Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.mft
File: 7MVdf2onB-fnCp5FO0l9EIJbsmw.mft (raw, json)
Hash identifier: e5druYa40n83vOK/3ORDUIaR/j9twOhe3yYyNOsojlw=
Subject key identifier: D1:94:5B:A4:B6:D2:4D:E6:D7:49:9B:C0:E2:FB:BF:67:5D:9A:97:1A
Authority key identifier: EC:C5:5D:7F:6A:27:07:E7:E7:0A:9E:45:3B:49:7D:10:82:5B:B2:6C
Certificate issuer: /CN=ecc55d7f6a2707e7e70a9e453b497d10825bb26c
Certificate serial: 0194BBCEBD67976CEF7934FFFEA7ED141AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MVdf2onB-fnCp5FO0l9EIJbsmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.mft
Manifest number: 057C
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: 7MVdf2onB-fnCp5FO0l9EIJbsmw.crl (hash: O9YsFYlNZ6+vXpDoIWCbSnrQsOKgiMA7kq5/KhIehKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:67:97:6c:ef:79:34:ff:fe:a7:ed:14:1a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc55d7f6a2707e7e70a9e453b497d10825bb26c
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=d1945ba4b6d24de6d7499bc0e2fbbf675d9a971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:7d:04:10:da:c8:0f:cc:57:d0:d3:f5:ad:
d1:c1:e3:1e:d9:cb:1e:a6:98:40:53:fe:cc:74:a0:
d3:ea:1b:a6:87:1a:a6:63:f0:d1:3c:42:ec:c3:61:
f6:8e:6c:c5:2b:15:07:20:ae:18:d4:7c:c4:19:5b:
c2:79:4d:cb:01:30:77:4b:c9:06:1a:d1:1e:38:90:
2b:35:ff:7f:ff:32:17:0b:cb:23:b8:9f:54:d1:80:
62:54:df:ad:c7:49:fe:62:c8:9c:0d:c6:cc:9b:d9:
c4:8a:54:94:3a:4e:66:51:ee:c2:47:80:0d:30:ed:
96:90:3f:ec:6b:35:50:85:ad:85:cf:90:1f:f8:ee:
03:2b:85:a4:52:e7:a6:0a:0b:39:08:de:86:ce:c5:
aa:5b:67:32:b2:b3:a2:ca:bb:b2:46:d5:51:53:fc:
94:09:ac:b7:d0:a3:c2:52:c8:12:74:c6:32:ef:36:
ee:c1:db:b5:2b:b4:16:4c:40:d7:21:cb:10:bd:d2:
c7:1c:aa:b6:6d:6b:d5:b2:2d:6d:52:59:e3:96:2c:
75:bb:ae:74:f8:1d:6e:2f:9b:09:d8:e1:95:97:f7:
20:23:97:f4:d9:be:2c:1c:bc:04:86:ee:45:9c:17:
6f:49:15:a1:ca:6d:5f:0c:9c:62:e5:bb:d3:3c:55:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:5B:A4:B6:D2:4D:E6:D7:49:9B:C0:E2:FB:BF:67:5D:9A:97:1A
X509v3 Authority Key Identifier:
keyid:EC:C5:5D:7F:6A:27:07:E7:E7:0A:9E:45:3B:49:7D:10:82:5B:B2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MVdf2onB-fnCp5FO0l9EIJbsmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:b1:50:50:a2:4c:88:3d:a8:d4:d7:c8:54:ad:de:0e:db:
54:38:4b:30:10:76:c5:e5:c6:b6:db:19:ae:2c:18:d4:2d:af:
a9:42:3c:38:ba:29:6c:6d:ab:6b:1f:f0:4b:da:12:b1:56:cb:
ff:5d:55:ad:9e:e1:74:fa:be:89:26:ce:10:98:d8:22:c9:7f:
11:22:53:53:9e:3e:5f:c4:f0:c4:f2:bd:bc:34:a4:3b:29:15:
16:09:91:32:34:4a:0f:59:34:c6:ae:a3:52:7c:5f:73:ef:89:
14:8f:0d:b0:02:a5:aa:ef:5c:87:1d:d2:45:dc:c3:aa:4e:8e:
b9:92:91:4e:73:0c:e7:0a:32:e8:67:da:f0:e2:76:63:c7:18:
dd:dc:61:a8:06:c9:ff:af:dd:88:0c:8d:fc:81:69:d1:23:e5:
11:3a:24:2f:e4:17:31:9c:8c:99:9a:f0:50:ef:a6:7f:69:44:
d0:10:9c:53:91:ab:61:9a:e1:eb:24:39:23:d2:03:f3:b0:00:
ea:ee:ad:87:12:e2:39:2c:58:33:73:da:0b:f0:88:42:96:a3:
82:84:b0:11:f4:18:e4:9e:af:27:84:bd:23:31:a4:8f:11:68:
f3:11:e8:7b:56:7b:d7:5c:f9:0f:c7:db:df:2c:e8:99:cb:bc:
93:97:8d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:11 2025 by rpki-client