Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: WH10WGt9E76FdPc1/238E9FXLXgm6RI/xNhUrCICdSU=
Subject key identifier: E2:FB:8C:62:9E:1B:D3:D7:50:D4:8D:37:7E:D1:57:DF:95:EE:EE:F9
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 0194BC04FF580011D23687E812FEB8F63F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 08DD
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=)
2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: 4nOlQQBMkzmYNeiHk6J+rZikh/g9zu0ubshL0QeRn48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:58:00:11:d2:36:87:e8:12:fe:b8:f6:3f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=e2fb8c629e1bd3d750d48d377ed157df95eeeef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:ae:76:ef:26:a0:8b:4d:9b:47:96:91:10:
cd:d0:45:70:0c:c1:5f:1a:79:7c:35:6b:ab:44:ff:
99:b9:40:79:39:cb:f8:87:01:85:23:76:b6:f8:7c:
32:4a:32:61:fb:36:85:db:a4:d6:0f:c8:38:e5:f7:
07:29:ad:50:7a:40:53:15:8d:f1:12:06:da:8d:6c:
63:b5:01:cd:71:7f:9a:3c:2a:ff:1f:e6:21:ee:8a:
f5:d0:7f:00:f3:71:d4:90:b9:00:f9:95:a5:6b:4c:
db:38:5c:fd:cc:c0:96:bd:88:30:eb:9c:d6:2a:19:
1b:6b:7c:1b:1b:13:84:40:a7:f8:0c:d5:e1:3e:c1:
fd:b6:8e:31:e8:ff:84:a4:07:17:0a:b9:3a:ee:73:
d8:ae:47:d1:91:ac:88:25:57:7c:5e:32:36:de:63:
5b:df:ce:15:69:bb:33:fb:db:89:96:b4:9e:a9:20:
56:3d:8b:46:90:42:db:5b:6e:fe:e8:69:40:d7:82:
0f:6c:53:97:08:39:75:dc:0f:3c:9e:0b:8b:ef:de:
5a:71:0b:85:6b:74:21:47:d6:cf:45:fa:8e:17:9e:
d0:22:b9:8c:8b:75:99:bb:44:0a:a0:33:2a:9e:ce:
ad:1a:02:57:fc:8f:3f:b5:76:0e:52:fe:66:36:48:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FB:8C:62:9E:1B:D3:D7:50:D4:8D:37:7E:D1:57:DF:95:EE:EE:F9
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:80:eb:cf:6c:d4:e1:f1:f3:11:90:c0:e5:cd:20:c2:42:94:
5e:e3:f5:47:6e:64:67:df:e7:f6:fe:d9:30:45:64:d6:53:c8:
be:8c:0a:49:c7:65:d8:0a:a4:dc:20:00:b6:55:e8:77:3e:59:
0c:0a:62:e5:60:a5:e2:4e:d7:94:d0:42:50:fa:8d:ca:f3:9d:
cd:1c:6c:07:5a:3a:93:0c:e4:97:3b:7a:3f:2f:7e:cd:64:ef:
f4:77:f6:61:91:a8:e5:85:18:86:79:e6:74:10:1f:14:ab:4a:
39:56:16:4e:1f:a4:11:5a:98:3a:76:e2:4c:90:a1:8f:68:6a:
61:45:0e:cb:c6:6f:15:0b:30:22:9b:41:fa:18:47:ce:95:14:
ba:e0:f1:fa:20:1f:a5:b3:33:15:c8:08:4b:2b:87:6d:a3:a9:
9a:36:6d:c1:78:3f:c8:32:da:e7:1e:21:20:be:b9:6b:50:68:
4b:c6:46:69:a3:a9:ba:bb:d5:69:ae:b1:bc:7d:7c:ac:d4:72:
0d:92:3a:65:ee:45:e2:78:7e:56:d5:bb:47:61:73:d4:e3:03:
d3:dc:c4:b9:af:25:59:e7:99:d9:f5:96:76:a5:45:f2:08:67:
92:b6:de:96:05:e0:84:c8:59:64:eb:c1:9b:1f:b1:89:46:aa:
c8:7c:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:09 2025 by rpki-client