Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: GVp3KbYqg574OtNvHpAP3rCoOlmiMHxcfYzkS6rgolw=
Subject key identifier: 94:EF:80:90:0C:FB:06:28:1C:D9:22:45:D7:D6:57:20:9A:CB:C5:9E
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 0194BD17E256F59202395DACB732C9FA3168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 7B
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: DUxrYgahHZNd4VhdmXjmZmBs/eQmyZbf+D1ARv/GgiY=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:56:f5:92:02:39:5d:ac:b7:32:c9:fa:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=94ef80900cfb06281cd92245d7d657209acbc59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:b5:fc:6e:2c:14:32:a5:f8:af:41:bd:7a:
f6:da:1f:c5:d1:3d:dc:a0:cd:55:42:ab:15:b5:67:
e3:86:6b:17:cc:a0:0b:e3:6a:c6:1b:ea:8a:f4:57:
c2:ff:61:72:aa:dc:7c:22:b5:23:cc:b2:4e:5d:59:
26:d1:11:e1:c9:4a:20:d7:7b:d5:fa:e2:b1:87:cf:
c2:40:84:0a:92:08:4e:45:8d:d9:93:df:c0:ff:64:
bf:13:79:63:b2:50:cb:9c:69:af:7b:6c:7e:f9:df:
55:ff:6a:7e:ab:8a:e5:93:2e:64:59:0d:5e:a9:0a:
c9:6c:2b:da:b0:4a:06:11:0b:eb:de:41:07:5f:89:
48:27:97:6a:d5:14:2a:09:33:17:e7:c2:30:ec:e4:
9a:19:bd:ab:ac:c0:92:20:5e:2e:2c:22:29:a7:55:
95:9f:22:40:94:3d:0b:c0:b7:f6:07:0b:80:a9:c2:
4d:f0:52:ec:94:9f:06:fc:87:ee:31:55:f9:a1:35:
ba:82:b1:5e:70:3a:cf:5b:40:70:7c:80:ea:7b:c9:
28:50:b1:88:91:4b:b5:89:7f:a1:68:fe:0f:b4:c3:
57:0a:a3:ab:0d:eb:2e:69:c0:90:94:d9:7a:e1:c7:
6e:d0:e9:1f:92:e4:31:fd:18:67:99:a2:9d:38:af:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:80:90:0C:FB:06:28:1C:D9:22:45:D7:D6:57:20:9A:CB:C5:9E
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:19:f9:64:71:9a:a2:e5:ef:7e:32:d4:8b:6b:3e:fc:5a:d7:
58:89:ef:fa:2f:be:1b:be:86:fb:7c:e1:48:37:6c:bf:5b:03:
f3:d7:46:2e:b8:4f:55:5a:5c:31:1b:c4:a8:07:b0:69:8e:e3:
27:46:2b:c6:43:2a:13:fd:27:48:90:54:f4:9c:dc:66:2b:da:
24:0c:7f:0d:2e:40:f2:0a:d4:e6:43:0b:38:5a:70:86:76:98:
50:fd:17:66:3e:db:39:a2:17:ec:94:15:dc:dd:d2:96:87:71:
4a:88:1b:cf:32:cd:5d:5b:89:1f:de:b9:6f:09:24:fa:ec:02:
07:2c:99:c9:10:6b:d7:a2:ba:f4:3b:b1:df:a5:15:86:a2:60:
70:5c:b4:47:cc:fe:72:d0:95:ca:84:f2:1e:61:eb:b1:7f:c0:
91:5a:46:39:8b:d3:f0:45:aa:eb:c6:e9:30:d3:47:3d:a1:30:
78:ad:f2:30:86:c4:ac:ff:41:d0:d8:80:97:f9:44:8c:39:40:
69:4e:77:21:84:18:17:ee:d3:59:f5:e5:09:ab:b1:42:c7:35:
88:78:73:65:5c:3c:87:ed:8c:5a:3f:bc:75:68:c7:b2:7e:70:
6e:cf:3b:35:2b:08:89:76:e3:fa:75:ab:7a:38:37:b7:bf:30:
c9:c7:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:35 2025 by rpki-client