Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: M8to6f0xoRDbvmpK2qBBahUniwinpwaCpp7kRRROzII=
Subject key identifier: BB:B3:97:A1:CA:CF:ED:AF:1C:10:8C:B7:CD:FA:38:35:11:0D:00:EF
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 0194BCA9E593C6CFFA11DACA6264D1BFADD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 73
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: RqA0jSRxiIiEL8Bl8DYSVGXlkU2o0t61KodKXcBinaA=)
2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e5:93:c6:cf:fa:11:da:ca:62:64:d1:bf:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=bbb397a1cacfedaf1c108cb7cdfa3835110d00ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:3b:95:3a:a4:7a:43:02:6d:a7:f8:cd:19:
de:8d:22:fe:f5:d8:84:31:19:d5:26:d6:aa:6a:a6:
07:db:4d:b3:15:8c:01:49:e3:96:83:81:8a:a0:42:
94:82:b0:a8:59:6e:00:82:96:85:22:63:63:65:07:
d6:64:9e:e2:1e:18:fe:49:20:43:69:81:bd:1a:a3:
cf:f2:f7:b4:a9:24:6f:fe:04:0f:95:53:6d:c0:14:
14:90:64:38:84:b2:34:9c:bb:dd:82:45:55:09:cc:
85:b3:0c:73:de:be:ac:c6:bd:a7:68:ca:67:ec:4d:
a2:29:23:e7:b1:39:69:9f:e2:89:d9:14:97:0e:37:
41:3d:e1:ac:ab:cf:a8:2b:45:ec:c8:bb:3a:19:5e:
72:2a:f4:f8:0b:73:54:9c:b6:9b:9d:2a:2b:81:4b:
d1:44:96:ef:95:f1:36:76:38:35:52:e3:db:90:6e:
54:51:46:af:8a:56:72:0d:cd:40:d3:b3:84:7a:2a:
94:40:b5:10:37:bc:87:f5:63:da:20:b6:11:4e:89:
ff:55:ad:c4:79:33:44:06:64:82:61:be:4c:02:b0:
2d:02:6f:30:fa:e9:0e:97:83:4d:bd:ab:ce:7d:d2:
b8:30:ab:e0:69:3d:7f:d8:2a:c6:fb:a4:5b:6a:1d:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B3:97:A1:CA:CF:ED:AF:1C:10:8C:B7:CD:FA:38:35:11:0D:00:EF
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b7:45:f5:75:21:c2:1b:54:e3:c8:9d:74:74:b5:24:87:fe:
ab:20:6c:89:8d:7b:43:1d:83:be:8e:d1:c1:7c:56:da:45:c5:
99:b3:bd:3a:09:c6:d4:bf:cc:24:24:01:5d:51:05:e4:c6:0a:
27:70:3f:31:0b:12:19:3f:96:51:54:37:08:53:32:2a:79:77:
35:57:36:49:c3:cc:04:26:1f:66:fb:f1:2d:d9:26:16:c1:90:
62:e4:c1:b7:ab:bd:96:a9:f9:ac:9b:e8:82:bd:3c:1f:f3:43:
12:0c:cb:f1:3c:68:16:0b:64:91:da:4f:9b:bd:3c:ce:05:6c:
c6:65:a5:78:0f:89:c8:49:9a:fd:0f:fb:4d:c3:5c:a5:dd:2f:
35:5a:f7:3f:11:59:b0:5f:16:72:e9:ae:12:5b:bd:dc:43:24:
27:37:70:04:c1:20:b5:44:f5:33:78:f8:7c:f5:11:b6:4b:14:
50:e4:0f:e3:3a:3b:6e:9c:ea:17:da:34:d9:68:84:22:9e:ea:
23:63:e5:5d:0c:ac:78:d3:37:11:f8:6f:ca:ef:13:a2:85:59:
6a:85:ab:e9:d8:b9:48:c8:0d:2d:66:3b:f3:ee:d8:91:71:e8:
9a:5f:ad:ff:52:7d:a5:5a:65:27:9e:ce:8b:df:32:68:16:35:
8d:e7:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:38 2025 by rpki-client