Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: xoSykd5cMfMieqeQfa/I2FEOLWN7L2SrYsVbx5xwuJc=
Subject key identifier: 22:34:E2:51:E7:2E:1F:70:B8:92:63:4D:DA:18:5E:E3:92:0B:CE:63
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 0194BCE0B730B95499AA671463E9A6334701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: Xv/lpcKKulRj34/O3sDuW99oSKuQ3wlLg9p9H+jqJKI=)
2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:30:b9:54:99:aa:67:14:63:e9:a6:33:47:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=2234e251e72e1f70b892634dda185ee3920bce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:68:fc:38:f4:fb:e7:62:7b:81:9f:6d:ed:
de:ac:52:10:30:b5:52:62:6e:d5:4e:07:48:ff:b4:
3f:62:8a:1a:1d:ef:55:90:61:48:2f:ff:f6:b1:41:
e8:e4:c9:92:79:fa:99:34:d9:39:0f:14:7c:b6:ec:
c0:4f:f3:ca:13:81:8d:9b:37:f0:81:93:75:b2:6b:
c3:1d:69:fe:ec:e5:13:c8:ab:2c:8c:df:4d:92:fa:
3a:a2:67:c7:c0:cc:7c:2e:5d:48:ba:31:5a:83:b6:
4e:87:11:9a:ce:7e:66:f8:29:d5:e9:13:57:c4:ef:
b6:95:2c:04:b8:9b:8b:f8:3f:25:66:b2:d9:1f:e2:
09:a9:d0:e5:75:84:ee:dc:81:fa:79:25:3d:9d:66:
0a:71:a9:50:79:19:da:ad:cd:c1:94:40:d8:d9:14:
5d:f0:37:fc:af:ba:55:56:9f:86:a8:ad:28:28:ef:
1a:79:0a:07:5f:8b:5d:0e:4d:71:b6:e6:ac:4c:bf:
41:9f:1a:46:4f:02:6c:3b:8a:82:e2:f4:93:b8:af:
93:8a:50:9c:4b:4e:f4:a2:6b:78:b2:0f:5f:39:d9:
62:33:c6:12:70:9f:8a:aa:6d:9f:92:4f:e9:5e:37:
1c:8f:e1:c2:93:ea:bd:4d:cf:8d:aa:e7:12:a9:43:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:34:E2:51:E7:2E:1F:70:B8:92:63:4D:DA:18:5E:E3:92:0B:CE:63
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6a:ef:ee:58:86:69:6d:d8:57:68:fa:b4:2d:5e:2c:85:77:
ab:b3:e0:8b:0b:19:f7:eb:a8:e1:0f:75:10:63:40:3d:41:10:
b1:0c:be:94:f1:c2:e4:86:89:50:1d:84:2e:3f:20:cb:5d:ec:
16:5e:f6:c0:e6:57:84:c1:57:81:23:94:40:2c:8d:f6:e5:b2:
08:80:dd:8a:b6:48:0f:5e:b1:ee:6e:52:31:7f:26:1c:a1:90:
3a:f0:8d:a0:1c:b4:37:11:55:3b:ea:42:53:1c:32:81:b8:72:
15:fe:64:bc:42:8e:58:65:f9:e6:aa:b5:b2:4c:c7:19:6d:7c:
91:06:a5:9f:89:dc:31:ee:31:0e:34:ca:00:bc:0c:50:9a:70:
7f:65:2c:57:d7:25:1a:3e:05:a1:5e:25:ed:63:84:b6:7c:56:
94:30:e1:2c:d5:8d:30:b1:a7:8d:3a:bb:3b:10:10:4e:8e:1b:
52:f2:08:8f:b2:75:a8:25:58:67:ba:dc:95:d7:69:f9:52:c2:
94:6b:9b:3d:38:20:60:f9:1e:2f:81:e6:69:b5:fb:31:35:95:
1c:5d:aa:f1:d4:5c:34:dc:06:ce:91:1b:77:7d:78:17:34:a3:
4d:fd:af:6f:0e:c2:f8:af:8d:ad:4a:53:32:ce:14:fc:8e:34:
27:55:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:14 2025 by rpki-client