Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: vsOJKTSsZ56/YTcuFruclaxN3GNlgkxUsor8RCo7t88=
Subject key identifier: BA:B5:7C:C7:74:03:4F:DA:C2:06:75:4B:A5:78:99:B4:E0:67:14:6B
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 0194BC0509A3C339C40BBDAA2A2B39CCA624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: 4/gJviqT86NMmPDU0INCeeXVeeGy5cL918R3cp365iY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:a3:c3:39:c4:0b:bd:aa:2a:2b:39:cc:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=bab57cc774034fdac206754ba57899b4e067146b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:2f:5c:6a:59:48:62:2d:82:93:e4:13:b2:
ac:b5:3d:4e:46:e6:ec:1b:65:33:f5:28:92:b0:08:
07:b0:b5:da:de:ea:6d:26:4e:43:80:44:4f:51:2d:
6e:4d:34:77:6b:91:c1:c9:66:9f:fa:ec:17:ab:d3:
0a:9a:a9:45:2b:ee:51:93:ea:af:84:1f:c0:0f:39:
15:c5:60:5a:21:f1:96:c9:6f:db:f7:5a:8c:af:83:
ac:08:ea:76:e9:e3:68:06:f5:a4:da:fd:da:21:47:
bd:c6:d3:af:18:41:42:aa:eb:35:d2:25:d8:f6:00:
7f:08:2a:32:bb:68:21:2b:e2:84:49:99:e1:98:df:
78:e3:67:4b:05:29:11:ee:3e:08:82:ba:9c:46:73:
2c:38:ac:98:55:6b:d9:13:eb:86:45:84:2f:bc:fe:
5a:f4:e0:5a:70:38:61:f1:c7:11:7a:5d:ea:39:6d:
a9:34:5e:f7:c5:cc:1d:f2:06:49:72:6b:32:8d:5f:
b5:df:cb:1d:76:21:db:92:cf:46:23:00:fe:55:6a:
ca:06:57:ca:94:63:ba:0c:76:74:7e:83:c8:84:7e:
59:82:1e:6a:69:63:63:7f:97:9e:4d:e0:7d:c0:ca:
66:c2:9e:32:18:47:73:e5:b4:86:37:70:3d:d9:39:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B5:7C:C7:74:03:4F:DA:C2:06:75:4B:A5:78:99:B4:E0:67:14:6B
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ff:8b:26:48:10:e1:bd:67:8b:44:9f:5d:40:89:f2:51:2a:
55:8b:f9:2f:c6:b5:9c:6a:c8:11:f8:53:21:52:46:3a:d7:b5:
3f:c8:21:9c:4a:45:a8:31:05:54:1a:dc:39:78:fb:26:d6:76:
ec:de:6c:8a:94:65:56:ca:5a:22:08:76:8a:25:70:94:51:ad:
44:9c:50:5b:b5:25:c7:30:cb:0b:9f:4e:bb:c8:f4:d6:c0:f2:
12:b1:6a:ea:58:fd:a1:76:27:fb:8f:e3:f8:c6:ee:1c:54:8d:
f3:a6:42:c2:22:d6:69:9e:6c:f9:b2:0b:72:49:96:d6:74:f8:
19:43:7d:dc:26:ec:f2:f1:a4:50:19:c7:7d:3e:5e:dd:63:89:
ba:66:f6:a8:dc:0c:6d:51:14:f9:a4:22:5c:cd:63:46:78:7d:
27:02:31:ef:e5:f4:da:9a:e5:4b:fa:2f:ee:e9:ac:61:c4:8a:
46:14:bc:53:b4:8a:e2:c0:c2:8f:55:d7:68:2b:1d:83:c8:fa:
be:a1:5c:48:f8:16:a6:f6:ce:a1:bb:5f:ee:0a:b9:d8:41:a5:
29:85:26:53:2c:03:01:c9:71:17:ce:61:d5:1c:c6:92:e0:23:
43:dd:83:a9:06:87:e3:25:a0:32:86:87:c8:9a:6c:4a:2e:25:
30:90:48:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:50 2025 by rpki-client