Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
File: foYqjKWsvWxd_CQSbDOqCpTg4fI.mft (raw, json)
Hash identifier: m99q0jvee7sMCiDh9sc1947qBa5aXtlvg3rj+WpGpRE=
Subject key identifier: A1:64:43:AC:6D:A4:FF:86:7D:C9:56:91:6A:67:8D:1B:EC:0F:50:B3
Authority key identifier: 7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
Certificate issuer: /CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Certificate serial: 0194BCA981B972C296E468BABA7F1949ACEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: D4wCbjO_RP9FBGbgF9yMu8ejHEk.roa (hash: t1nErlMSEECwXjWvAJkKfIdfWAr8lZ7TpdgAigsb7Ao=)
2: foYqjKWsvWxd_CQSbDOqCpTg4fI.crl (hash: DQufXUSetTXwWw/o9se4JZIKX/zwg1jb9/itEzZWDXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:b9:72:c2:96:e4:68:ba:ba:7f:19:49:ac:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=a16443ac6da4ff867dc956916a678d1bec0f50b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:47:94:bb:ac:fd:e0:dd:ef:57:23:d2:23:
c6:b7:f2:56:03:6e:38:2b:7d:af:bf:e9:78:c2:24:
67:af:c9:71:57:8c:df:69:ae:b6:64:30:3b:e2:b6:
fd:f8:80:8a:bd:2c:fe:fd:be:86:f1:38:4c:24:34:
5f:c9:0f:19:49:09:64:1d:a0:8b:ca:7d:53:de:63:
5c:66:09:b0:06:41:59:8c:7d:24:a4:58:f3:6f:0f:
30:8a:99:d8:b0:d3:7c:e4:41:1c:91:52:fa:88:f5:
24:14:4e:fb:56:45:b8:86:1b:de:25:85:bb:4e:c1:
94:9b:bc:9d:f4:ab:99:b6:71:1a:64:7a:18:08:ca:
ba:cd:12:70:78:34:0f:2f:12:79:fc:ca:7c:58:57:
8d:be:d1:52:ce:2b:31:a6:86:6f:42:6b:ec:0a:b3:
85:48:57:6b:87:77:6b:e8:ea:8b:44:1e:32:65:5b:
6e:08:83:f7:bd:99:33:44:8b:46:9f:a2:ee:37:52:
a3:07:fb:8a:6c:5a:ec:bb:5f:c4:1d:2c:06:71:2a:
09:8c:5f:38:d8:a7:2f:d3:32:75:61:2d:66:6e:9a:
06:f7:37:4d:e0:4d:5a:95:2b:be:e8:44:4a:56:80:
1a:26:1f:3f:44:37:9f:d2:69:a6:b1:4c:00:36:88:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:43:AC:6D:A4:FF:86:7D:C9:56:91:6A:67:8D:1B:EC:0F:50:B3
X509v3 Authority Key Identifier:
keyid:7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:17:d4:e4:53:a5:e5:63:3f:db:4e:e0:05:b5:a0:c1:1b:d1:
08:d6:d4:56:b8:f4:09:75:62:1b:84:29:ad:25:3b:92:fd:12:
cc:1c:1e:36:55:8f:bd:55:91:8c:74:48:b2:7c:66:e1:fa:25:
c1:39:44:21:9c:69:c9:f0:2c:ea:be:4b:92:25:0b:1a:45:83:
1a:4d:5f:b1:4e:10:cc:9d:c9:f2:66:ba:fc:bf:a5:e7:40:da:
0a:99:7f:a2:ca:40:a5:94:b6:e6:c4:dd:a6:7e:d8:17:5d:ae:
9e:09:48:4d:08:02:73:12:81:8d:d5:34:ef:55:92:b6:b9:dc:
a6:ee:0a:fa:20:e7:cc:c8:27:90:4e:93:3b:75:6d:8a:b0:56:
76:73:84:7e:80:27:ee:a4:2c:83:41:09:d7:7e:7a:cb:11:bc:
ac:a7:f8:16:c6:6a:78:d4:61:8e:5f:e0:95:d8:c7:23:10:1a:
21:b0:66:24:1f:97:f2:06:f1:1d:01:83:b1:3b:e4:5c:f3:53:
47:e9:10:18:fd:30:0a:df:6b:29:54:dd:86:56:eb:95:89:bd:
4a:ec:9e:9d:b5:c7:33:62:bf:6a:51:76:20:4b:24:90:fa:6f:
9a:41:9e:fc:e1:42:b8:15:bf:4d:16:5f:76:20:72:a5:15:33:
24:df:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:17 2025 by rpki-client