f9:7e:79:
60:8c:37:82:2f:70:c9:de:4c:9c:51:cd:1f:64:0a:00:00:97:
46:ce:3b:45:c9:f0:fe:72:e5:2f:93:a8:90:90:57:a6:94:5e:
33:bd:02:9a:92:eb:83:3c:eb:48:aa:f5:5c:fc:be:3c:ea:4d:
36:5d:60:fd:3a:1f:bf:ed:7b:b6:15:f2:c6:16:65:b4:ad:8f:
a1:7f:54:77:03:cd:68:2c:84:d9:0a:66:c6:6e:bd:c9:ec:bb:
19:e3:56:f7:20:91:97:35:4a:1f:45:33:3b:d1:7b:21:ad:7c:
6a:3c:78:a6:04:59:70:43:47:99:a6:75:8b:3b:a5:47:a8:33:
5d:0d:10:7e:28:f6:7f:87:8d:ba:6d:72:69:d9:7a:a3:ef:2e:
bd:5e:18:f1:30:19:d0:0e:c7:68:21:95:17:ae:68:21:dc:bf:
2a:e8:ea:c7:76:e2:10:76:3e:9e:6b:92:36:af:66:2d:46:f3:
67:74:bc:ce:f5:73:30:c3:04:64:78:ce:83:5d:4d:9a:8e:6a:
33:c6:c6:5f:8c:10:60:e9:47:d2:0d:11:aa:1c:79:8c:03:15:
84:41:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:22 2025 by rpki-client