Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: eKjJuhZXmT0NpjaH26xAOmtz7JRfQmnyijDLIqSNC6U=
Subject key identifier: C7:B3:92:BD:27:08:AA:96:A0:87:F5:5F:03:F7:FE:D7:D9:FF:54:81
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 0194BD4EBA039DE1032635522CD9DE043C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 0317
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: vrVgaIde2uokQdqiP9VzEY4nUXJM2TPmnJikYwqmrAU=)
2: mQBN2-oU2oudork8oow4c77Beac.roa (hash: FsVN//20JFkmpyNtdeWnGtk0kBJNGpFrlCSP7YEmOqY=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ba:03:9d:e1:03:26:35:52:2c:d9:de:04:3c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=c7b392bd2708aa96a087f55f03f7fed7d9ff5481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:e4:fa:94:01:01:fd:bf:f0:fe:9f:83:a9:
75:fa:0e:55:8b:20:e6:31:c7:88:e7:8e:ed:0d:99:
f9:d5:5e:d0:fd:09:74:36:e4:4a:5b:63:56:50:e0:
25:b3:a9:0a:91:84:09:e5:9a:eb:9d:28:0f:20:ca:
52:89:86:c0:05:ca:05:28:6e:27:04:19:f6:6e:c2:
91:b5:07:54:99:e8:6c:6d:7e:25:54:18:57:fd:31:
b0:0f:c7:d0:fc:32:04:d2:9d:38:9f:ef:fa:2a:68:
7b:25:95:e0:49:28:37:7d:b5:66:9f:ad:fb:f5:7e:
86:a9:f8:0d:03:bc:b3:43:bc:7e:7f:e5:ee:3c:fd:
a6:a2:7f:a4:23:4d:a5:7f:4b:6e:b7:c8:d5:68:93:
4f:84:d4:42:c2:c6:85:74:5e:2e:a0:52:ad:0b:1c:
3b:de:68:0b:1b:e3:b6:6c:b2:2a:e2:aa:03:26:35:
49:ea:0e:6f:29:f5:dd:4c:4b:e1:22:04:1b:37:3f:
fe:33:06:72:ee:bb:af:a4:8f:d6:77:24:6a:de:f0:
b7:89:ff:ea:4e:ac:42:52:3a:dd:1b:79:0f:f1:7b:
2a:17:f9:b3:4e:3a:6c:15:94:2d:6f:9a:ce:1d:d9:
00:ee:f6:7e:f6:e8:0e:7a:68:66:56:0b:24:7e:78:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B3:92:BD:27:08:AA:96:A0:87:F5:5F:03:F7:FE:D7:D9:FF:54:81
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:93:45:30:ec:e3:e1:eb:0c:49:7d:e2:42:da:8e:55:59:c1:
71:d0:f3:cc:3d:8e:23:99:ce:b7:c5:e8:7d:3c:46:aa:49:4c:
90:b0:1c:1d:08:ed:95:a0:92:15:58:15:02:b3:4f:56:67:4d:
ef:3b:68:46:7a:e7:66:90:ab:da:67:ed:6d:1f:4d:8f:40:9c:
27:2a:8b:a8:85:a6:7f:eb:10:b5:08:99:e1:3d:5d:2c:ea:8d:
43:8e:5d:dc:ca:ff:92:d1:d0:fe:a7:d0:64:c9:54:1b:28:ba:
0a:53:50:82:0d:97:ec:bf:9f:4d:f9:20:e2:4f:58:b4:8e:ab:
6b:ea:f6:22:54:0f:6b:89:f6:9a:e7:17:c0:1c:2e:93:a0:41:
5f:da:7d:cb:b1:07:81:fb:da:12:bb:b0:f8:c4:48:34:21:21:
c4:c6:6f:8c:ce:a6:87:2e:4a:2a:7e:00:1c:e1:0e:79:1c:9e:
ac:26:dd:36:37:55:45:03:ff:0a:6b:93:a3:04:4f:19:1a:eb:
13:18:da:a8:bf:8b:a2:24:4e:7b:4f:5a:7a:e8:d8:29:a9:46:
18:94:5c:01:f3:14:00:ef:d5:f1:db:b6:12:fe:91:0b:3f:e6:
6b:2a:23:17:2f:88:48:ed:5d:00:aa:f0:00:e8:c0:43:69:6f:
c7:8d:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:20 2025 by rpki-client