Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier: 9FSIVxnuPDkGFRUzSf60BrPOduZaY/TlRZl1CX45lIo=
Subject key identifier: BF:17:A9:CF:54:49:01:F0:3C:56:7A:11:8F:88:7C:E3:11:20:7C:B8
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial: 0194BD4E3ADF09410ED2E8932DB72DB823FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: SgM8GiijB0U4WPAxAQ2UHmUv2EXL/RAX4Bbw0p///PE=)
2: NtOWsHokBD2D-h9w2vIY6AqcxW0.roa (hash: NgvfZzRezTm/iHnWAmu436qovNykwseNE0VLXLqNwzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3a:df:09:41:0e:d2:e8:93:2d:b7:2d:b8:23:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=bf17a9cf544901f03c567a118f887ce311207cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:6b:94:5b:36:f9:a6:28:7a:0d:42:16:48:
8b:6b:b5:30:8f:0b:fd:c8:cf:d1:d0:fe:0a:2c:53:
c4:c7:5d:81:8f:15:f5:bc:88:46:34:a0:89:52:54:
90:b2:59:4f:0e:9c:60:63:31:46:9c:a0:f6:2f:a9:
c1:70:8a:17:f0:13:09:53:0b:bc:2b:07:a7:e8:7d:
c1:6a:b9:6d:25:be:bc:ec:57:d9:72:2a:86:5b:95:
2e:ac:2d:94:20:11:89:db:d7:14:b9:b2:b1:9e:41:
4f:ed:91:d7:97:13:d3:5f:30:7e:91:4e:5f:2a:68:
62:fc:99:8a:b5:33:70:9f:ea:c7:60:34:59:3a:4d:
fc:09:d5:74:1e:2c:bc:5b:7e:60:dd:29:f4:93:fe:
73:38:08:dd:1e:43:9a:f5:44:08:73:77:cd:4d:60:
d2:68:f4:10:1c:87:12:28:3e:0f:70:b3:d6:d7:ee:
28:ad:a9:94:39:7c:75:68:09:00:60:4d:08:8d:f2:
ab:36:6c:04:e3:06:56:22:69:ae:19:7a:5e:fe:a7:
9e:43:b5:51:36:2e:e4:38:57:47:94:03:f9:68:27:
c9:37:75:1a:cf:6e:51:2d:70:34:5d:67:f6:64:bf:
61:46:26:41:79:b4:06:57:b2:d7:a8:4d:89:ef:45:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:A9:CF:54:49:01:F0:3C:56:7A:11:8F:88:7C:E3:11:20:7C:B8
X509v3 Authority Key Identifier:
keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:75:44:68:07:5b:fd:b5:64:26:bc:63:6e:e6:28:fc:2a:71:
45:63:b7:6f:73:e4:a0:e3:00:f1:37:ee:c8:92:2c:7b:26:2f:
bc:bf:08:f8:8b:3c:f8:43:e2:17:80:48:b4:ea:cb:c8:49:4a:
26:a4:1d:5a:f2:5f:cd:12:b7:e3:65:2b:79:69:a2:e6:44:fa:
02:c6:a1:d0:0d:a2:b6:45:74:c0:2f:06:1c:39:6d:64:9e:8c:
0c:fa:1a:90:31:14:d9:76:d5:68:0c:85:b4:2e:e0:c7:fd:d7:
e0:eb:7b:84:a9:9d:51:bb:18:b9:2f:c5:5c:a3:1f:11:1e:c8:
bc:4c:fa:2f:a1:1a:bc:8d:a1:97:60:eb:d8:fe:36:ce:db:fc:
c0:ef:e2:f2:64:52:e6:7c:2d:66:bf:73:ee:80:a5:9c:5a:9a:
aa:db:50:d7:5f:5f:93:dd:f6:88:db:61:15:10:05:8e:5b:fc:
2c:bc:0a:ed:8e:20:3c:e8:b1:1e:82:49:45:75:cc:5e:47:cc:
c8:c0:1e:96:70:9e:6c:ec:46:dd:e9:85:1b:6c:ab:39:60:4f:
77:50:77:d7:a2:85:43:0c:e0:ad:26:52:07:81:d2:f7:93:01:
28:e1:51:df:b0:b8:4d:bd:c7:59:67:4d:b5:b2:6e:43:54:f9:
89:34:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:39 2025 by rpki-client