Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: df9TrHBHlLzqDX/PGP0sJrh9aPwciNlvwhOxCdpCxBQ=
Subject key identifier: 78:FB:96:D7:DA:89:5B:41:F4:71:8A:8B:D4:63:A0:15:A9:35:7F:A3
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 0194BCE07257AF72E9617EAAC315DB31C4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 0F69
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: pQqx5up7fXwWOLZnXALr1H2imNIhJQchl1zbtRFQ28w=)
3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:72:57:af:72:e9:61:7e:aa:c3:15:db:31:c4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=78fb96d7da895b41f4718a8bd463a015a9357fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:cc:fe:27:a0:3e:13:f8:5f:2d:43:45:99:
3e:75:e3:60:9c:83:8c:e3:cd:2a:d5:22:01:82:33:
6d:c7:2d:79:aa:cf:cf:21:ec:55:8b:65:c9:a4:60:
0c:07:35:3e:6a:9d:ee:e8:3e:f2:ba:0b:ac:ee:07:
1e:61:4a:b9:7a:53:5c:26:d9:c9:8b:57:38:23:03:
5a:a1:b8:4a:2f:41:1d:8e:95:35:79:11:4f:d7:5b:
1b:70:75:2f:72:33:0e:84:27:7e:e4:9b:5a:03:3c:
a3:30:92:af:10:34:ff:19:84:e8:cc:de:42:07:b8:
a5:c7:bc:74:bd:97:cd:55:72:e3:98:82:12:c5:cd:
a5:cd:9c:f0:d0:d3:ff:5b:74:e1:02:f2:d1:30:87:
84:63:6d:9d:6f:78:cb:d3:ef:44:5f:45:0f:56:71:
71:35:a1:6a:7d:7e:0c:35:0e:db:94:4e:86:78:2d:
b0:e7:3d:75:cc:a9:67:a6:be:9a:af:a1:53:10:fd:
b1:d3:d8:22:aa:95:b4:c4:4a:11:06:b3:ab:65:a8:
90:9f:70:0d:cb:63:dd:c4:fe:99:3f:d0:74:08:7b:
42:0b:58:e9:5d:2f:47:01:5d:03:aa:6a:e0:22:aa:
1d:ba:6a:22:77:e0:8b:78:d9:15:f2:b8:c0:47:0c:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FB:96:D7:DA:89:5B:41:F4:71:8A:8B:D4:63:A0:15:A9:35:7F:A3
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:2d:9a:96:e1:4a:d2:5e:0a:1c:53:8c:d3:2c:b2:3f:3e:
8f:1c:36:ac:aa:bf:29:38:26:97:f4:99:47:4c:fc:9a:16:1c:
c2:5d:55:5b:db:d6:2e:a6:4a:75:56:af:4d:68:74:8d:1f:56:
fe:ff:8e:20:c8:23:25:79:5c:45:8b:20:36:e3:75:79:aa:30:
ca:80:68:2d:3c:e0:a8:52:0a:f5:37:c4:38:5b:5a:5f:97:c8:
ba:f2:45:97:d6:96:9f:a5:f3:ed:8f:ee:74:da:16:16:a1:05:
8f:c4:bc:2c:df:30:cc:10:fd:7c:0c:b5:39:b3:f5:cb:52:5b:
4a:a8:0c:8e:cc:22:2e:73:67:ef:9c:09:a3:8c:e6:87:e0:c2:
48:19:17:c8:c1:e2:d7:bb:aa:71:c1:82:76:ce:21:e7:5e:94:
b7:16:ec:1a:13:45:40:67:25:41:10:61:c2:cf:74:40:98:cd:
71:9a:d0:0c:22:83:0e:22:2f:ed:b3:dc:0a:ee:47:9b:f9:fc:
02:29:b0:64:db:11:67:13:73:b4:1e:cf:92:7f:d7:ad:02:1f:
bf:93:17:9c:a5:31:ea:a2:7e:a0:f4:85:b3:b6:ac:bd:a4:e1:
f5:f8:20:68:58:0a:7c:ea:5e:c4:ac:d1:b9:bc:2b:e4:18:de:
6c:f9:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:05:25 2025 by rpki-client