Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier: Ti9I+g8tXoELw2tNvow8q/dixwIkcCgE6Or9uFlPPag=
Subject key identifier: 73:78:FE:CC:03:FB:21:8D:01:1E:8C:37:A1:9C:20:0F:FB:A8:F6:03
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial: 0194BC728B12D3C5A8194019A388F9F8B392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number: 0FFA
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: DM/EFi8w9n+mZClZgPKvIz69S+qqSXSL+fxQqtJ7iQ8=)
2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8b:12:d3:c5:a8:19:40:19:a3:88:f9:f8:b3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=7378fecc03fb218d011e8c37a19c200ffba8f603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:26:2e:ed:8c:e9:94:cd:97:f9:9e:58:65:
6c:e3:2a:82:1a:58:c7:08:95:69:ce:0a:60:1a:d9:
f1:df:7c:d3:25:79:00:0d:76:a1:17:cb:19:9f:c1:
c5:f6:ee:7a:49:98:ac:2c:3e:be:3e:cd:32:16:3c:
29:d8:cd:b2:d0:d1:17:50:fb:05:f6:49:25:68:13:
a2:83:e9:d4:26:e0:d0:15:3e:58:b5:c5:0d:dd:7b:
b8:47:13:b6:47:93:af:2c:15:01:8e:c6:a7:f1:76:
ae:f0:ac:4a:1b:7c:96:24:73:d0:f3:a5:c1:45:56:
5b:47:f7:4c:e5:80:a7:b9:df:1e:08:d9:73:ae:22:
14:18:cc:9b:8b:ed:3e:09:6a:00:71:ce:0d:4d:a9:
76:e5:b8:49:04:d2:a4:fa:3c:10:bf:c6:4d:0e:7a:
1c:18:48:b7:b8:9f:d4:20:98:8e:2c:3e:c9:c6:8b:
f7:77:c8:b3:36:41:37:18:d1:6c:3d:5f:b0:cc:20:
6f:e9:fd:7c:af:2a:cb:e4:97:8b:87:d2:8c:77:64:
6a:d1:17:07:f7:dc:99:83:bc:c5:88:e5:80:a1:db:
8e:c2:f3:76:37:8e:5d:1c:97:c6:76:ea:5e:ac:6b:
9b:8a:c3:af:83:8c:fd:87:fb:4d:68:e6:4a:8f:2c:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:FE:CC:03:FB:21:8D:01:1E:8C:37:A1:9C:20:0F:FB:A8:F6:03
X509v3 Authority Key Identifier:
keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f3:0b:39:26:76:33:fe:ef:4e:2a:8f:57:b8:70:5d:42:a5:
e9:c0:78:94:2c:45:d1:52:83:e8:df:cf:d2:31:31:9a:d6:59:
68:58:9a:56:bc:c8:41:98:fc:e5:47:c7:7b:f4:f7:bc:ff:ad:
e4:d4:e6:57:dd:23:a6:5c:d2:a6:5f:57:cc:c5:12:1b:43:6f:
a2:bd:a6:01:17:bd:f3:f5:ca:66:81:fa:eb:c0:45:21:19:ef:
1c:d6:6f:a9:81:c6:0d:6e:e3:bc:39:eb:9d:3a:96:6e:bd:a0:
80:e1:a9:40:63:33:6e:99:2e:c1:37:bb:bb:b5:15:29:c6:27:
d9:0f:42:a3:29:e7:1c:d6:13:13:13:b9:b0:a5:fa:62:ce:89:
18:0d:14:81:6e:8e:09:e3:50:f3:b3:cb:08:37:88:bc:4d:c7:
9a:cf:81:7c:31:5d:0e:03:d4:c6:84:23:61:40:45:bb:2c:d8:
88:64:88:29:a4:ce:61:56:54:f3:96:3b:97:50:92:bf:1c:e8:
fd:70:8b:83:de:be:12:63:fb:59:fa:4a:09:f0:67:0d:d0:5b:
ee:59:97:ee:d9:ff:f3:63:b6:8d:70:21:6d:d8:0c:6f:b1:45:
4d:76:54:17:22:90:00:7a:45:f0:08:d2:50:b8:c2:ad:3b:cf:
b2:54:1f:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cosS08WoGUAZo4j5+LOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzI2MDAyOGNkMmFiMWQwZTQzNzc0ZjQ0MDRkZWNkMjdh
ZWYzY2MwHhcNMjUwMTMxMTMwMDEwWhcNMjUwMjAxMTMwMDEwWjAzMTEwLwYDVQQD
Eyg3Mzc4ZmVjYzAzZmIyMThkMDExZThjMzdhMTljMjAwZmZiYThmNjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHsmLu2M6ZTNl/meWGVs4yqCGljH
CJVpzgpgGtnx33zTJXkADXahF8sZn8HF9u56SZisLD6+Ps0yFjwp2M2y0NEXUPsF
9kklaBOig+nUJuDQFT5YtcUN3Xu4RxO2R5OvLBUBjsan8Xau8KxKG3yWJHPQ86XB
RVZbR/dM5YCnud8eCNlzriIUGMybi+0+CWoAcc4NTal25bhJBNKk+jwQv8ZNDnoc
GEi3uJ/UIJiOLD7Jxov3d8izNkE3GNFsPV+wzCBv6f18ryrL5JeLh9KMd2Rq0RcH
99yZg7zFiOWAoduOwvN2N45dHJfGduperGubisOvg4z9h/tNaOZKjyx8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHN4/swD+yGNAR6MN6GcIA/7qPYDMB8GA1UdIwQY
MBaAFO3CYAKM0qsdDkN3T0QE3s0nrvPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt
ZmRjMjU4Mzc3MzAxLzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx
LzEvN2NKZ0FvelNxeDBPUTNkUFJBVGV6U2V1ODh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfMLOSZ2
M/7vTiqPV7hwXUKl6cB4lCxF0VKD6N/P0jExmtZZaFiaVrzIQZj85UfHe/T3vP+t
5NTmV90jplzSpl9XzMUSG0Nvor2mARe98/XKZoH668BFIRnvHNZvqYHGDW7jvDnr
nTqWbr2ggOGpQGMzbpkuwTe7u7UVKcYn2Q9CoynnHNYTExO5sKX6Ys6JGA0UgW6O
CeNQ87PLCDeIvE3Hms+BfDFdDgPUxoQjYUBFuyzYiGSIKaTOYVZU85Y7l1CSvxzo
/XCLg96+EmP7WfpKCfBnDdBb7lmX7tn/82O2jXAhbdgMb7FFTXZUFyKQAHpF8AjS
ULjCrTvPslQfhA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:51 2025 by rpki-client