Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier: ziSRiHbP/YTXTTN4Q0ErrcXHcy9BpCb1Cx/InsRjJ4s=
Subject key identifier: 44:58:0B:D7:DF:93:1A:B6:F6:8B:BA:07:B2:1E:44:4F:E2:9C:15:2E
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial: 0194BCA99885C133DB531022B4818E3D7499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number: 067B
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=)
2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: 38poZhRVNDb8oTCSd13v4tpyaOcJ0Vj5HZ9OZSG17Xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:98:85:c1:33:db:53:10:22:b4:81:8e:3d:74:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=44580bd7df931ab6f68bba07b21e444fe29c152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:1e:02:cc:4a:0d:54:24:bc:f2:00:26:12:
7c:e4:9a:66:ba:03:10:a1:50:fd:cb:8d:4a:6a:16:
8d:21:cd:6c:e8:0d:e8:3f:bf:0f:ec:1a:54:33:28:
f3:18:87:01:f8:6f:34:be:b5:46:5f:da:08:7a:d1:
7d:f3:b2:cb:e2:bf:fe:95:60:f5:00:1e:7b:b5:cf:
ca:c7:78:a8:ac:9c:2d:38:a2:2a:bd:de:95:73:78:
e4:b5:5f:98:99:8b:90:c5:f6:2e:e5:21:69:48:87:
12:5d:2e:4b:a4:41:3c:e8:71:cd:fa:48:71:29:94:
a9:f9:35:69:88:a9:17:28:86:d3:ab:78:2c:97:c4:
da:38:f6:45:42:9e:3c:b1:ae:29:ac:61:85:13:3f:
d7:f7:e6:8c:2c:57:48:76:28:a3:b3:79:a0:ac:0f:
52:76:6f:0a:82:fe:e5:4b:aa:35:02:bb:37:80:64:
12:b1:99:1d:83:97:4f:5c:65:33:20:02:0e:34:38:
cc:78:25:e8:a2:43:b0:59:89:f3:92:50:03:5b:e0:
c8:bd:99:28:21:d9:ae:bd:d4:fc:5c:22:4b:f3:f1:
72:e0:1a:f3:c9:f6:f2:1f:75:2e:4a:81:10:ac:15:
0f:6c:55:e8:08:e0:b8:8c:09:f9:27:cc:7c:6b:91:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:0B:D7:DF:93:1A:B6:F6:8B:BA:07:B2:1E:44:4F:E2:9C:15:2E
X509v3 Authority Key Identifier:
keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ac:9c:cd:10:c7:f1:d1:38:cb:cf:89:98:73:67:26:ed:b1:
f1:91:fe:a6:c9:0e:2d:0f:bf:2b:e0:76:dc:25:06:a3:b1:34:
3b:2e:f9:1a:21:f2:58:1f:a3:c0:07:b4:bb:ff:28:79:4e:dc:
e2:9e:9c:c9:fb:06:d9:16:77:a8:81:ee:30:77:03:c0:38:22:
d7:5a:bb:70:f9:78:41:b7:94:ff:2e:ac:23:bc:d7:31:30:db:
88:33:6a:8c:01:aa:2a:5f:5d:60:1b:71:af:70:cc:26:a1:35:
99:98:46:2b:48:89:96:3c:f6:02:56:07:39:b6:5c:5b:99:8b:
a3:93:a6:d4:49:ab:bc:e2:be:28:37:36:27:e0:1c:95:e5:51:
da:06:0d:b0:26:8d:79:06:03:17:87:85:18:ae:56:ab:48:5f:
d5:ca:61:d6:7e:00:53:ae:33:f6:2b:ee:8d:f6:1e:a6:10:03:
ad:23:a9:72:f7:6a:23:ed:5a:5b:f4:78:f2:9c:c8:93:45:e6:
d0:31:9f:e4:d3:66:7b:58:09:0c:cd:25:37:ef:ea:9f:6d:33:
0e:16:a7:a5:48:ac:fd:e3:5f:2c:67:10:1a:24:4a:24:fe:9c:
2c:3e:fd:20:a2:e3:71:15:46:0b:39:64:82:6a:a4:9e:f6:3c:
51:93:ad:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:29 2025 by rpki-client