Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier: 3SkvGyq30A/sgeCN8cbPLHZsY1qhaAbcF3FpZr36neY=
Subject key identifier: 77:FC:6D:28:F4:49:8A:EA:72:7C:D4:ED:58:47:FE:AE:72:90:66:1C
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial: 0194BBCDD394245AD6DD266BA8F017433A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: hs59y1nLQ1iSEAOIIw6xrXVsjkKy1oOCHkGhXgAJdpg=)
2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d3:94:24:5a:d6:dd:26:6b:a8:f0:17:43:3a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=77fc6d28f4498aea727cd4ed5847feae7290661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:e7:66:e1:8d:70:23:fe:56:6d:9b:d1:99:
12:3f:bc:43:3e:07:61:5d:f6:ee:6a:ac:e2:81:b7:
76:60:b5:60:30:70:36:ea:15:d2:dd:7b:b6:ea:6e:
a6:11:9e:b3:26:ab:19:55:a9:b7:62:d2:40:fd:53:
5c:9f:0d:43:b8:27:d3:a7:d1:9e:80:fe:7e:62:64:
4d:1f:39:94:72:c0:e5:c4:61:66:78:30:15:27:ca:
1a:d2:51:2c:6b:d1:7d:a2:a0:74:f8:5a:23:3b:b7:
da:83:e9:6e:d6:53:78:76:50:fb:7f:9f:b3:f4:52:
2d:db:08:25:70:74:fb:81:cf:a3:f6:af:2a:57:c5:
bf:f6:fa:ac:61:a9:7d:5d:ca:20:0d:e5:d3:6a:62:
df:01:96:cb:77:bd:3f:d1:eb:33:dd:9f:88:4e:0f:
8d:3c:ed:8f:b9:92:76:04:5c:eb:ff:60:c0:31:d6:
56:35:8b:27:22:42:ef:6d:36:f2:d2:de:15:53:9d:
e4:59:a9:01:75:b0:72:20:f9:2a:6b:17:7c:1c:2d:
4e:9a:5b:2b:88:e9:0a:02:b2:6f:b3:16:79:a7:1a:
28:bd:58:ac:fd:b0:98:6c:8a:0d:c0:6d:3b:ec:68:
c9:3a:00:3e:e0:e2:25:7b:fb:68:e3:79:3a:76:18:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FC:6D:28:F4:49:8A:EA:72:7C:D4:ED:58:47:FE:AE:72:90:66:1C
X509v3 Authority Key Identifier:
keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a4:c0:32:23:d5:c3:f8:8f:91:61:25:0c:a1:29:f8:ab:4f:
bb:43:77:2b:82:89:f6:be:9d:e8:d5:a4:ce:8d:25:8b:b0:ed:
11:2d:fb:00:aa:d5:eb:d6:0b:8f:2b:a3:9d:5d:06:ee:ce:4f:
c8:e4:f1:da:e5:ed:73:a4:c3:6e:1c:dd:d2:e0:ec:84:19:2b:
f4:02:19:cc:a5:61:11:4b:ff:ed:ff:5e:22:15:05:ac:c5:8d:
39:0b:0e:87:f1:32:6f:14:11:2b:37:f9:9b:da:77:e2:a6:4b:
83:90:13:a4:0a:40:a6:5d:dc:18:52:89:17:cf:6f:36:25:b6:
c7:91:71:0a:3d:52:dc:58:f9:b8:db:a9:7d:5f:de:3c:78:15:
bf:85:d4:51:00:70:2f:94:e0:20:34:6d:9b:9a:de:23:57:8a:
82:db:ca:2a:b1:ab:3d:15:62:39:45:97:37:10:26:7f:7e:88:
88:4a:3d:50:02:f2:2b:98:3a:a5:15:f3:3d:12:5b:0e:ef:0d:
a7:23:ba:b2:24:a1:73:96:56:8d:56:c8:fc:a9:4c:4b:c2:98:
8a:4c:e4:ac:54:d0:e8:0a:f3:34:01:46:4a:95:ff:94:73:09:
60:48:7e:b5:fd:a8:b8:9d:74:38:b6:00:4d:15:fd:7c:35:b9:
c5:82:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:17 2025 by rpki-client