Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: qlEl+NxYkCzsLNoNSNfs0pE9GZp4DWzyvA3ucBGnjoA=
Subject key identifier: BC:D1:8A:0A:7C:BD:22:76:70:9F:7C:01:25:42:1E:43:E1:B8:DC:C6
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 0194BBCE185A4F2E2BB05B2E8614284B6250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: Mps1XgFVnaXj3rQJgbjyEly98EW7hZY5diXsjMBmDv8=)
2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:5a:4f:2e:2b:b0:5b:2e:86:14:28:4b:62:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=bcd18a0a7cbd2276709f7c0125421e43e1b8dcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:24:75:cd:b3:35:10:7f:8b:da:3c:8b:25:
f2:53:2e:62:db:74:e3:cc:fa:88:f1:d9:60:52:28:
23:fe:d5:3d:d9:46:90:16:4f:54:4b:38:65:3e:34:
48:f7:ab:88:01:28:63:38:f9:bb:b3:0d:0a:87:f9:
21:60:7b:ee:dc:c5:b1:f7:1e:fe:23:36:c7:89:e2:
be:1f:0d:e5:48:a8:60:16:3f:0b:a5:36:81:ec:ea:
51:57:3b:4e:d3:8c:d2:60:90:a6:54:47:e4:be:9e:
4f:30:6e:da:20:3f:5e:37:ed:3c:ab:09:19:82:57:
99:d5:a4:bb:2d:b4:8c:41:a5:b0:88:9f:a3:78:6b:
92:23:ab:65:cc:cd:21:1e:50:29:97:1a:df:52:b2:
19:e5:50:b3:ff:07:60:41:43:68:87:b6:97:75:71:
a6:d7:a4:5f:ff:35:6e:5e:21:89:db:a3:d9:cd:5d:
b1:69:20:6d:ef:74:c5:06:34:0e:f8:d4:3f:03:f5:
a7:6a:0f:ef:47:c6:45:21:d2:32:a0:ab:b8:e4:d3:
9d:be:59:89:08:07:97:55:7d:b9:66:f0:44:df:d3:
c5:5d:65:05:41:ad:ec:1f:de:fc:83:75:61:cd:e1:
86:55:da:95:4a:58:20:4f:fa:ce:20:73:56:6a:40:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:8A:0A:7C:BD:22:76:70:9F:7C:01:25:42:1E:43:E1:B8:DC:C6
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e0:43:a0:3f:1d:a1:3f:77:22:22:28:9b:47:97:3a:d6:b0:
1b:f3:5e:9c:bf:91:92:20:f5:ee:a9:ee:0c:66:99:ec:fb:91:
aa:45:97:2b:65:c5:e3:d3:49:24:90:bb:c1:e6:34:95:77:d4:
d9:32:d5:56:3d:71:bc:52:35:59:1e:0a:69:7f:d8:8d:03:38:
d1:2d:70:e7:45:f3:ad:36:8f:a7:2b:d7:80:96:ec:02:cd:81:
39:7d:62:9a:8a:e7:29:f3:e9:b9:40:ec:1e:05:a1:ed:e3:2e:
56:30:b2:59:8f:11:76:b1:0c:0d:d4:59:16:cc:aa:56:4e:da:
73:14:47:e0:59:34:d9:05:44:7c:87:0c:e3:26:e0:9e:5e:9b:
4c:52:66:2a:86:bd:00:02:7a:32:14:0f:9b:a6:44:bc:44:4f:
1a:54:5e:d0:f3:a8:6d:78:b8:87:d1:11:b7:0e:57:f5:c6:60:
fa:d3:e2:1c:33:1f:ef:07:1e:4a:2f:ee:c2:24:e1:2f:48:df:
56:9f:d4:e5:02:7a:d9:95:da:a9:f3:fb:68:75:87:19:8d:13:
d8:d9:f8:ce:a0:16:29:1c:3a:60:f9:06:62:f2:23:7d:8a:eb:
52:5c:26:28:bc:9a:12:2c:58:2c:59:ab:91:27:30:39:dc:27:
c4:45:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:26 2025 by rpki-client