Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: fkCHW3iNGhEfqhdBM8io6v2FQF18fnMYao1v+M+bunI=
Subject key identifier: 31:5C:FD:C8:7C:45:F0:74:96:9C:31:C8:D6:48:9A:05:5F:F7:83:07
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 0194BCA973E2F5D21D04012C50B1419FBA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: plz11uDoewh3ECO1hAoDYJs5BRreMRdedOYaQrS5OkE=)
2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:e2:f5:d2:1d:04:01:2c:50:b1:41:9f:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=315cfdc87c45f074969c31c8d6489a055ff78307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:5a:29:ab:3b:cb:0f:d7:55:8d:f5:e4:ac:
da:f2:70:74:a6:fe:9b:c2:b7:78:52:f1:c5:71:a8:
77:fb:27:f5:ba:d4:2e:f1:e7:37:2c:86:cb:1d:35:
c8:0c:c1:eb:92:61:3f:a0:87:0b:ad:48:1b:fe:51:
0d:ed:4e:01:a7:8c:97:7c:43:96:d0:06:31:d6:fe:
20:70:28:f1:07:81:f1:c4:5b:b0:cc:76:2e:45:2b:
f7:7e:60:e7:e0:0f:cb:7e:39:65:80:23:6c:59:f7:
f4:94:4f:e7:7f:00:63:71:d9:2f:cc:14:60:3a:38:
76:e1:04:cd:c7:d2:54:fa:e7:61:89:99:79:88:f9:
47:e5:9b:4c:a3:0f:1d:d6:21:c7:a2:40:da:f8:5f:
fd:1c:f4:ae:2e:18:f0:95:b2:1d:87:e9:f7:f1:b4:
c2:3c:a9:b0:fb:25:64:49:5a:16:b3:34:c2:e5:24:
fd:d2:55:cf:34:2d:8f:e7:d9:81:3c:39:63:07:d9:
23:df:4a:ae:47:43:19:1d:6e:8d:92:f1:e3:ea:02:
36:69:ba:8d:52:8b:6e:11:39:3c:a7:fc:c6:4c:57:
76:98:67:c9:10:e9:32:86:bc:c6:9d:d1:d8:a5:65:
b5:95:89:90:dd:0b:97:82:f0:e5:52:db:56:68:69:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5C:FD:C8:7C:45:F0:74:96:9C:31:C8:D6:48:9A:05:5F:F7:83:07
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4b:82:3e:ff:0d:14:31:98:e9:72:bd:86:6a:49:66:d9:2c:
3b:e3:7e:4e:7f:0c:5e:cb:6f:bf:6e:d3:c3:a6:a3:3a:30:ea:
30:52:7c:bd:4f:c6:0d:27:5e:7f:92:ed:bd:78:2b:1d:dc:18:
bb:44:b0:17:42:c1:08:5d:4e:91:65:f8:86:d7:11:d1:0a:c8:
b4:0d:d7:ff:e5:d9:15:46:c9:a2:d6:d6:60:ec:21:aa:57:38:
67:94:05:e4:34:4b:d2:c2:b2:fd:43:57:0b:a0:8b:6a:19:bf:
89:fa:42:7f:20:9b:f3:ee:0c:39:eb:9d:6f:ca:c8:67:05:ba:
89:a2:07:8e:78:0c:d3:a6:71:a3:10:be:35:80:0c:c7:e9:0f:
83:c2:11:0a:03:06:0c:87:e4:45:b5:80:55:bc:5c:6f:e5:75:
f1:b0:45:74:fd:c8:78:6d:44:55:f9:86:46:c7:f7:9f:60:55:
f3:64:98:82:1f:01:97:ac:e1:14:14:35:cc:85:c3:4d:72:03:
24:5a:99:af:26:4c:c6:8a:70:a9:7f:83:8d:42:66:ec:61:bf:
30:d5:78:2f:49:d9:09:4e:d7:6c:af:48:53:7b:2d:f1:be:9e:
a2:07:a0:25:26:1d:a4:21:f8:bd:9a:21:3d:ab:42:1f:32:83:
d7:54:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:15 2025 by rpki-client